
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: 5lxOjkXXtd4yIpRvDCM5598oLEdAWBZHdZ/YMa1jok0=
Subject key identifier: 56:B9:A9:62:80:D7:43:1E:43:2C:C5:1F:91:0E:37:55:BF:AE:54:D4
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 01976F2BB53976279351B3B5FCC576D706AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 0E7C
Signing time: Sat 14 Jun 2025 16:00:24 +0000
Manifest this update: Sat 14 Jun 2025 16:00:24 +0000
Manifest next update: Sun 15 Jun 2025 16:00:24 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: 0JAGydvwidJRpo11FTEW/P/HjRZgGi5v4mgsZdJw+B0=)
2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=)
3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:b5:39:76:27:93:51:b3:b5:fc:c5:76:d7:06:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Jun 14 16:00:24 2025 GMT
Not After : Jun 15 16:00:24 2025 GMT
Subject: CN=56b9a96280d7431e432cc51f910e3755bfae54d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e0:1a:91:a8:c6:dd:7c:05:65:62:2a:0f:7e:
45:19:2a:96:78:e5:bb:f6:a9:e5:9a:69:e1:57:08:
ef:ba:3b:01:42:f8:33:3e:2c:01:93:99:f4:55:5c:
23:e8:f3:a9:7a:45:ee:70:82:b9:8f:d9:f8:5f:63:
86:1c:30:5d:26:fb:83:30:f6:e6:d6:b3:19:a6:6b:
9b:dd:41:17:35:27:a2:74:bc:73:9e:32:c3:2f:02:
89:ab:93:43:ea:91:a7:50:e2:a9:73:29:83:b6:e1:
e9:8f:03:f6:48:27:ce:f5:fe:6e:03:5b:9a:a3:52:
75:4e:f2:35:8a:56:58:99:6d:e4:82:cf:f0:58:39:
fd:36:0c:7f:a0:67:73:30:f8:2f:fb:ad:fd:36:c3:
fb:c7:51:9e:18:b2:f3:08:bb:d4:ab:66:6f:8b:41:
af:8e:ce:c7:89:12:55:61:9e:25:bf:38:6c:5e:9a:
a5:27:e5:ed:fd:b4:7a:5d:43:9e:91:0f:20:14:bf:
ee:bf:d6:a1:9b:09:28:8c:3a:b8:05:fe:38:05:97:
17:f1:53:f6:62:f8:55:c5:4d:73:0b:23:45:5b:16:
0d:44:1c:42:de:7f:b2:4e:c0:35:cf:77:d8:dd:62:
2f:53:c8:ce:e4:4a:f8:49:43:12:64:53:16:a8:ba:
f3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B9:A9:62:80:D7:43:1E:43:2C:C5:1F:91:0E:37:55:BF:AE:54:D4
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:37:1e:64:83:32:74:d7:f4:3e:43:e0:fc:78:bd:79:c7:66:
4a:de:01:aa:27:6d:87:80:72:c2:97:0b:cf:6f:a4:02:ac:71:
6a:c7:71:4c:2a:fc:2c:2e:37:6c:e3:1d:05:8b:05:1e:fa:2d:
6c:de:74:0c:d8:f1:20:47:18:f5:72:a1:56:e7:18:33:83:1c:
a1:b0:7a:de:b1:74:12:21:12:da:71:04:f3:ac:55:68:b4:ad:
c2:ae:07:2b:b2:ae:71:da:42:a5:2e:f8:9f:6b:c3:64:25:24:
e2:5a:d9:61:ba:03:ca:6a:53:53:54:c2:be:d3:13:f2:f2:e2:
1b:13:7a:73:41:e9:40:cd:e5:db:40:5a:99:95:2c:a9:24:e4:
be:21:39:64:f2:6a:0d:c6:43:55:d1:60:52:6c:5b:76:30:8d:
d0:53:ca:71:20:a9:8e:97:3b:1d:4f:4c:86:05:f8:8e:ed:7d:
ca:f0:22:17:86:0f:9a:33:49:a6:d4:6d:6a:57:a4:63:f8:e8:
e6:45:92:20:1e:32:85:fe:e1:79:03:08:e7:75:aa:77:87:56:
6e:14:11:7a:26:4b:e1:b5:e4:56:81:14:29:e5:71:b4:60:89:
e4:5a:22:82:88:44:bd:a3:39:5d:12:5a:f3:53:be:56:59:d4:
dc:12:fc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:18:27 2025 by rpki-client