Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: rsiEFow8XunzzrY4aWgZ6Rgi5Qj8aCJBjfo7RwXSyaw=
Subject key identifier: EF:D1:0F:A7:B1:DE:F1:89:52:10:75:7D:B0:C2:8C:38:EC:F6:BB:76
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 019770E3158ADA370FBCC0C56E556FCDE9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 00:00:19 +0000
Manifest this update: Sun 15 Jun 2025 00:00:19 +0000
Manifest next update: Mon 16 Jun 2025 00:00:19 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: vwdUM2mvWz9DLR9K+EafAHQf+KOE6YIa1PQJnGuUeWY=)
2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:15:8a:da:37:0f:bc:c0:c5:6e:55:6f:cd:e9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Jun 15 00:00:19 2025 GMT
Not After : Jun 16 00:00:19 2025 GMT
Subject: CN=efd10fa7b1def1895210757db0c28c38ecf6bb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:00:f2:3c:9a:06:05:ef:f5:56:7c:b1:88:
c4:25:55:2b:d4:7c:a8:53:cc:17:27:c3:23:0f:65:
de:88:b4:f3:64:ed:eb:de:9a:f8:e3:42:4d:a8:1c:
f8:86:e2:6e:a7:1b:b6:9b:24:a7:c6:34:08:a3:d8:
78:fa:b5:7d:36:be:89:3e:df:e0:50:f8:e7:91:a8:
8b:f6:d4:6d:09:b6:8d:bb:e1:9c:eb:a0:9e:6e:a5:
28:35:5d:47:12:17:c8:ac:de:9f:a2:cd:6e:87:cd:
5a:ac:5e:43:44:61:3d:e9:da:04:ac:34:ab:10:8d:
35:8a:8b:26:51:e9:68:89:5a:5f:27:5e:3a:42:26:
a0:56:ea:b2:bb:28:0a:17:36:c7:5a:f8:64:c0:4b:
b6:b4:61:b7:c7:e7:d2:b2:7b:5c:e7:7a:9a:ec:c8:
03:c6:3a:f7:5b:86:63:50:1e:76:7f:97:f0:4b:46:
cb:5b:a8:77:f1:db:7f:23:1a:a6:0f:51:44:7b:b8:
f5:0c:90:80:2f:5f:9f:f1:53:4d:85:8a:e0:57:d4:
14:d0:b7:b1:e3:47:b1:2a:14:0b:ad:10:27:04:45:
7b:1e:f9:c2:cc:1d:87:aa:d7:21:dd:90:fb:e8:d3:
05:f1:24:da:76:24:6d:b8:42:b3:4b:85:08:94:6f:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D1:0F:A7:B1:DE:F1:89:52:10:75:7D:B0:C2:8C:38:EC:F6:BB:76
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c3:ee:d1:3f:56:0d:8f:ec:63:26:e8:8d:0d:57:79:60:12:
89:59:7d:62:5a:90:89:65:af:9b:90:24:ba:bf:58:f7:8f:2d:
59:6d:db:18:ba:1e:22:91:5a:eb:d6:ae:98:c9:ba:d7:5d:63:
5d:81:94:2a:c4:d5:1c:7e:45:41:1e:d8:8b:13:fb:94:f4:18:
3d:ea:b5:c3:2f:80:6f:25:de:5f:11:4a:83:de:ae:45:9f:a7:
e7:3a:7e:5d:fa:71:0f:d4:99:0a:6f:39:4a:95:0d:6e:47:00:
86:76:d8:ba:55:a4:ca:f8:9b:a1:c9:1a:e8:59:d2:2d:66:fd:
74:da:bf:dc:5e:73:c6:6e:d7:f9:05:b1:f5:d0:43:47:d5:dc:
67:91:c2:14:5f:22:fc:9d:c0:88:c3:1e:ff:10:9b:92:c4:40:
67:44:8f:42:52:60:af:76:51:30:19:3f:6a:23:aa:92:a3:ff:
6c:b5:80:2e:ed:3e:60:99:07:89:88:70:ee:0b:0c:d7:e0:d2:
f2:ae:d8:56:f8:40:30:de:cc:61:72:21:86:86:fc:e9:48:5f:
5f:10:a6:1e:0b:71:94:1b:69:e5:e8:e0:79:47:25:61:8a:1c:
11:b4:7a:cf:ba:e8:31:99:f3:bd:49:98:b8:cc:73:0c:78:f1:
17:aa:ce:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:10 2025 by rpki-client