Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
File: FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft (raw, json)
Hash identifier: /HajbznXaGUR7xzt2eu4mZ6jRWawGphVHjmBjaiGYgU=
Subject key identifier: 85:4A:4E:EA:47:E7:FD:90:21:D1:D3:A2:20:9A:45:90:F2:1E:6B:73
Authority key identifier: 14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
Certificate issuer: /CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Certificate serial: 019769CEB89703FD1F7DB7B8A617AA339E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
Manifest number: 0985
Signing time: Fri 13 Jun 2025 15:00:44 +0000
Manifest this update: Fri 13 Jun 2025 15:00:44 +0000
Manifest next update: Sat 14 Jun 2025 15:00:44 +0000
Files and hashes: 1: C5kS-eXFEoRGhSGKrj1aky_A-YU.roa (hash: 0Cexvh0L+qwpqym6REc7bvetIUnS6MiKORaDRSgSxQo=)
2: FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl (hash: zMBeeUoiASom4K9fHCcjVpEz3+tLD8pr3pSinZ5uafA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:b8:97:03:fd:1f:7d:b7:b8:a6:17:aa:33:9e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Validity
Not Before: Jun 13 15:00:44 2025 GMT
Not After : Jun 14 15:00:44 2025 GMT
Subject: CN=854a4eea47e7fd9021d1d3a2209a4590f21e6b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:87:a5:63:c1:bc:5d:9e:86:48:08:c3:f3:
46:ff:4c:c4:b7:a0:f5:13:b9:7a:94:35:ee:9f:ef:
78:92:bd:17:fd:02:cc:02:26:75:2b:db:7f:90:b2:
b8:ee:df:ee:aa:c8:d0:ba:1c:b9:6f:a1:0c:41:c3:
bc:e6:b4:a4:50:8e:97:b6:8b:26:7e:6a:e3:f5:10:
d2:99:aa:8d:62:7c:d7:ed:5b:53:6f:7c:32:d9:b8:
c3:d9:b4:aa:8d:b2:86:61:60:47:57:96:f3:87:96:
d3:ec:3d:46:89:4b:69:92:d3:c5:33:67:62:32:87:
a7:3d:95:b1:bd:13:3b:47:94:6d:d4:56:f0:35:3a:
ea:13:40:41:f4:61:68:12:c8:5e:18:13:43:54:69:
58:b4:63:46:03:32:39:9a:3f:3e:4e:08:e7:87:4f:
8f:d5:92:80:5e:03:d3:ad:f7:13:c6:45:3c:56:17:
67:44:1b:1f:3b:45:70:0e:9d:de:2b:a2:47:6c:61:
b8:d0:b7:25:84:be:ff:d1:11:00:a2:14:08:ca:d7:
f0:19:dc:ff:2a:aa:fe:46:4a:52:67:b2:7f:87:90:
86:c6:97:db:6b:5a:ad:43:62:2d:7b:1b:21:da:36:
2d:d9:a0:7c:40:18:d6:73:af:2a:f3:26:ed:e8:d6:
04:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4A:4E:EA:47:E7:FD:90:21:D1:D3:A2:20:9A:45:90:F2:1E:6B:73
X509v3 Authority Key Identifier:
keyid:14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d1:7e:75:4e:80:ed:96:29:27:1d:cb:16:8b:68:ba:30:93:
d2:4d:36:d6:3b:40:ee:aa:b4:cb:a4:c7:92:98:9d:90:9e:1c:
ab:ad:d2:28:f2:d0:01:a3:6a:1d:c2:42:ca:12:64:27:57:2f:
8e:1b:d7:7b:b6:f2:e1:7b:79:67:ac:53:6a:79:09:39:de:8a:
db:13:6a:c9:c5:6d:b2:54:62:35:71:17:2b:2e:87:f4:4f:d4:
29:a6:9c:6e:e6:f5:7d:96:02:c3:0e:08:d1:b2:b7:f3:85:2a:
df:7a:e8:18:a9:48:77:f2:60:73:21:d1:ee:03:d3:3b:4e:28:
b3:84:13:ac:0e:1b:01:7f:8f:38:ca:e6:a4:32:39:19:87:70:
e9:c3:40:48:43:d8:35:46:d0:d3:a0:50:20:e1:a0:ca:b4:30:
f8:56:a4:38:67:f7:be:2a:49:8c:6d:8a:da:bf:51:68:db:96:
96:fb:05:12:53:25:19:83:8f:fd:9d:11:83:2e:a9:1c:42:c7:
de:f2:e5:a0:52:29:ed:16:9c:40:5c:94:6c:a5:ed:1e:73:f5:
83:2d:48:2f:c2:c4:17:6c:14:71:b9:70:3e:3d:f1:69:14:36:
68:1c:c8:24:1a:85:24:11:14:ea:49:60:d9:ec:5c:6d:a4:7b:
a4:17:dd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:45:59 2025 by rpki-client