Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File: FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier: cfFpdyNQUiVhZI6O/ygNOZUC+B+PLnPXlUd8qfLEQGE=
Subject key identifier: 0E:E8:DB:B1:23:DD:FF:60:B4:A9:33:98:4D:52:B8:E4:67:5F:F2:7C
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 01977E68084E2CAEBCA9CA11D1FC7ADAE074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 15:00:36 +0000
Manifest this update: Tue 17 Jun 2025 15:00:36 +0000
Manifest next update: Wed 18 Jun 2025 15:00:36 +0000
Files and hashes: 1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: cuixjJqz3MQY11mr3GHoNqF+o8rmhQBA06kcKaKGo+0=)
2: GeEhJpkO5WEp0V80xW7FkFa1oZU.roa (hash: JmYppaSBdSTenAfyN0elIx7FE9TqEQ3u8bLv/x+0br4=)
3: nGeZMPiJHuxTp5r7-LPyVgsD0PU.roa (hash: l7oDkA0XjfZYSaNEYHxPZ+fCmO92nea2c0B83OBtIh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:68:08:4e:2c:ae:bc:a9:ca:11:d1:fc:7a:da:e0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Jun 17 15:00:36 2025 GMT
Not After : Jun 18 15:00:36 2025 GMT
Subject: CN=0ee8dbb123ddff60b4a933984d52b8e4675ff27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:90:7f:4f:85:3d:ba:88:fd:63:6c:66:38:
92:ed:4d:eb:48:ed:d6:3e:71:a2:2b:1a:00:8a:fe:
8d:0d:ea:ad:67:46:ef:ab:09:2b:33:82:c6:18:cb:
5e:97:f0:62:40:e9:8f:7d:26:46:ab:e8:a4:4a:66:
bc:63:23:4e:ff:72:82:35:cd:f8:32:3e:83:6e:cb:
ec:10:50:20:b2:19:17:5e:e4:d6:1b:57:43:25:90:
fe:99:37:0e:07:c6:74:bb:18:ca:a3:83:ba:a1:08:
e5:48:77:86:f8:0e:d0:cb:c9:2e:76:f3:7e:00:29:
57:b8:28:6d:7b:17:09:c3:a5:32:9f:64:95:be:25:
8d:b6:6a:3e:fc:10:0e:df:a9:c8:a1:f7:3e:e1:e5:
0b:0e:3e:b9:91:ef:fc:b4:22:c8:af:74:9f:1d:43:
22:7b:bb:c0:63:f0:d1:fb:ef:72:ab:b8:f3:75:11:
1e:b1:3f:9a:f6:29:97:b3:27:9a:c3:f0:6a:ed:b5:
a2:eb:5c:0f:71:d4:00:0a:ff:14:6e:ab:84:17:bb:
a9:82:ae:a7:87:f6:35:bf:bc:35:e1:35:58:9e:f9:
7f:b5:6b:46:dc:06:90:d9:a3:1e:57:6f:c0:a7:72:
8a:19:56:b8:b4:a8:a1:c3:1f:c7:e4:f3:8d:a8:c3:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E8:DB:B1:23:DD:FF:60:B4:A9:33:98:4D:52:B8:E4:67:5F:F2:7C
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1a:6c:87:e7:67:10:3e:5e:43:1b:56:d2:95:c6:56:4b:c4:
2c:a8:d5:24:ca:90:f3:2d:f9:01:e2:1d:fd:89:4b:66:1d:ab:
f8:9c:72:04:93:69:7f:97:11:72:b9:09:0b:fb:6f:b9:f8:91:
99:92:a3:ba:e9:03:20:82:c3:ce:d6:77:93:8f:d7:ec:37:dd:
7c:3f:4e:5e:4c:c4:23:92:82:b9:26:90:cc:88:3a:ea:20:c0:
82:23:7a:33:7f:23:c1:00:2d:70:47:b1:ac:93:b1:53:bf:f8:
8e:c7:e8:07:e4:39:de:4e:0f:6a:54:32:db:86:b5:31:c0:83:
bd:b5:8d:71:07:31:c8:96:24:c8:26:e0:55:a2:f1:66:31:0e:
71:37:58:ac:6f:09:65:de:f5:2b:72:4d:2d:a7:b0:f0:c3:dc:
6c:b2:73:a2:bd:8a:81:9f:52:f1:9e:bd:6a:51:45:7c:d2:60:
ab:05:66:85:8b:b2:d7:f0:bb:9f:84:4b:8c:d5:74:ae:9c:6e:
22:42:b2:c0:37:84:6b:ef:ed:7e:b2:a2:d4:b6:d0:f3:11:54:
e4:6b:4e:a3:75:1d:6d:94:84:87:a4:8e:c7:66:a6:f4:b6:81:
30:1d:db:4d:3d:29:0c:c4:e0:20:14:04:8d:3e:e9:40:1c:4d:
0e:99:51:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:03:34 2025 by rpki-client