Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
File: FnhcBIzz1bIYafSUNPLTu0fUO6E.mft (raw, json)
Hash identifier: qp+bpf/0e1X/sv8eh7wFmJN3To+DlSW0AXveqj2unaU=
Subject key identifier: 26:3E:32:87:56:EF:60:6F:DD:6D:10:49:23:67:9A:DA:50:9D:E2:09
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Certificate issuer: /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial: 019773E4D79F3E99197A819FAD8D6A70C9D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
Manifest number: 148F
Signing time: Sun 15 Jun 2025 14:01:06 +0000
Manifest this update: Sun 15 Jun 2025 14:01:06 +0000
Manifest next update: Mon 16 Jun 2025 14:01:06 +0000
Files and hashes: 1: FnhcBIzz1bIYafSUNPLTu0fUO6E.crl (hash: 7JSzEUjq3NeHw2fQxzC5Lyms+8gRl40+jpwCNjLWYKw=)
2: wq-sbK6wZCslTg-KQk0eohj20JY.roa (hash: dIwNqBJjOyWxVd+rD1dPAAWpwiNwWE2sUgy3A31jXAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:d7:9f:3e:99:19:7a:81:9f:ad:8d:6a:70:c9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Validity
Not Before: Jun 15 14:01:06 2025 GMT
Not After : Jun 16 14:01:06 2025 GMT
Subject: CN=263e328756ef606fdd6d104923679ada509de209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:18:5e:5c:25:16:a6:22:d2:0c:e8:83:a7:
5e:0d:a1:78:c1:85:5a:c7:03:61:f2:0c:ac:91:46:
8e:c4:46:a4:c3:0a:64:d3:23:28:55:42:b2:4f:ef:
75:a1:4d:11:5e:e2:a7:09:10:eb:2c:d6:cb:eb:c5:
fd:62:be:af:e6:36:64:d2:36:a6:72:af:8f:40:08:
58:a3:38:04:fa:60:71:ee:4e:f7:21:12:ed:31:84:
62:50:de:07:b5:ce:9c:29:e4:62:cc:ea:96:71:f3:
81:8a:83:7e:68:30:ec:b3:7e:f8:76:4a:cd:30:36:
3b:c2:b4:57:8e:a8:52:6e:fd:64:3c:bb:28:f5:97:
cd:62:f7:a9:6e:76:0f:b8:6d:81:30:a3:83:04:f0:
b3:48:13:62:01:45:7e:26:2a:d2:ca:78:29:2b:8f:
78:8f:b5:16:de:46:d9:38:74:ec:7c:21:a2:34:c3:
1b:db:f8:a5:e4:73:a5:37:04:64:a4:7c:a4:39:ed:
12:10:2f:12:8b:66:f7:ec:bd:eb:45:88:f8:67:5a:
a7:16:97:19:ba:ed:e4:aa:7c:68:5c:77:de:16:aa:
45:0d:11:26:f3:14:c6:ec:6c:b5:94:38:17:8b:22:
cd:8f:31:1f:91:72:41:72:79:81:e4:31:ec:90:ef:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3E:32:87:56:EF:60:6F:DD:6D:10:49:23:67:9A:DA:50:9D:E2:09
X509v3 Authority Key Identifier:
keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ba:3b:26:06:e9:1e:06:c7:e7:81:80:49:21:f4:b1:88:0f:
9c:25:5d:50:34:fc:e8:a5:ac:48:f4:ad:be:96:50:3e:3e:13:
02:ca:3c:40:5f:4a:06:2e:8f:11:d1:2f:45:6c:ba:91:5a:ad:
1a:f1:98:b8:70:d1:84:ca:94:4e:4b:18:05:5a:05:ec:37:d7:
d9:1a:c5:c4:57:98:d3:85:64:91:49:92:4e:96:09:d4:7c:b7:
83:af:11:a1:c4:f8:82:27:4e:c8:3a:c0:f8:4e:0a:82:eb:6b:
68:e4:25:2a:1d:b9:cd:39:b4:93:d3:69:35:b8:33:cd:38:31:
01:88:8b:be:3f:9f:fb:ca:b2:72:28:ed:85:91:03:3c:2b:1f:
1d:9f:37:5b:97:ad:a6:bf:92:c1:c5:95:f4:8d:47:25:1b:44:
6a:fd:53:f5:e0:7a:76:c0:b5:bc:dd:cd:ae:49:a0:58:ca:51:
0a:67:19:21:93:a9:90:78:4e:27:bd:d6:62:79:e2:8d:f5:3f:
ac:77:ac:20:fb:7c:57:d1:45:81:93:4d:40:43:fe:e7:69:58:
f1:d9:c0:22:44:48:74:fb:83:cc:cb:c5:06:3d:b5:cc:d7:af:
a8:d4:48:b5:52:94:7d:ec:37:23:0c:94:b4:39:20:f2:a8:8c:
b9:d3:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:27:37 2025 by rpki-client