Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
File: FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft (raw, json)
Hash identifier: 94BeunYa0ZhNaCFJh9UQHxYDJyT052pOh6JM4+3XaOc=
Subject key identifier: 85:D9:B1:12:FC:C0:2B:8E:EA:1C:DA:75:0A:AC:B7:32:80:2B:73:23
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Certificate issuer: /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial: 0197B5FBD2A282FD366100CC8482CDA10387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 10:01:08 +0000
Manifest this update: Sat 28 Jun 2025 10:01:08 +0000
Manifest next update: Sun 29 Jun 2025 10:01:08 +0000
Files and hashes: 1: FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl (hash: wxc7styertLgdfGBZZb1ACQVgaPwyNoK+ydeeidcoJ0=)
2: VUbDzg-9AyYevbePTrpEdiRqwN4.roa (hash: t4/eKGmP5PXlxUDXBzE6y3aXXoUIuyqOs01O0kBzip8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:d2:a2:82:fd:36:61:00:cc:84:82:cd:a1:03:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
Validity
Not Before: Jun 28 10:01:08 2025 GMT
Not After : Jun 29 10:01:08 2025 GMT
Subject: CN=85d9b112fcc02b8eea1cda750aacb732802b7323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:34:b8:05:b2:98:cf:13:8e:24:e6:49:5f:
41:d7:2c:ee:b0:c0:f7:66:ff:47:06:f3:21:01:8e:
e5:18:3d:ee:4a:a8:8d:9a:81:23:22:89:0f:3e:9d:
7f:dd:a4:44:d7:db:cd:38:00:14:8a:57:aa:83:01:
63:fc:3f:4b:42:52:3a:c6:76:fa:3e:b3:ea:38:a1:
3c:78:e6:80:e8:83:3b:66:06:e4:b7:5b:8c:e3:38:
f9:b7:f8:52:04:cb:94:67:e8:d9:d0:d5:1d:be:5a:
2a:df:5a:c4:e7:b2:4c:d9:c6:51:a7:ff:fa:8e:ac:
08:48:45:15:9d:2d:f9:44:f4:02:43:96:d2:6e:5a:
7e:a2:df:ad:46:b5:55:b1:48:af:a1:75:d9:b7:a0:
76:f4:81:f7:f9:80:a9:cd:65:1e:16:7d:bf:34:80:
bb:4e:d7:40:3f:77:a3:54:bb:9f:8e:a4:d5:64:41:
f1:ca:ad:79:a1:8a:39:10:da:60:83:c1:1c:3d:0e:
a6:d8:c9:11:b7:ba:8c:cf:72:92:f6:3f:c0:1c:05:
00:b0:f8:c9:73:a2:88:18:fe:42:93:c3:c2:6f:be:
b3:32:18:ec:42:7b:d4:47:0f:f9:78:34:d9:b8:4d:
0a:34:63:b5:88:a3:74:1d:83:42:0b:13:20:ea:74:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D9:B1:12:FC:C0:2B:8E:EA:1C:DA:75:0A:AC:B7:32:80:2B:73:23
X509v3 Authority Key Identifier:
keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:38:09:cd:8f:63:75:ad:87:20:6e:20:a8:56:20:21:fc:ae:
b5:19:d0:09:96:56:61:bd:26:8f:4f:24:2b:03:67:f4:62:4c:
cd:f3:4c:f8:1b:20:5b:82:a0:11:73:04:84:ec:51:ad:61:c6:
ce:98:ff:2a:fb:8d:81:28:c6:68:eb:85:bd:50:0c:e3:95:3c:
27:c6:d6:86:69:c3:c1:13:99:b7:ae:76:28:48:13:1b:98:5f:
5f:53:b7:e8:d6:2a:64:b1:cc:3c:94:be:72:52:6a:57:35:6a:
c5:be:db:25:e1:3c:91:77:fe:a6:cc:6b:55:43:14:f2:54:6e:
45:b3:63:a9:d9:78:b0:e3:04:67:5e:fa:90:91:89:89:4e:5b:
fc:ba:fd:4b:86:4d:da:c7:35:75:bd:3c:b7:eb:b9:fb:bf:a1:
3d:10:44:c9:6a:26:8d:bd:05:7e:0e:8c:94:6f:14:a1:c6:1a:
91:15:56:77:24:28:6d:36:e9:42:95:f5:92:bb:74:da:75:21:
fc:04:12:df:94:74:ac:53:c3:c7:6a:4a:11:35:9d:58:e8:4f:
3b:89:48:de:e0:47:f3:09:d0:6a:9b:23:fb:75:bf:ae:5c:a6:
5a:f6:de:e3:92:18:90:75:a0:ee:52:9c:11:29:25:db:bd:3e:
8e:43:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:38 2025 by rpki-client