Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier: Y8DN/wwtjH17UPV7QqsE6BrcOtkooX2U4VaPVC8fUOY=
Subject key identifier: A3:C6:E9:E7:1A:7F:8C:30:C7:64:87:65:EB:20:D3:01:90:32:39:44
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 0197B6A1E0DFF536620B0F29B796CD84AFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:31 +0000
Manifest this update: Sat 28 Jun 2025 13:02:31 +0000
Manifest next update: Sun 29 Jun 2025 13:02:31 +0000
Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: qXPjzb0WaLqgxq/f6OlcZtwPx4lAls8uqqZrzFOEYMU=)
2: rEnYgfgJaCjn_qIROc2RziotFd8.roa (hash: tyTMLNN1BSIUG9pwd6OlkaqCcb+yNG9RgWzpF+pWE60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e0:df:f5:36:62:0b:0f:29:b7:96:cd:84:af:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Jun 28 13:02:31 2025 GMT
Not After : Jun 29 13:02:31 2025 GMT
Subject: CN=a3c6e9e71a7f8c30c7648765eb20d30190323944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:54:b5:3c:b7:c2:b9:c1:0e:33:c0:a7:f6:
24:ea:0d:0d:aa:af:b1:e4:25:e6:3c:ef:f9:40:0f:
69:85:17:44:c8:97:cc:f1:27:b4:a1:c5:f2:4d:44:
3c:c0:08:29:0e:65:a9:b6:e5:e6:c0:1d:ed:45:59:
14:04:15:c2:f9:fc:b4:1e:3d:25:d9:a4:25:5f:63:
b9:ec:7c:36:c6:6f:92:2f:50:50:4f:41:89:47:0e:
d5:f1:be:9b:fc:a8:dc:ab:05:d2:06:af:02:f0:9e:
b7:5c:37:f4:d3:c6:b5:13:ad:07:63:4b:6a:5a:29:
9f:ad:04:92:59:1c:df:f2:bc:58:7d:9b:d8:bd:8d:
8e:55:25:c9:78:47:64:67:af:dc:1a:70:da:4e:d9:
d9:0e:45:23:88:a8:86:dc:2c:7a:a1:c6:d8:0e:af:
88:52:38:b8:c0:b4:23:82:7b:3e:b0:3a:07:8b:70:
c6:f0:b7:9f:8c:b7:fb:c1:81:04:e9:d7:5f:fe:f0:
2c:99:64:4b:97:ca:6c:12:f3:14:e3:85:41:b0:b7:
90:ff:6b:8e:e5:93:06:72:46:01:64:19:19:6b:6e:
78:34:d4:e6:31:4a:43:ce:e6:3c:26:3d:5e:d2:32:
5d:67:d7:d8:00:35:bd:39:e5:88:d8:c4:d8:f0:39:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C6:E9:E7:1A:7F:8C:30:C7:64:87:65:EB:20:D3:01:90:32:39:44
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:27:1f:7a:3c:e2:ea:d0:5c:cf:98:48:7c:f5:a0:b3:c0:0c:
66:a0:b7:0c:8f:28:d1:dc:0b:7b:a4:f0:4b:f4:7c:61:93:49:
b1:b2:fc:4c:b6:4a:fc:5f:ec:11:99:8c:d3:82:8b:ff:3c:96:
90:0d:26:67:24:82:59:ad:eb:9e:cf:b3:ca:4e:ba:86:1b:f9:
33:a2:9e:0e:2c:4f:53:40:03:e4:2f:0f:43:3e:58:78:8c:ff:
48:c3:f7:c1:93:3a:c5:64:a1:2c:8e:f7:68:15:21:61:de:cb:
09:50:17:d5:99:57:da:13:0f:8f:08:cb:11:06:33:46:85:05:
9a:49:4e:af:6e:e3:77:44:2e:42:d4:ee:7f:9f:5a:db:58:31:
0f:ad:ba:05:9a:65:6e:15:36:92:39:76:87:24:a6:9b:ed:6c:
ed:f3:d4:97:80:d0:62:28:95:e0:1b:80:32:3b:47:7e:8a:43:
04:17:71:a1:71:0b:44:73:8e:18:1b:c2:8d:5c:5a:f0:7f:fd:
cd:b2:61:d3:12:81:b0:04:d1:f0:86:3b:c2:2c:74:ed:dc:6c:
31:af:b5:75:c1:cd:78:6d:96:07:0c:8d:bd:40:5a:65:1e:83:
5e:89:60:f7:ef:63:12:d7:40:d8:ac:69:0c:9d:59:98:78:50:
1e:dc:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:54 2025 by rpki-client