Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: AfsgOI/KqnVCIKQlOuf2YUul5uPwKN9FSHhTqyXzAwA=
Subject key identifier: BB:64:A5:A0:1D:6F:94:4C:18:03:9E:08:5B:D3:89:45:AF:CA:A9:65
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 0197B89005C062CD1B62784B150FDBD4E20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0D19
Signing time: Sat 28 Jun 2025 22:02:15 +0000
Manifest this update: Sat 28 Jun 2025 22:02:15 +0000
Manifest next update: Sun 29 Jun 2025 22:02:15 +0000
Files and hashes: 1: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: zwJnZty+Bz+J259Yr832wCLvLY7Uou8tA+jgBIY2Vl4=)
2: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (hash: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=)
3: ouo267dSlLznMI9vKQqz-AZYNWg.roa (hash: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:05:c0:62:cd:1b:62:78:4b:15:0f:db:d4:e2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Jun 28 22:02:15 2025 GMT
Not After : Jun 29 22:02:15 2025 GMT
Subject: CN=bb64a5a01d6f944c18039e085bd38945afcaa965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:dd:7e:2b:81:7c:37:17:1e:fa:b7:8d:49:
a6:48:f5:52:cf:85:00:f9:53:a3:46:d5:17:40:3d:
25:1e:9e:28:b8:aa:36:eb:ee:ac:87:c1:40:0a:63:
d6:46:36:44:c0:4f:80:6e:e2:a0:72:4a:98:fc:93:
44:4b:f6:c8:f8:43:2b:06:b1:d4:16:56:e3:8a:a1:
c6:11:bf:c0:f1:45:c2:4d:1b:e0:53:12:cd:cf:f4:
68:2a:20:99:91:67:1b:47:ce:db:5c:77:81:c1:f9:
81:e1:4c:b2:ee:2a:10:d1:6e:db:78:83:1e:b9:db:
8e:0b:21:ed:58:6c:ba:50:6c:fa:66:4f:23:9a:53:
1d:67:86:53:cf:6a:e9:96:ac:6a:02:f3:f1:60:24:
15:e4:07:09:13:9b:48:72:01:5e:1d:7d:0a:c2:74:
5b:08:c0:73:5e:43:1e:f4:1e:c0:58:69:04:3a:07:
b5:f7:4f:26:45:0f:f4:c5:ad:46:a4:82:27:5e:9e:
1f:15:eb:c7:c0:63:b0:de:b1:7c:82:6e:f9:3f:ea:
77:c0:1f:1b:a8:b0:52:f0:36:43:d6:a5:32:45:7e:
0e:e2:ab:bd:b6:c1:cd:63:ab:85:c4:ca:33:5e:f7:
51:89:33:90:57:bd:af:30:fd:ea:75:ba:23:2f:ed:
7f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:64:A5:A0:1D:6F:94:4C:18:03:9E:08:5B:D3:89:45:AF:CA:A9:65
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:60:07:63:52:2a:e3:f5:d2:d6:71:08:91:16:de:ed:f8:a9:
a7:38:e8:ca:fa:44:61:ca:ac:65:4f:56:cb:2c:73:8b:a0:8b:
e8:a4:4e:ac:18:3c:a6:ea:cf:57:ee:e2:e1:da:85:b4:40:56:
c4:68:05:0c:e7:f1:f4:4b:f4:8e:ab:a5:05:1f:86:f6:15:67:
a3:32:4f:ea:06:1e:a3:e3:41:8f:37:67:23:12:4e:7f:c7:c3:
eb:07:ab:4b:dc:d7:9f:19:f3:32:1f:62:b1:b5:73:86:a6:9b:
85:71:ce:90:c0:0b:0f:2a:2e:a6:2e:57:b7:88:aa:81:33:0c:
74:26:95:bc:8c:44:90:10:15:da:99:07:42:df:e1:70:d8:dd:
ba:99:03:94:a4:91:ab:f1:19:56:e4:12:60:f7:da:a5:cd:0d:
97:12:43:7d:86:15:c5:f7:d4:d9:04:22:7e:83:3c:18:d9:43:
be:6b:7d:c6:cd:6a:68:18:0f:57:82:06:9f:6c:03:6d:11:74:
b8:3a:49:24:3f:98:ea:98:5d:c4:1a:e1:6b:d4:8e:ed:60:c9:
0f:43:5e:85:28:c1:4c:07:b3:52:d4:c9:1d:c9:f6:fc:57:5a:
84:32:f2:07:45:4a:07:88:c2:4f:da:4d:28:57:87:fb:e3:77:
96:8d:15:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:58 2025 by rpki-client