Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
File: FqBO4EsSgj6FP_JD02VR5M5oOnM.mft (raw, json)
Hash identifier: hBmPyMaYo5liT0A/hyULrBwtN/vjbpSRo3vvfd/SPWk=
Subject key identifier: 8E:16:59:10:4C:B2:A6:FC:F4:1A:21:54:B6:A8:68:7C:45:96:F9:B2
Authority key identifier: 16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
Certificate issuer: /CN=16a04ee04b12823e853ff243d36551e4ce683a73
Certificate serial: 0197B5FC2C39A7191B7188FB9E307CF9957A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 10:01:31 +0000
Manifest this update: Sat 28 Jun 2025 10:01:31 +0000
Manifest next update: Sun 29 Jun 2025 10:01:31 +0000
Files and hashes: 1: 7yvWMV7T5eN6efasr2rdxP4qnTg.roa (hash: IQLAVcCJbXWjx9lqcgGZjEbAOQis8qmzfLoEHM8bDrs=)
2: FqBO4EsSgj6FP_JD02VR5M5oOnM.crl (hash: vEMy/nR0BoNtzuDl1UI9kAhpVkZp+KGp7U2mw4e6wjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:2c:39:a7:19:1b:71:88:fb:9e:30:7c:f9:95:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a04ee04b12823e853ff243d36551e4ce683a73
Validity
Not Before: Jun 28 10:01:31 2025 GMT
Not After : Jun 29 10:01:31 2025 GMT
Subject: CN=8e1659104cb2a6fcf41a2154b6a8687c4596f9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2d:a1:4f:8d:ee:8c:ec:98:81:53:27:cb:4b:
08:30:1c:5b:a9:ad:3d:a4:d1:75:83:6a:67:36:c7:
3c:a7:fb:6b:a9:ad:d5:7c:11:1e:5a:28:9c:7c:76:
90:f3:06:6f:2d:38:a2:4f:7f:51:35:16:29:42:e2:
d8:37:0f:f0:37:34:5a:13:1d:10:5e:e3:6a:bf:ee:
8c:af:9a:ad:ea:ed:f2:8e:72:59:3c:42:54:7d:be:
49:48:47:f0:57:d1:0f:b3:06:8f:51:e5:cf:99:9d:
5e:a8:58:6b:1b:3d:99:94:92:9d:36:6f:d2:cf:4f:
ee:68:2b:00:ed:df:c6:2c:fc:4a:ae:3a:25:9a:7c:
ba:9b:1a:f1:45:79:e0:25:9b:40:e8:1e:5a:3e:47:
7d:58:0a:b9:c0:dd:8e:19:37:0d:d1:61:9c:2e:90:
d6:26:11:33:d8:41:06:6d:9c:2d:e7:77:4c:c4:ac:
cf:54:85:5c:59:19:06:a1:5d:4e:6f:7c:3d:ca:91:
43:18:c9:e4:a0:53:f5:38:da:3d:4d:05:a7:ac:e7:
a4:f9:6e:b7:71:c7:91:61:7e:9e:18:6f:4a:84:a0:
cc:56:2b:dc:bb:20:9d:c9:62:eb:80:5d:32:84:9a:
98:2b:4e:5d:8e:57:16:0c:d6:13:43:43:83:2c:13:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:16:59:10:4C:B2:A6:FC:F4:1A:21:54:B6:A8:68:7C:45:96:F9:B2
X509v3 Authority Key Identifier:
keyid:16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:60:53:14:ba:e4:23:1c:c7:e1:74:a0:57:f3:87:85:f8:eb:
f9:65:e7:20:81:48:2d:85:42:f2:5b:ee:b6:91:d3:22:22:54:
50:85:86:57:4c:9f:11:cd:f5:74:08:69:1d:8a:43:68:32:a4:
62:be:28:85:ac:87:55:13:40:d9:37:03:04:59:d7:e7:a7:91:
49:f5:6e:b8:0b:f2:3a:96:ad:25:fb:43:92:d1:40:66:13:74:
98:e2:fe:7e:af:02:ed:d7:ca:23:6f:26:a1:b4:d7:08:8d:f0:
12:c0:74:35:1d:7c:2a:68:24:1d:25:54:90:d9:49:7d:33:69:
eb:19:92:f8:6c:fb:57:bf:68:84:5a:41:17:93:10:ef:c5:ac:
52:28:1c:24:65:89:cf:91:15:46:1a:10:09:33:a4:fa:b8:43:
24:2a:b3:f6:d8:f3:44:50:1f:81:54:b8:83:96:fa:e2:88:f3:
35:40:fe:79:b4:e5:52:d9:ab:57:d3:f5:e5:26:2d:58:06:d8:
7b:28:7d:1e:07:a9:fc:21:36:53:21:d6:6b:c4:54:ec:09:02:
32:4d:eb:97:56:03:84:d5:ca:81:86:b5:26:71:52:cf:bd:32:
d6:bf:d6:d7:27:ad:a2:e3:b5:7e:88:82:55:86:69:4a:0a:14:
a2:0b:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:55 2025 by rpki-client