Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
File: FgWNKEMMTknmGlivT9em9lbt_Z4.mft (raw, json)
Hash identifier: M7RQwYRdB8HphRpt2VXqUr8GEAFKx9CfdraKOTewhro=
Subject key identifier: CB:D6:E5:3F:3D:9A:2D:A4:3A:73:3B:ED:D8:EB:CC:E5:DD:F9:98:28
Authority key identifier: 16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E
Certificate issuer: /CN=16058d28430c4e49e61a58af4fd7a6f656edfd9e
Certificate serial: 0197B8903C62E8EDBCA4FE3CAA74746932D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
Manifest number: 10BE
Signing time: Sat 28 Jun 2025 22:02:29 +0000
Manifest this update: Sat 28 Jun 2025 22:02:29 +0000
Manifest next update: Sun 29 Jun 2025 22:02:29 +0000
Files and hashes: 1: FgWNKEMMTknmGlivT9em9lbt_Z4.crl (hash: 5TxnMWe4HOMhJ+rwQEcJ+KG0bJEMQ6iZ69BL9euKZlY=)
2: sHwtxq6vNU_20TTJKVKHNMboy68.roa (hash: e+pIPXszPmA0jYLK/3ZYIDt9j7uU5CIIUFy94OjzT34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:3c:62:e8:ed:bc:a4:fe:3c:aa:74:74:69:32:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16058d28430c4e49e61a58af4fd7a6f656edfd9e
Validity
Not Before: Jun 28 22:02:29 2025 GMT
Not After : Jun 29 22:02:29 2025 GMT
Subject: CN=cbd6e53f3d9a2da43a733bedd8ebcce5ddf99828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:ca:8a:0b:e5:fc:73:7c:92:9a:5b:40:b2:
1b:4a:4a:26:86:e7:cc:a4:b2:ba:7e:3b:ec:de:e6:
7b:bb:d4:6f:03:88:23:12:78:9b:6a:22:e5:31:fa:
b5:26:da:45:05:98:a9:25:3e:d3:22:64:b3:6c:de:
1c:84:46:ec:69:89:62:3b:04:cf:f0:81:08:df:63:
b1:49:e6:45:d6:24:cb:29:f1:ee:e0:fd:1a:a8:21:
ac:68:ae:99:83:69:c4:7a:4f:9b:b3:6d:6c:af:b6:
1b:3a:74:76:94:8a:8e:f8:dc:9f:b0:17:b9:ba:1c:
b5:2b:ab:e3:d2:14:3e:cb:11:6a:e5:3d:d3:4b:86:
65:ba:1f:eb:67:0f:3d:3a:a8:ba:c7:da:b1:3c:38:
6c:22:94:16:75:89:57:71:d2:cd:f9:bd:85:aa:ae:
21:65:84:29:92:eb:88:f8:55:14:73:b6:ce:1c:21:
b9:de:bf:d6:f8:14:96:cd:9f:d4:d8:17:79:c7:e6:
88:9b:40:23:90:4a:1a:f3:17:66:ad:35:59:d7:a1:
5e:5c:8c:ee:30:f4:86:e3:30:02:fb:78:50:ed:e3:
ae:18:22:94:67:b0:ca:34:f4:9b:b6:d4:dc:04:4e:
d5:c7:af:45:26:fa:b2:2c:b7:09:24:7b:58:a8:30:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D6:E5:3F:3D:9A:2D:A4:3A:73:3B:ED:D8:EB:CC:E5:DD:F9:98:28
X509v3 Authority Key Identifier:
keyid:16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9d:4d:5f:00:6e:65:94:d4:60:43:74:f2:f8:04:e1:58:95:
3e:10:ff:c3:13:76:22:32:48:43:16:04:8a:92:e3:ea:9a:f9:
f2:c4:8e:eb:7b:72:a0:48:b7:64:23:7c:9b:d9:6d:c3:b6:51:
8f:72:28:4e:70:a9:45:7f:e5:63:c9:93:ae:44:ee:69:e2:e7:
51:b8:cf:c2:f2:f3:1e:f5:80:08:d8:d2:c3:f1:a8:08:3e:fc:
c4:a8:48:a0:37:4e:71:67:8d:ff:47:ac:dc:48:60:a1:be:f3:
b1:74:b7:58:de:27:b7:82:65:2a:b8:18:cb:4a:5f:8b:9d:61:
33:95:a4:80:3e:1e:d5:e8:2c:8f:98:56:c6:99:7b:a0:d8:7b:
08:94:78:43:c9:63:04:94:9c:0c:fb:c1:84:b0:89:80:55:af:
4c:1e:c5:0c:ca:21:f3:ba:37:b2:8f:11:c9:d9:6e:8d:6a:3e:
69:a2:b8:09:af:3a:77:a6:61:0a:b0:dd:57:6b:d0:bc:7f:9a:
2a:e6:21:cc:76:95:37:25:86:f8:fd:e9:ca:b0:98:3c:f3:92:
da:e8:ff:af:00:7b:50:73:98:53:06:6f:67:28:94:2c:59:6c:
b9:c2:ee:4d:93:34:47:d8:92:55:a9:b0:43:6d:38:7f:68:56:
3a:bc:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:47 2025 by rpki-client