Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File: FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier: LG32H/h7B0MnEnCOgoYdi9SMlN274GZUGNaIhmroMag=
Subject key identifier: A0:27:CE:63:3C:D3:C6:D5:29:2E:01:A2:83:4E:DF:CF:27:8B:E5:70
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial: 0197B8FCE39B21642A4CCA8048B9B446B462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number: 0F34
Signing time: Sun 29 Jun 2025 00:01:10 +0000
Manifest this update: Sun 29 Jun 2025 00:01:10 +0000
Manifest next update: Mon 30 Jun 2025 00:01:10 +0000
Files and hashes: 1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: am/4D5aOw6fhTWekGhxd3coylurK0XyGBuQK/8QeWgM=)
2: sdQpr9vBWbo2oFyAIJwywqV94V0.roa (hash: q2Hm5+yXKjxuN/cBMa4LO9usoHIS/gexRqRStEbsYf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:e3:9b:21:64:2a:4c:ca:80:48:b9:b4:46:b4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Validity
Not Before: Jun 29 00:01:10 2025 GMT
Not After : Jun 30 00:01:10 2025 GMT
Subject: CN=a027ce633cd3c6d5292e01a2834edfcf278be570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:4d:5f:2f:13:3d:63:f4:72:3b:8a:3b:9a:
f6:e2:f2:5b:42:70:e2:8b:64:5d:09:0f:8b:09:7a:
de:01:18:59:5a:a1:e3:65:d1:65:f4:f3:eb:c9:4f:
87:0a:e3:84:ae:fd:ca:05:d3:07:a8:e8:40:8b:43:
65:77:77:78:aa:15:53:03:24:fe:24:0e:59:59:c3:
36:b8:3a:ab:1f:98:91:07:26:d4:99:ba:51:2e:9a:
29:6a:c3:fc:b9:20:bf:c0:cf:05:75:df:09:81:31:
e5:a1:8e:f8:93:ad:b7:40:f7:03:05:0e:65:56:de:
91:7f:39:ef:e5:eb:de:c3:25:84:8c:06:87:e3:51:
7f:ed:f8:78:86:32:2c:66:e6:f6:62:95:08:37:61:
19:62:2d:db:28:0e:18:35:7d:77:5a:e4:2d:80:6c:
a4:ea:32:d7:c5:5c:fa:68:d6:1a:95:d4:8a:f7:21:
f6:f1:3a:00:83:b3:56:3f:65:0f:28:94:0c:41:54:
15:c0:44:7b:64:23:a1:c1:f7:4f:6a:d4:f8:71:0e:
d7:2f:e4:a0:4f:67:6a:91:fc:78:ec:3b:f2:77:70:
46:b3:20:bc:42:85:76:fb:c3:f6:dc:75:66:18:a7:
2f:34:66:71:42:f8:be:c3:bd:20:a0:71:7b:8e:85:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:27:CE:63:3C:D3:C6:D5:29:2E:01:A2:83:4E:DF:CF:27:8B:E5:70
X509v3 Authority Key Identifier:
keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:69:0c:84:27:00:d4:c3:bc:0a:f2:89:b3:28:84:92:7d:16:
81:5e:1e:cd:3e:92:c6:a9:53:b1:2b:fb:59:f9:c5:91:58:ca:
fd:d9:38:86:2f:b6:87:39:1e:78:8f:6e:5c:ba:2f:69:52:d0:
56:e0:9d:bf:6f:c8:46:90:3c:a3:d9:db:6b:95:f4:18:10:af:
df:28:5a:54:28:4d:6f:fb:19:8f:6e:13:cb:1d:85:15:4d:03:
74:57:94:84:f7:20:07:54:3d:68:e8:ff:ea:de:df:6e:31:25:
fc:0e:b1:32:ae:83:38:69:91:58:5d:10:f6:9f:78:87:d9:4c:
2f:57:fc:16:07:4f:ee:66:38:51:59:8e:9d:eb:d3:ff:14:b0:
e5:79:52:7c:60:a6:aa:6f:16:d8:fc:38:5b:78:7d:5b:ff:65:
fe:ce:58:5b:af:83:33:df:bc:a2:d4:05:4b:ac:4f:fe:18:4a:
71:2f:18:94:2d:a8:fe:a5:c9:99:db:3b:e7:88:fd:69:ef:0f:
af:ac:4e:14:86:79:aa:2d:78:cc:93:1f:9b:62:81:cc:17:1c:
7b:be:a9:cd:a1:27:a7:71:70:af:c3:82:bd:7a:8f:95:07:91:
6d:4f:53:b6:0d:22:2a:0b:d9:31:15:26:2f:b3:79:ee:3c:c0:
04:9b:92:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:28:20 2025 by rpki-client