Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
File: FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft (raw, json)
Hash identifier: UEAuuZsh7Kh8aKqss0Olt6fZ0FaVgFmIzwxQGCkiwAM=
Subject key identifier: 5B:D3:5D:F8:6F:55:57:17:D7:3D:EB:C0:10:A0:8F:D1:F6:24:36:73
Authority key identifier: 14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
Certificate issuer: /CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Certificate serial: 0197BA7E1E0D888DEDE9CEFA257302BE43D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
Manifest number: 0A59
Signing time: Sun 29 Jun 2025 07:01:56 +0000
Manifest this update: Sun 29 Jun 2025 07:01:56 +0000
Manifest next update: Mon 30 Jun 2025 07:01:56 +0000
Files and hashes: 1: FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl (hash: JTVi99/KWY+BGRgH4chYqLXnY44uHQnjkRJIRS9ZHkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:1e:0d:88:8d:ed:e9:ce:fa:25:73:02:be:43:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Validity
Not Before: Jun 29 07:01:56 2025 GMT
Not After : Jun 30 07:01:56 2025 GMT
Subject: CN=5bd35df86f555717d73debc010a08fd1f6243673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:64:6f:c7:e7:60:9f:fe:fa:c7:47:25:46:
c6:7e:01:37:d2:12:a5:ec:72:ac:ee:9a:6a:4c:70:
2c:ba:0c:92:2a:f7:d2:08:04:4b:75:e1:2b:fe:ee:
c6:bb:df:52:be:10:78:aa:3c:4b:b6:ac:ec:56:93:
4a:43:e9:17:94:27:12:07:6b:51:f7:52:1d:45:89:
bf:0e:a7:08:5d:11:f5:b6:ae:62:d0:85:d3:ae:4f:
06:1b:df:35:3c:60:dd:f3:03:b2:68:07:6a:cd:3b:
15:98:e8:1f:d9:8d:1e:38:91:e9:c5:57:bf:7c:73:
59:89:22:12:5a:d5:a0:a3:cd:81:cf:c8:6e:cf:0a:
8e:1d:ba:f1:a3:d7:34:f5:36:20:46:9e:a7:7e:6b:
34:99:ad:23:2b:37:53:5d:3f:bc:2b:bd:72:a8:d7:
1f:5c:63:97:3c:a0:e2:94:42:f2:23:70:c0:c3:fc:
4d:12:c7:92:f3:e7:3a:c3:a5:4f:2e:e1:8b:ea:5b:
43:7e:60:2b:b1:7f:64:d3:d8:7a:70:b1:0d:f4:77:
5c:b7:1c:06:61:83:95:49:80:55:db:4c:c0:42:73:
e0:d4:31:a9:9d:28:4e:47:2e:e8:99:42:ee:e4:95:
ad:3c:b8:14:a1:45:38:c3:1c:f8:d4:fb:9f:94:9d:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D3:5D:F8:6F:55:57:17:D7:3D:EB:C0:10:A0:8F:D1:F6:24:36:73
X509v3 Authority Key Identifier:
keyid:14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9c:11:0d:69:ff:45:0e:94:5c:7c:0e:e3:ed:d0:32:74:fb:
98:8a:a1:28:ce:aa:39:9d:26:35:1c:3b:6f:dc:34:f7:25:c9:
6a:54:3c:5c:93:a9:17:d1:c9:e1:5a:82:7c:79:95:a7:5f:10:
d1:d8:1a:de:22:24:22:ee:b5:61:99:e4:b4:bb:fb:34:a8:9a:
18:d7:32:68:7e:81:8b:41:3b:5d:2e:4f:fb:b5:c8:f2:15:c1:
dc:d8:e5:a3:5b:a2:98:03:a5:5d:90:98:d6:6a:44:80:53:1d:
42:5c:b9:bf:a6:89:e4:47:3c:e9:2d:08:cb:28:b3:37:63:04:
ba:3d:8b:a5:c2:9e:0b:6d:62:15:d1:c4:0f:95:dc:d1:74:2f:
f9:12:c1:83:d7:bf:2d:4d:38:3c:da:1f:99:99:18:6f:52:29:
4a:77:b5:39:85:c5:e6:c5:63:27:cb:9e:66:d5:4b:17:2f:c9:
f9:a9:b7:59:01:4b:28:5f:db:d8:74:d6:e6:4a:e1:79:83:fe:
56:97:c7:cb:02:d0:ad:80:ad:0b:67:20:99:ad:ae:98:30:2e:
88:39:47:7e:35:c4:f1:45:da:a5:1f:18:a4:4a:f3:ce:40:20:
3e:cc:c5:0f:c9:9f:52:16:c0:56:33:3a:f5:1e:de:c6:8b:f5:
c5:9e:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:27:33 2025 by rpki-client