Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier: 6Ku+9ywJOpivBJmZpNkVLHaWHHBBhyB877HpgTSNhOU=
Subject key identifier: ED:D7:97:86:3B:56:A8:95:70:22:01:4A:D8:0C:C1:62:98:A1:46:96
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 0197B9341B89DDA3CD2FDE067DCBF639E282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number: 12CA
Signing time: Sun 29 Jun 2025 01:01:29 +0000
Manifest this update: Sun 29 Jun 2025 01:01:29 +0000
Manifest next update: Mon 30 Jun 2025 01:01:29 +0000
Files and hashes: 1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: 6Zu4dwpLlywG/7dIq4isZOYLwGvwmXolM94VJkuHtC0=)
2: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (hash: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:1b:89:dd:a3:cd:2f:de:06:7d:cb:f6:39:e2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: Jun 29 01:01:29 2025 GMT
Not After : Jun 30 01:01:29 2025 GMT
Subject: CN=edd797863b56a8957022014ad80cc16298a14696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:aa:85:f5:07:71:e3:34:c4:3b:d1:0a:3a:
ea:ea:06:ad:d0:31:26:03:dc:79:53:61:51:f3:82:
45:13:b2:5b:f3:7a:b7:b6:4f:d8:cd:b5:15:e5:f0:
87:65:a9:81:47:41:db:66:af:7b:33:23:bd:c3:4f:
6f:64:10:b8:25:00:f0:5c:8c:ca:1f:16:fc:c5:e4:
7a:82:f2:38:98:b1:de:ef:bc:84:c1:1f:45:0e:bd:
62:a7:f2:cb:74:7a:ee:ed:04:af:4b:06:05:70:82:
44:e2:01:ab:9f:09:19:48:d7:c3:6b:8f:3f:9b:db:
2d:f2:10:69:bb:f5:9b:38:5a:fe:cb:83:c2:10:cb:
99:f3:8b:13:c2:70:1f:d2:3b:cb:d1:bb:c1:66:1d:
51:65:c4:7d:5b:d7:43:f5:56:ab:aa:5c:d1:01:6c:
36:e6:ae:64:37:86:36:57:38:ef:83:92:a9:cc:e7:
53:b2:16:61:81:6e:56:1e:42:c6:60:23:81:5b:b2:
88:92:a9:8e:04:3b:66:76:33:01:9b:a2:54:2c:a3:
0c:51:4a:72:f2:77:cf:bf:ea:d0:ec:ff:86:27:71:
f3:ed:65:08:1c:77:e4:0d:9c:8a:ee:fb:d2:f7:e1:
9d:11:61:f7:16:4d:15:6b:e3:99:b2:b1:52:37:72:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D7:97:86:3B:56:A8:95:70:22:01:4A:D8:0C:C1:62:98:A1:46:96
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f6:cf:85:ec:fc:af:f9:0b:43:64:79:6f:fa:c0:b6:93:54:
da:9f:72:de:09:5e:61:01:e5:f9:27:74:7b:ad:dd:c2:cb:c8:
2b:8d:4d:c9:65:87:92:0c:fe:43:01:5e:1f:d6:e9:69:dc:2d:
6d:5a:fc:db:5b:63:d4:26:90:1e:45:03:a1:89:b7:28:5c:02:
bd:0f:8d:42:f7:7b:93:08:45:1f:dc:fb:9e:13:48:1b:cb:92:
22:7d:a9:b1:77:eb:f6:25:f8:3f:53:bd:25:0c:bb:22:1d:22:
43:dd:e7:95:06:af:c7:af:e8:b7:8b:7f:91:f1:76:69:68:33:
a3:be:17:57:a3:fd:cc:84:7e:25:09:7c:6a:a0:26:d9:9a:54:
63:1e:c3:09:96:9b:d2:10:a4:f3:58:8a:05:67:d0:0b:8d:05:
6b:dd:b3:1e:75:8e:39:cf:b8:73:35:a0:a8:84:90:a3:19:a9:
36:aa:fc:86:26:3b:3b:c7:ce:77:35:74:32:38:b2:10:c8:c0:
c8:1c:4f:2d:ed:4a:f3:7c:d1:60:a5:38:da:6d:96:ee:28:7e:
30:66:c9:c5:82:84:1c:90:c3:1e:6e:f8:2a:79:fc:fc:15:ce:
f4:56:11:3b:5d:64:0d:79:53:6f:77:24:aa:c8:49:0f:e3:80:
5a:0f:57:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:26 2025 by rpki-client