Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier: P0gdDxBGPbFuDAlQM6A3uWt8qUNfOVCrVzs0Seh61pA=
Subject key identifier: 44:C6:68:A2:E1:08:6A:F1:AE:25:32:04:DA:94:80:3A:96:BB:5C:92
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial: 0197B8FCED8CA574E970C450EFC185468A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number: 10BC
Signing time: Sun 29 Jun 2025 00:01:12 +0000
Manifest this update: Sun 29 Jun 2025 00:01:12 +0000
Manifest next update: Mon 30 Jun 2025 00:01:12 +0000
Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: iEZeC7R+NDVSj3sxj2zLmarhTanNjkyxbsRt/sn6Pv8=)
2: HD1uPet-iIu7hW_120IFu9su76s.roa (hash: vFNL8ghAlqPTrA8jGEs+I7hRSyNODsDNbh5CwQDUvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:ed:8c:a5:74:e9:70:c4:50:ef:c1:85:46:8a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Validity
Not Before: Jun 29 00:01:12 2025 GMT
Not After : Jun 30 00:01:12 2025 GMT
Subject: CN=44c668a2e1086af1ae253204da94803a96bb5c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:ac:30:96:36:04:2a:d6:2a:c5:23:e0:86:
41:14:a1:eb:33:fa:3d:59:7e:71:02:d3:e0:69:ff:
35:39:b8:dc:46:00:f1:a8:39:12:93:05:14:74:7e:
28:c8:2a:d7:ec:d0:d2:9d:c9:f5:60:be:0a:02:f3:
67:de:19:a3:00:40:f5:ee:74:2c:7b:0c:25:69:1b:
67:5d:20:5d:04:7f:32:a1:e4:07:a0:8c:2d:8e:be:
2e:8c:82:0e:52:5e:d3:ff:77:c2:5d:da:6b:dd:07:
58:17:1b:75:fa:91:51:fb:49:ee:d3:15:1c:d7:6a:
c1:ab:d8:a8:e9:0e:c6:8a:d6:0a:2b:dd:5e:2c:b1:
79:fc:bb:48:2a:3f:ba:16:9f:cb:5d:c2:19:d4:e9:
b5:fa:d4:61:ba:be:65:48:90:cf:7a:c9:83:3a:8c:
84:42:5e:96:d1:ad:c0:b9:e4:ba:10:f3:c8:9a:18:
66:98:a0:e4:5b:31:83:2c:0e:b7:92:ec:70:a8:f4:
a6:90:df:7c:af:6d:4d:71:f0:e3:fb:a6:c1:ec:e0:
b5:b8:cc:c8:a6:8e:17:5d:84:a6:8d:82:2a:b4:5b:
e7:b7:0a:b2:f0:5b:3b:cc:45:1c:cc:d7:54:fd:03:
79:f2:c2:37:4c:d2:0d:05:5f:db:f1:e8:f5:e1:e4:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C6:68:A2:E1:08:6A:F1:AE:25:32:04:DA:94:80:3A:96:BB:5C:92
X509v3 Authority Key Identifier:
keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9d:95:29:2c:66:cb:30:e8:39:17:c5:32:eb:a3:d8:eb:64:
08:16:18:76:d0:3c:d7:7c:40:83:d3:9b:20:cf:85:4e:81:0c:
ff:41:18:92:0a:b0:3b:ad:ab:b4:3e:1f:4b:a4:f1:ca:24:d6:
d3:d1:31:7c:d5:89:b6:82:93:1d:6d:4a:0f:c0:62:fc:70:40:
4c:87:93:63:a9:b9:71:92:b5:5c:06:16:f5:aa:d4:bc:a9:51:
98:72:f4:8b:8a:79:fb:be:75:1d:52:b8:56:f9:63:fb:0c:06:
5d:15:96:0b:33:b3:3e:ce:8f:ca:da:04:f8:dd:60:f4:03:46:
e5:89:57:cc:c3:71:08:77:b2:a9:d8:71:7c:d9:99:78:c7:bd:
c7:a7:a3:47:d9:e7:cf:5e:83:3a:ba:32:94:2d:e8:f0:a7:3f:
b4:53:57:18:25:78:8b:32:61:25:1b:72:92:91:39:0b:6b:72:
24:1c:cf:a3:bb:aa:44:bc:88:44:9d:7b:46:74:99:13:a3:3a:
aa:c3:4c:72:6d:7f:dc:3d:ac:2d:42:cc:b4:3b:95:ed:4a:32:
6a:e8:e0:78:69:df:74:1b:dc:47:e1:49:8d:97:e7:56:01:79:
d7:3d:0c:d0:04:17:11:90:70:c0:7b:6c:0d:b0:d5:ca:51:48:
72:06:59:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:59:56 2025 by rpki-client