Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: QWzlaV7Xa0W6oA/IW+6IZTPbzttJsHuTeArCS3FK7LY=
Subject key identifier: 55:3A:DB:35:3A:8A:AB:BC:BE:7E:1A:DD:BE:5B:66:6B:3D:01:7B:53
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 0197B77CC61ABE85B9F4AF50C93EDF8270DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 0444
Signing time: Sat 28 Jun 2025 17:01:36 +0000
Manifest this update: Sat 28 Jun 2025 17:01:36 +0000
Manifest next update: Sun 29 Jun 2025 17:01:36 +0000
Files and hashes: 1: 0hE7yQkOsQYY1LQEos4wbxzkfnM.roa (hash: 70ia36yz/7UQliy+dQ5lEepwXI+ufgIzVRbaE7lLztM=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: N76RDoS9Jify3tcQIN6gXP4BA3ZYZS2hLqi3vyqs8H0=)
3: YQdnp2VC261uNxqE4Oc-a1f9tGg.roa (hash: XivO/rYxkKb4OFfhsRiFIwL10Nr1ukhnz5M4clOZFnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c6:1a:be:85:b9:f4:af:50:c9:3e:df:82:70:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Jun 28 17:01:36 2025 GMT
Not After : Jun 29 17:01:36 2025 GMT
Subject: CN=553adb353a8aabbcbe7e1addbe5b666b3d017b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:70:87:a2:ee:d1:79:6c:42:61:1b:42:0c:
4e:36:b4:b8:41:40:8c:28:bb:0f:1f:ed:5c:69:04:
9b:6d:86:9c:9a:c7:72:e0:b8:90:b3:48:5d:f4:b3:
12:50:e3:5a:9a:81:4b:f0:69:8d:8a:c9:d5:16:05:
b9:aa:9d:d6:03:25:b5:a8:8f:c0:f3:18:76:99:bb:
6d:14:f8:c1:97:3b:bc:6c:e8:02:33:a3:b1:dc:23:
1d:49:93:0b:9c:59:dd:40:b5:74:0a:00:cd:be:d0:
e9:75:92:cb:5f:57:fa:34:82:ba:c8:8a:95:c8:d1:
1d:c7:c7:9f:9a:0f:6b:9d:26:67:16:bf:84:e3:7c:
b7:3f:0a:46:eb:77:a8:d9:9f:51:ac:76:15:01:81:
2a:3c:15:ab:f7:f5:a4:75:c2:6e:c1:39:4d:38:c3:
59:ed:e3:bd:21:c3:29:ac:82:59:3d:e5:f4:37:65:
88:3f:a9:42:8a:94:3b:23:d2:c2:5d:db:9c:12:92:
2f:96:66:c9:18:35:b4:e4:80:94:58:22:b8:4e:31:
d6:95:ce:9c:9f:a1:33:99:e4:10:10:0a:14:b0:d4:
51:24:f1:38:0c:6f:a7:ae:16:56:b0:16:7b:73:34:
e9:f5:ad:36:6f:86:5a:78:15:8c:61:1d:43:32:8a:
24:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3A:DB:35:3A:8A:AB:BC:BE:7E:1A:DD:BE:5B:66:6B:3D:01:7B:53
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:ee:e5:a8:71:db:d0:56:5e:9a:1d:0b:03:5a:81:8c:95:0d:
85:6f:1e:f1:90:f4:75:87:34:cf:ba:bb:1c:ab:64:88:ac:a6:
8f:63:d4:a6:1b:b0:53:79:99:e1:c7:f6:ec:3d:34:d4:c9:8f:
9a:b4:05:35:8e:6e:49:34:69:ae:4e:93:36:52:2a:b0:74:68:
6f:98:0a:99:f1:2e:a2:b7:a4:49:13:78:93:10:e8:07:8e:87:
f9:bb:fd:d4:76:9a:f0:94:26:d4:8e:51:f1:04:e5:fb:b6:6a:
78:02:f1:48:d5:c4:95:4a:08:23:d8:3d:a4:f8:92:eb:a3:c1:
b0:11:8a:36:a7:90:1c:b8:38:6c:aa:e8:7a:ff:e8:e9:e4:ac:
d9:85:30:01:80:fe:39:92:1e:cd:9b:c7:2b:6c:28:47:da:bb:
b8:3e:41:c5:7d:16:39:14:a5:27:95:40:11:0e:43:00:28:a7:
82:67:f4:4a:ec:c9:0f:54:7b:f2:f2:a1:b9:6a:c6:21:95:77:
42:3a:9f:56:bd:5b:63:40:1e:78:59:2d:df:4d:aa:b7:e1:c8:
67:0b:bc:e1:dc:98:3f:e1:17:0e:54:01:3f:45:f1:f2:15:bb:
61:8e:d7:2a:9c:85:25:74:52:9a:cd:a8:3a:df:c7:58:7d:c3:
9a:1d:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:54 2025 by rpki-client