Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
File: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft (raw, json)
Hash identifier: 5kpimoWjwNdEx8kOGuYmeRdN5Ptiiuym4yU5SqC8BFM=
Subject key identifier: AA:DE:61:0A:CD:BC:D8:3D:18:61:48:6C:7F:CF:4C:D4:C6:48:21:89
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Certificate issuer: /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial: 0197B70EAD54A82C13E9E7C4433931980486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl (hash: PlhyhG8uUDTbU9nQFDfO5hqCLRb9oS9L5uPx0hZRd+I=)
2: bVPZcxyyuoSw5oO9YToFQkVC9HE.roa (hash: PMh8VdKlUCXwqFCEJ+zfZN1ZK1DFnhbrgEIJ3TSYDdE=)
3: ucnP1VSEw1kHHuA3QA5_zId7uwM.roa (hash: YmzOGwmaq6ynMsOM2MUQrdoh74IojEKpTpvJHQjtfdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ad:54:a8:2c:13:e9:e7:c4:43:39:31:98:04:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=aade610acdbcd83d1861486c7fcf4cd4c6482189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:42:82:00:53:af:cc:5b:29:d8:e8:72:30:
f3:96:41:10:4e:e3:79:59:0b:81:01:fc:ee:b2:70:
bd:27:fc:ec:ef:46:f4:21:1c:f1:f3:1b:a1:f2:d6:
4f:17:3d:d6:a2:32:a5:52:00:57:ec:0a:1e:1f:a3:
ad:91:64:7d:1e:3e:ca:c2:f8:af:7e:76:47:f4:62:
1b:24:17:27:85:76:fc:d8:34:5a:c3:c0:0d:f8:3c:
27:82:44:19:c5:b4:1f:11:52:3f:cb:16:d6:62:f7:
cb:0e:11:3f:82:a7:c0:07:89:1e:88:ff:60:e0:2b:
35:e5:c6:01:4c:61:49:be:71:15:ba:ed:e0:af:10:
7b:a9:04:33:ed:49:e6:ba:3c:ba:4c:47:d0:ad:37:
ae:65:5c:30:63:86:d0:a9:72:61:9b:0d:11:5c:6e:
d8:4c:4c:6b:a4:d8:47:0e:df:e9:41:80:e5:7e:5f:
03:dc:03:70:4c:a8:18:c0:64:6f:3e:52:9a:6c:2d:
86:3b:69:2c:8c:66:07:1d:53:d0:88:53:83:a8:1a:
f7:14:a8:02:ef:28:ee:4b:2e:b6:e7:da:7e:e3:85:
a2:7a:a2:0a:6b:34:0a:10:23:82:2d:58:a2:c3:0f:
38:68:6d:32:78:04:05:cb:38:d3:c9:ca:36:03:08:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DE:61:0A:CD:BC:D8:3D:18:61:48:6C:7F:CF:4C:D4:C6:48:21:89
X509v3 Authority Key Identifier:
keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:44:77:96:af:96:e8:6f:72:4c:ce:e4:b6:f2:f9:13:71:c2:
c9:b7:03:e8:b5:43:c1:04:63:a5:d5:f5:68:3d:68:8d:97:1f:
a6:23:af:24:e9:aa:5b:a1:cf:0b:bc:ee:99:91:bb:57:ba:77:
44:d9:00:f6:98:a7:95:8f:80:60:23:c0:51:14:cc:fa:e4:14:
6c:f5:04:b2:30:73:f1:e0:30:a0:2d:f1:b7:5a:f9:ef:9a:28:
39:8d:cb:93:a7:d5:25:d4:7f:d1:48:2b:df:2c:64:dc:46:81:
51:3a:8a:e8:20:16:d5:ef:3d:80:ef:f7:a6:91:a4:68:6c:a5:
40:4a:b9:67:bd:da:21:93:18:a2:44:12:8a:85:c8:b8:92:08:
01:2c:d7:bd:e1:8b:19:45:27:89:ef:97:1f:1d:42:27:1e:19:
4a:ab:52:e0:dd:f3:c5:96:c3:f6:18:fc:48:eb:64:76:12:2a:
35:73:c5:8a:90:b0:cf:e1:30:db:ce:c4:04:de:91:da:6f:8e:
1d:c7:b3:8c:84:2c:3f:12:80:af:70:0b:9c:ff:5b:ef:64:b9:
b9:6f:26:f3:d3:99:ae:19:ec:9f:d8:4e:3f:97:dc:02:79:76:
c3:57:51:c7:31:17:5a:5f:8d:05:f1:69:ad:5b:a8:fd:d7:31:
64:33:77:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:57 2025 by rpki-client