Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
File: FqMhIVpNNe0imLBzlx20CIZP02I.mft (raw, json)
Hash identifier: 4q+BQTHx66JHkd2qHRORH9mpfrzxIbxphQpz7WuYi3o=
Subject key identifier: 56:AD:06:A6:B1:CF:97:62:56:49:0E:E6:F2:0A:3F:4E:7B:22:8A:22
Authority key identifier: 16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
Certificate issuer: /CN=16a321215a4d35ed2298b073971db408864fd362
Certificate serial: 0197B96A7855BCB295048B9656AC7A9756CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
Manifest number: 0DDF
Signing time: Sun 29 Jun 2025 02:00:51 +0000
Manifest this update: Sun 29 Jun 2025 02:00:51 +0000
Manifest next update: Mon 30 Jun 2025 02:00:51 +0000
Files and hashes: 1: FqMhIVpNNe0imLBzlx20CIZP02I.crl (hash: ObWe4rTFGnyzHrddkTN1wLvb6cCutYRnKApvkt/IDoE=)
2: q9FXpjO7WYpYF_PuEvxdIBNk31U.roa (hash: eU80FRwYJKXcKKPdsKCtTdJX7dfta5v66z6KC/V+tqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:78:55:bc:b2:95:04:8b:96:56:ac:7a:97:56:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a321215a4d35ed2298b073971db408864fd362
Validity
Not Before: Jun 29 02:00:51 2025 GMT
Not After : Jun 30 02:00:51 2025 GMT
Subject: CN=56ad06a6b1cf976256490ee6f20a3f4e7b228a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:c1:f6:92:94:f4:f4:17:e6:6f:0f:63:7e:
f1:ab:09:f6:36:9b:c0:40:b1:64:41:eb:5a:b8:16:
1d:34:44:9c:2d:35:38:fe:16:2e:c1:c6:6e:18:f0:
85:c1:65:19:d6:e9:9c:02:eb:69:0f:31:42:f2:a1:
f9:51:12:39:96:2f:3d:ba:8a:15:a6:57:b8:f3:7b:
e8:3e:cf:ca:e4:70:81:d1:46:6f:73:57:2f:22:71:
51:7c:01:6f:e2:c1:fc:69:79:eb:ba:12:e3:92:95:
62:85:6f:26:d0:4b:c1:e6:29:83:a6:75:bf:d2:f1:
d3:1b:4d:78:6c:58:7e:79:bd:2a:8f:08:96:5f:a1:
fa:d9:50:20:6d:57:78:3b:00:3c:f6:5b:6a:6b:50:
2e:71:cf:60:90:6f:cd:12:d2:42:b5:ac:8b:9c:e8:
1b:d8:fa:ce:ea:e5:9a:e9:61:1b:e6:3d:ac:b1:ee:
db:75:40:9b:76:6c:6f:04:9d:b0:66:16:a2:9e:40:
9d:07:33:e7:5c:6d:35:cc:86:12:63:a8:64:be:e3:
a2:9f:13:fb:74:d5:35:a8:7b:3f:95:6b:60:04:fb:
5e:b3:6b:fc:61:98:69:52:ce:5c:4a:4e:b1:f3:ed:
67:6f:ee:c2:60:17:15:e8:79:12:34:5b:b7:89:5b:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AD:06:A6:B1:CF:97:62:56:49:0E:E6:F2:0A:3F:4E:7B:22:8A:22
X509v3 Authority Key Identifier:
keyid:16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e5:60:08:19:f1:3d:c0:ae:ba:a6:00:ae:48:42:36:f1:ef:
80:2e:93:c2:4a:5e:aa:35:35:4c:43:ab:92:cf:aa:24:fe:0e:
30:55:c5:7b:56:38:d2:16:38:da:e8:7a:6c:75:ce:43:eb:48:
09:c8:f3:ca:13:19:fb:ab:25:00:4c:7d:a1:4b:37:16:13:f9:
78:1d:d2:4d:f3:2f:97:d6:57:33:e4:60:75:b8:f4:88:1e:f8:
3f:fb:01:a7:5b:d8:af:27:cc:2b:94:10:d2:a5:0b:4c:ec:91:
56:aa:0a:56:5f:c8:40:40:c6:78:a7:75:8c:f0:eb:b3:ce:e5:
2e:fd:20:b6:d2:98:95:79:1e:61:a8:fe:74:bb:5a:90:a1:73:
73:58:34:92:5b:9a:ac:58:31:74:94:00:a7:61:08:f2:69:85:
b9:53:4b:f7:11:2b:d9:e0:8f:3e:d0:27:30:b8:9b:b4:9c:90:
e4:12:be:45:4b:3e:a3:2b:3b:2f:af:47:5b:08:14:cb:ed:f1:
02:9f:ec:97:e2:cf:1c:1a:bc:b0:84:3a:c9:f0:a5:25:36:2a:
88:9c:a2:d2:05:35:d8:f1:f1:90:38:7d:e9:86:bd:e5:0c:c8:
2e:30:1d:d1:06:18:19:f1:e9:a1:8b:18:30:c8:29:27:96:1c:
8e:ea:23:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:40 2025 by rpki-client