Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
File: FocxkXFwxLgb7jUdBFXDLLrWOyY.mft (raw, json)
Hash identifier: /W82jDM0uQwU6EduX92Q4MZEAlFYe2CgWypPtPeiB10=
Subject key identifier: BF:C6:64:75:7C:D8:81:56:76:56:AA:C9:CB:2E:85:C7:F4:C6:C4:C3
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Certificate issuer: /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial: 0197B7EA30E9CFC46B00518A8695446C21D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
Manifest number: 0CAB
Signing time: Sat 28 Jun 2025 19:01:07 +0000
Manifest this update: Sat 28 Jun 2025 19:01:07 +0000
Manifest next update: Sun 29 Jun 2025 19:01:07 +0000
Files and hashes: 1: FocxkXFwxLgb7jUdBFXDLLrWOyY.crl (hash: QWs7au0zqkN+MDQqzULz8mVcs5kWFLOcHJvUk3M7K/k=)
2: LhUj1mCFxgCVgOclN_x_EPQsaaM.roa (hash: TwspggDMx9eKuIFMwLPIl1QzksuuFso9cmuKcnRQwY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:30:e9:cf:c4:6b:00:51:8a:86:95:44:6c:21:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
Validity
Not Before: Jun 28 19:01:07 2025 GMT
Not After : Jun 29 19:01:07 2025 GMT
Subject: CN=bfc664757cd881567656aac9cb2e85c7f4c6c4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:78:aa:dc:8f:c4:22:59:3f:c5:89:3f:3b:
34:69:32:0c:66:2e:5c:b5:d0:c8:de:ca:fb:72:9a:
e8:a1:40:93:f6:7c:3d:a9:03:32:91:f3:c7:c3:97:
f7:1a:36:43:3f:7e:df:c6:60:43:8d:6d:3a:3b:47:
50:a8:1b:6e:40:aa:2e:a3:6a:c2:c6:44:d5:e8:bc:
7d:01:58:41:d1:ec:cc:c9:8d:3e:a9:ca:46:a7:08:
5b:44:00:14:ed:4c:6a:4b:1c:d9:a3:e9:a6:0c:b4:
26:7e:0f:5d:1d:39:66:89:ad:de:39:57:a0:8f:d0:
13:96:70:ef:f8:0e:f4:22:7f:2a:6e:25:30:5c:6d:
42:de:52:51:9d:8e:c0:69:50:69:9b:54:1d:0d:22:
04:2e:aa:21:72:65:c1:80:3a:0c:62:99:f6:4e:0f:
b3:40:ce:a7:b3:5f:fd:bd:11:4b:c3:f7:b6:c5:71:
0b:cc:cd:80:b6:9c:d5:b6:cc:ae:89:f7:72:2c:f6:
e5:1b:37:48:cb:a0:e4:8b:e8:32:25:a9:00:80:b1:
28:04:44:38:50:87:95:3d:c2:3a:1f:de:44:d8:41:
de:c7:f5:81:00:1c:fe:b5:ff:6c:c3:e4:94:1b:b4:
c9:0b:f4:b2:0e:8e:d2:58:08:c9:9e:6c:8a:f0:10:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:64:75:7C:D8:81:56:76:56:AA:C9:CB:2E:85:C7:F4:C6:C4:C3
X509v3 Authority Key Identifier:
keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a7:3f:59:e3:9c:87:bf:19:d6:16:34:26:0c:79:dc:99:35:
4d:cb:7e:92:80:1c:b4:7e:b7:ed:3f:ce:92:4d:51:59:9f:08:
2c:11:42:94:69:f3:e1:82:9a:e8:1b:54:58:b4:1e:43:33:73:
95:69:5b:6a:98:a4:b6:9c:5d:0a:a4:f8:5b:15:0e:4e:b4:8b:
c9:fe:57:9a:6e:81:74:00:1b:26:c4:bc:f6:14:4e:92:28:ab:
f0:05:f5:d8:66:66:99:cc:04:60:5b:d6:80:02:7c:e4:5b:46:
b9:d0:f7:17:f7:b2:46:07:e8:56:05:00:e1:f1:b4:3f:7f:ee:
c4:04:e3:90:d1:b2:40:bb:be:aa:75:61:db:41:04:ed:16:47:
59:c7:8b:67:44:3c:aa:8e:2d:b8:7b:69:4a:15:46:d8:83:8f:
76:36:36:69:1f:f9:ae:19:60:30:2d:86:2f:d4:73:16:c2:37:
9e:eb:ca:e1:4a:37:c3:11:0d:71:6d:2f:1d:77:92:c7:55:30:
39:3f:d1:ad:37:59:a1:e3:f2:1c:62:ab:14:75:cc:98:6c:60:
de:3f:71:9f:da:8b:8e:d1:43:db:b9:cb:35:d7:32:ed:cd:ae:
8e:bb:e4:ef:3e:80:46:ad:78:6a:d0:57:cf:28:4e:cd:6b:d5:
e0:db:72:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:46 2025 by rpki-client