Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
File: FO-9HV4axzX28jUJzyoOtKH5tOk.mft (raw, json)
Hash identifier: HkatIPkcE4xKZreEUON20CRyrTgy8fVw+1XVO+eyC7M=
Subject key identifier: C5:50:2F:CF:66:01:41:DA:16:48:44:D7:5C:FC:5E:DF:BF:40:91:A9
Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
Certificate issuer: /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Certificate serial: 0197C9828F92F405EF044803C83C076040F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
Manifest number: 154E
Signing time: Wed 02 Jul 2025 05:01:06 +0000
Manifest this update: Wed 02 Jul 2025 05:01:06 +0000
Manifest next update: Thu 03 Jul 2025 05:01:06 +0000
Files and hashes: 1: FO-9HV4axzX28jUJzyoOtKH5tOk.crl (hash: r2I2TK72QAavnfmFZjuPBwj7DCnIZWxqZagb9L2rYDA=)
2: O3vVokpmMILfLuCvtK11xQ6QzgQ.roa (hash: QJ033XApjs5jTBUXlpnVdiwOxF+/6PemalcFTFglCaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:8f:92:f4:05:ef:04:48:03:c8:3c:07:60:40:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Validity
Not Before: Jul 2 05:01:06 2025 GMT
Not After : Jul 3 05:01:06 2025 GMT
Subject: CN=c5502fcf660141da164844d75cfc5edfbf4091a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:4e:e9:ef:cf:6b:91:10:e8:90:49:ef:b6:
8a:4e:76:a0:4d:0e:86:2f:60:99:6b:be:f9:5a:f5:
51:7b:37:44:78:e6:e0:75:0e:ca:e0:36:3f:57:c7:
50:dc:fd:3f:b9:ae:00:17:08:6b:87:84:fe:4b:65:
87:51:b4:a4:7e:14:bc:b8:58:58:99:6b:70:53:a6:
a2:cf:79:84:3f:00:c6:b4:3a:6c:c2:7b:71:27:9f:
81:da:99:dd:ef:21:9d:92:c9:15:94:6e:e0:80:e6:
8b:3d:3d:79:72:0c:8e:67:ad:76:c1:a0:c7:0e:14:
5b:ee:3c:c4:bf:99:d5:bd:ad:e2:84:2f:c4:91:18:
94:43:9f:34:67:ca:db:e7:62:c9:60:df:44:bc:13:
89:89:31:8d:9f:fa:6d:4e:94:a3:5a:7a:99:77:a4:
5f:2d:76:90:fd:64:6e:20:7e:ca:d9:f5:dc:e0:49:
12:f7:80:0f:4b:2a:c8:ed:f6:b0:aa:24:ea:9d:60:
4d:5c:ff:b0:6b:ff:ba:4a:b3:4e:92:e7:97:2d:20:
76:69:52:fc:66:e6:16:93:35:12:ef:32:7f:fd:13:
ad:8c:66:90:21:36:7a:f0:5a:c0:e0:c6:09:a3:6a:
9d:2e:44:72:2e:8d:c6:0b:5a:71:47:78:53:02:d7:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:50:2F:CF:66:01:41:DA:16:48:44:D7:5C:FC:5E:DF:BF:40:91:A9
X509v3 Authority Key Identifier:
keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9f:33:b6:96:e1:9b:75:34:99:92:76:fa:54:1f:be:86:ea:
50:84:da:9c:99:a4:93:c2:fe:7b:66:52:ab:c7:d2:66:a0:4a:
eb:43:68:48:86:c8:f7:2b:ab:37:97:ab:5d:9e:0e:66:93:65:
f1:10:1c:98:b3:94:80:73:0c:bf:3d:36:4e:97:38:9d:ee:72:
8a:8d:cf:f1:6c:b4:46:6f:4f:0d:eb:a8:0c:27:4a:ad:4d:e0:
2d:c1:f0:e2:66:0d:c1:c4:e2:2b:48:53:a8:91:e1:35:6b:32:
0b:32:f0:a5:5c:4c:da:3e:d9:db:0c:4a:89:c7:f6:3a:f2:1d:
6e:f7:d1:ce:2b:74:3c:b9:fb:94:e7:4b:3f:fb:30:5f:d5:af:
cb:23:8d:42:10:ad:e8:c5:56:8f:5f:a4:1f:92:f4:ef:31:46:
4c:54:39:32:e6:85:23:56:bd:e4:8e:7c:1b:92:34:31:9b:b2:
b4:49:2a:7f:ca:cf:ab:da:62:e3:5c:bd:67:ae:f5:af:c6:32:
7c:4e:83:db:c7:bf:85:5d:a7:e8:98:75:fe:41:14:de:44:12:
cc:c9:48:d5:05:93:f7:3e:54:0c:23:a8:8e:0a:d7:34:ae:20:
6b:37:e7:6d:26:8f:a9:00:7d:81:ea:5e:f3:34:78:f2:d3:a3:
20:03:f8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:22:04 2025 by rpki-client