Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
File: FrUekDbKbnVqAWPDh3ggzV_OEa4.mft (raw, json)
Hash identifier: xOjuYGwIIxPXIykLJiu3jFkRpdstgIhRsZ1XdqZoFJo=
Subject key identifier: 29:F7:F2:73:48:0A:9C:AE:59:EA:37:75:27:42:D9:B8:D3:3F:90:83
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Certificate issuer: /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial: 0197B6A19E4DBC3C3F40EE61B41395C66556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
Manifest number: 0CAA
Signing time: Sat 28 Jun 2025 13:02:14 +0000
Manifest this update: Sat 28 Jun 2025 13:02:14 +0000
Manifest next update: Sun 29 Jun 2025 13:02:14 +0000
Files and hashes: 1: BxCrfrb8MepjOUn66ABB5pXZXGY.roa (hash: /bAJpFbE7wB5BoE8ivAocFlXAPpfXoiDSMMP5BxwgYU=)
2: FrUekDbKbnVqAWPDh3ggzV_OEa4.crl (hash: vNmn1W1giUjtU0gweI0er1A1B8xn/Psv2MJevl9xc0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9e:4d:bc:3c:3f:40:ee:61:b4:13:95:c6:65:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Validity
Not Before: Jun 28 13:02:14 2025 GMT
Not After : Jun 29 13:02:14 2025 GMT
Subject: CN=29f7f273480a9cae59ea37752742d9b8d33f9083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:8b:5b:75:d0:d2:59:73:84:6c:3f:09:8c:
95:d9:ea:f2:eb:fd:73:66:76:b3:c3:fb:52:20:62:
e1:b3:f1:5f:f9:a5:f9:9c:cd:c9:79:07:c6:45:9c:
a5:f2:1a:4f:2c:c1:92:25:63:12:fa:b6:5e:2b:22:
d6:79:d9:19:22:45:bb:24:8e:fe:7a:2a:d5:64:24:
08:67:5a:b7:6c:0e:f4:a7:0d:23:de:01:35:92:c8:
2b:dc:3d:82:41:16:3b:39:eb:5b:71:7b:23:d0:16:
0e:20:56:33:5e:7e:27:f1:83:be:3c:58:65:90:7f:
3b:ab:20:30:9e:82:f0:bc:b7:df:8d:dd:d2:a2:b5:
cc:a0:69:6a:cd:63:7f:e5:68:79:4c:62:a9:5f:a0:
10:ef:42:6a:65:b7:b6:b7:46:bf:23:35:e2:1b:c5:
9c:b3:3a:05:06:13:d6:25:fa:63:e0:ac:4c:d5:9e:
6d:b2:61:75:7e:2f:54:a6:cb:0c:5b:32:fe:5c:6d:
39:54:d6:0a:db:36:57:0d:ab:e2:2e:59:37:a3:b1:
71:50:27:94:28:ea:3b:b6:2b:b0:6a:ea:c5:f9:be:
4d:3e:0c:50:d1:2b:2b:22:96:34:69:15:f4:be:14:
f2:75:b2:fe:c6:7a:0d:54:db:a3:bb:26:f6:8d:ce:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:F2:73:48:0A:9C:AE:59:EA:37:75:27:42:D9:B8:D3:3F:90:83
X509v3 Authority Key Identifier:
keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:be:f4:75:ba:0f:9f:24:14:16:e4:79:1e:e3:d0:0a:6a:0d:
7f:0c:e4:8a:ca:b9:1e:dc:fb:4b:aa:be:96:cd:19:d2:f3:58:
90:ac:61:fe:29:5e:6a:28:30:96:b5:12:c1:87:b8:53:b7:ba:
32:f1:fc:61:d5:a8:23:ed:25:71:64:da:84:19:4c:b5:45:9a:
2c:c5:3e:a0:97:a6:1c:6c:1d:b8:a0:20:bb:ff:f6:ba:8f:f7:
55:dc:26:0f:0a:4e:c3:1b:5d:71:d4:53:7c:ee:7a:fd:83:a3:
bd:56:5a:68:2f:d3:87:7b:a9:be:ff:d2:73:00:59:78:bb:67:
1f:43:c3:ac:56:1a:f0:90:cb:6b:0a:db:90:e2:7d:ec:0e:c2:
f0:cf:f7:9e:20:68:62:13:e0:03:05:8d:b2:0f:56:a5:cf:96:
ad:32:9d:27:bc:67:21:94:a7:60:c2:06:60:9e:99:fd:7e:94:
f7:18:75:ff:66:e9:6c:c5:3f:86:4f:07:7f:d9:70:bf:70:60:
7c:73:aa:64:f3:9d:e5:55:cb:8d:96:56:aa:15:c9:95:12:46:
15:eb:be:89:3d:58:b1:e2:6f:8f:74:88:b6:37:5f:a7:af:fc:
4a:ed:9e:54:9c:74:bd:21:80:90:e1:73:ea:a3:36:e4:89:8f:
6b:81:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:24 2025 by rpki-client