Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: x6AOJuQyk+V3D+sR4bqFSK1yEZQsZHjHjbFJOKz0B6A=
Subject key identifier: BA:FF:5F:15:8E:57:11:5C:35:C2:26:BA:01:37:B7:E4:46:18:F6:81
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 0197B5FBF703A2F399C213AAB6112F01DAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 10:01:18 +0000
Manifest this update: Sat 28 Jun 2025 10:01:18 +0000
Manifest next update: Sun 29 Jun 2025 10:01:18 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: s9hkFmppimthseCbU33f1/uoK3raxWOo1qnsuJnfboU=)
2: Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa (hash: stdZJ0N6TnO5P8nlAhBGBijPlJ/mbcLMM3mJJx7zrV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:f7:03:a2:f3:99:c2:13:aa:b6:11:2f:01:da:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Jun 28 10:01:18 2025 GMT
Not After : Jun 29 10:01:18 2025 GMT
Subject: CN=baff5f158e57115c35c226ba0137b7e44618f681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:a9:94:d7:64:84:a6:29:23:0f:75:89:28:
fe:bd:ba:51:99:2c:22:0d:83:3b:23:c4:b7:c0:cd:
07:17:57:92:42:0d:5f:8f:c9:a1:1b:55:f2:31:31:
2b:27:0b:43:54:0c:0e:1b:ec:a4:74:73:53:5a:fc:
92:23:d2:4d:9c:60:02:bc:64:75:9f:b4:65:e9:dd:
3d:28:c2:ce:62:24:61:ea:cc:88:d2:65:81:c0:df:
bc:7f:06:73:1e:5b:c1:a8:50:28:62:9a:60:75:22:
0a:3d:e1:4b:55:5a:fd:fa:de:ee:0d:19:cf:29:ff:
fc:5c:30:57:84:8d:c2:f7:14:48:0e:ed:b9:ba:ed:
1f:7e:11:ba:87:aa:5e:25:42:04:fa:94:c1:84:39:
7a:84:bb:44:70:20:b0:e6:00:52:2d:d1:6e:09:cc:
d4:9a:55:37:d2:69:a1:74:eb:92:9b:13:c4:58:a1:
cf:f2:43:86:4f:54:a6:c5:de:90:ab:15:06:c0:0d:
d9:9b:0c:13:db:a8:76:f2:77:5c:3a:c5:04:ce:8b:
13:51:af:e3:bb:37:b4:aa:eb:97:8c:5f:be:65:1a:
2c:7b:42:5d:6d:b6:75:c9:68:2f:4d:71:f7:30:e0:
46:1f:ec:80:1f:60:b6:bc:40:0a:b7:82:78:bd:cd:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FF:5F:15:8E:57:11:5C:35:C2:26:BA:01:37:B7:E4:46:18:F6:81
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d6:e3:3d:02:21:ef:f3:18:93:6c:b4:62:b3:f9:57:8f:a7:
af:72:10:2c:36:00:60:05:fa:47:f6:7e:85:0b:fe:d3:25:b5:
ac:d2:e2:7e:94:ef:ec:00:6d:a4:25:11:f5:4a:12:e5:b5:96:
de:dd:5a:93:04:e1:4f:0b:98:8a:89:ff:37:de:3a:5a:e2:da:
57:a9:63:61:70:6d:33:80:89:47:63:b1:38:5b:e7:a7:01:bd:
99:1f:77:bc:d5:ea:cf:63:61:15:8e:17:12:5a:df:b6:1c:c2:
1a:fc:fa:eb:5a:27:44:17:43:0c:f2:b9:1c:a4:99:6e:c8:ad:
52:e0:a6:8a:c1:37:9c:e5:86:f7:a9:5c:68:96:90:e3:e6:ce:
24:39:62:a8:97:6b:23:3b:d2:bf:2e:0d:90:88:56:43:f3:20:
7a:67:ab:c3:51:fc:2e:04:2c:bd:4c:cf:c5:21:81:2f:4a:8c:
91:b5:5d:a3:c6:70:80:93:cc:2b:74:c7:61:fe:61:23:c2:81:
fe:ea:03:d4:98:81:c6:16:89:f7:e2:97:3a:6c:b7:6a:2f:af:
28:66:20:00:41:e1:d1:89:49:54:6d:ec:b7:48:35:37:dc:55:
8d:df:3d:dc:14:02:a9:e9:d5:bc:68:06:38:38:92:d0:70:fb:
e2:56:62:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:54 2025 by rpki-client