Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File: FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier: z/w3p5gi3gnuoQ8aw3cTtVfy242Hv5ay5xCeP43xXPw=
Subject key identifier: 72:DD:B6:C8:17:71:2F:1D:1F:79:9B:6A:65:9B:6A:64:CC:E8:87:01
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer: /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial: 0197B6A15199AF6F74348559848D8891E3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:54 +0000
Manifest this update: Sat 28 Jun 2025 13:01:54 +0000
Manifest next update: Sun 29 Jun 2025 13:01:54 +0000
Files and hashes: 1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: J/6TZj4loxYvWuK5oWFvrrah1GvhYYWxNV/Tap1BKSU=)
2: xdBt6mgdPLmEK6zvGwvirp2QCKY.roa (hash: nTAIAin8JLzpAvSGVhNOts7eSHkAmQZF1jcZc7SgaKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:51:99:af:6f:74:34:85:59:84:8d:88:91:e3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Validity
Not Before: Jun 28 13:01:54 2025 GMT
Not After : Jun 29 13:01:54 2025 GMT
Subject: CN=72ddb6c817712f1d1f799b6a659b6a64cce88701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:dc:10:3c:40:86:a2:e4:d8:90:f1:4d:b3:
09:c5:30:27:9c:5f:19:87:1c:64:39:36:79:34:17:
9f:77:df:a5:b0:ac:34:63:88:1a:9f:00:e2:c0:5f:
a2:2d:19:34:ab:72:97:90:69:16:c8:03:1f:2f:0a:
a6:89:39:38:ae:3e:c8:e1:78:84:2e:ac:bc:08:9e:
d7:7f:98:4e:bf:45:dc:d3:4e:07:c1:ed:10:5d:f6:
28:41:27:db:25:ca:64:95:b7:f0:0b:b3:4d:4b:58:
dc:1d:cc:13:3f:1f:fd:f4:09:ec:c2:c7:11:05:10:
7b:5f:b6:ab:8c:7a:0e:d1:4f:7b:bf:ba:79:d0:75:
4a:a9:81:fb:61:4c:d5:5d:03:50:67:c0:2d:cf:4f:
43:83:cc:60:3f:7e:08:fd:75:82:5b:db:22:72:17:
7c:db:55:0f:0e:d5:b5:eb:5e:f8:cb:8a:0f:c1:1f:
a6:ad:b5:b6:05:7a:a9:c6:c3:7b:42:77:09:52:e9:
14:cc:53:16:d7:ee:20:bd:9e:d3:fc:f9:2a:c1:b0:
98:1a:92:43:5e:7d:e7:1b:8c:16:2e:89:4c:f3:ab:
8e:f4:42:f0:83:47:9a:ac:23:06:11:36:41:3b:c7:
da:8b:e7:9c:e2:1c:72:a9:e8:42:be:72:90:20:2a:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DD:B6:C8:17:71:2F:1D:1F:79:9B:6A:65:9B:6A:64:CC:E8:87:01
X509v3 Authority Key Identifier:
keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8c:02:65:e5:49:75:08:67:61:3c:f4:71:6b:7c:09:6e:07:
68:ee:c6:15:6c:51:7b:cb:0f:63:64:4d:75:52:34:74:3f:a4:
9c:bf:e1:97:26:9a:4b:80:6a:af:88:84:2f:77:73:52:0c:f4:
ed:4d:58:6f:6f:cc:14:34:71:15:be:ce:5c:19:8a:75:0c:1d:
e5:48:6b:8d:75:24:e9:5f:9d:e2:5f:c4:ef:78:4d:6a:56:65:
77:60:5e:c7:2b:38:a6:58:c6:7d:5d:d6:d0:88:2b:da:3d:f0:
ba:32:a5:54:45:b0:04:0d:b3:a9:e6:aa:fe:c9:ec:ab:08:2c:
6f:ce:17:95:05:d8:91:4e:77:ec:16:f3:da:fc:43:2d:d0:3c:
45:3d:88:c7:c8:61:28:3f:39:29:de:7c:bb:92:39:61:db:a2:
a3:8f:92:69:20:58:4f:46:c5:47:05:b1:7e:25:c6:4f:a5:f5:
e3:e9:a8:57:e3:1d:e7:ea:c0:d6:92:b7:42:9b:10:40:9d:71:
40:a7:19:1d:5c:97:a3:0e:94:3e:b5:3f:99:32:5e:c7:66:01:
41:34:86:fd:5c:04:92:04:e0:b5:6c:37:61:cb:b4:4f:c9:ef:
ac:b0:a2:2d:a5:ac:2c:30:9a:0f:8d:71:d5:95:1c:33:46:3f:
67:b0:c6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:17:25 2025 by rpki-client