Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: GZZFW+D2UiqH0un5siDk2c3Ca+YyGB8yIkahVT+A75Q=
Subject key identifier: 5D:15:95:36:C6:4C:08:1A:BF:C4:35:74:48:BF:CD:22:EB:0A:57:F3
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 0197B70E72626964808BDB41B7251CCA7527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 10FA
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: 3TzbaQOiZn8mYm8p+sUtIh0WjB1gbwwOgZzrtq2HvZs=)
2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=)
3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:72:62:69:64:80:8b:db:41:b7:25:1c:ca:75:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=5d159536c64c081abfc4357448bfcd22eb0a57f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:82:ae:0d:a3:d5:b0:e7:95:75:60:28:de:
74:2e:1a:34:5d:ee:63:95:23:f4:98:fb:0b:a3:e3:
c8:3e:0e:0d:71:5a:61:a0:13:42:ce:6c:b9:36:ed:
41:74:51:de:d9:ba:8d:da:9c:f1:fb:db:f9:02:d9:
c3:05:13:74:42:19:e7:41:78:61:8e:f5:1a:16:38:
4f:df:f0:2d:5a:d9:16:52:0f:29:40:5e:50:9e:1a:
12:52:22:97:c1:e7:e0:44:01:d5:30:15:ca:03:27:
64:67:6f:71:81:8a:9c:e0:d5:2d:81:2b:62:88:af:
af:e7:0f:be:6d:17:ee:fc:e1:49:85:8e:d0:43:7d:
97:f6:d8:88:a1:0b:b4:bc:0e:17:71:51:73:7c:54:
dd:a9:e7:ca:c9:ed:3a:49:b6:e4:ac:a4:60:68:17:
40:f4:b2:a0:9e:8a:8e:b3:0b:db:a7:2a:41:cd:17:
9b:47:7b:04:5f:aa:30:47:f4:d5:17:57:42:f6:5b:
66:30:0c:a8:39:82:d9:f2:8a:80:c1:9a:c2:da:13:
19:e5:a4:31:80:8d:a3:64:68:83:f7:9a:c1:c3:52:
91:d8:d4:b3:fb:18:38:94:51:e7:ae:53:32:4a:6a:
d2:8e:27:4b:07:47:13:a7:c8:d1:ff:4e:54:c7:04:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:15:95:36:C6:4C:08:1A:BF:C4:35:74:48:BF:CD:22:EB:0A:57:F3
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:29:a5:3b:54:3d:74:f9:fc:25:00:48:e2:09:73:83:c4:86:
ea:c9:05:67:5e:0f:25:ce:39:ea:96:b3:c9:d1:b0:e0:d9:76:
2e:dc:51:5b:d4:78:f4:71:76:7c:24:ee:6b:a2:38:ee:0b:a5:
a8:cc:1b:2b:48:12:0e:95:31:cf:d8:3b:e5:52:05:d3:db:fd:
e6:9d:96:91:70:63:5b:6d:f9:a9:51:b8:eb:fb:e3:e9:9c:94:
f8:d1:c2:51:91:b4:da:27:39:4d:c4:38:13:19:02:c8:b7:ca:
8d:bf:6c:3b:93:ba:82:7d:94:e0:54:1d:20:f2:ad:4b:50:41:
c0:e5:c8:77:82:9f:68:99:8d:51:15:29:f8:1e:70:0b:66:79:
4f:68:bb:c8:02:8d:6a:8e:5f:cb:63:48:98:a5:64:dc:b5:fc:
f4:77:16:e2:31:f5:c2:d7:2f:0a:a7:44:ff:dd:b4:f1:04:2a:
dc:47:0a:c2:e0:e7:78:1c:00:3b:9c:08:30:8b:dd:29:d2:82:
79:8f:01:78:e1:ef:e9:48:89:ce:bb:f2:6d:28:05:6e:f2:ee:
c3:0c:cf:ca:a8:c8:af:a3:3e:e4:9f:25:35:10:e8:a0:58:6f:
de:39:f7:2c:e6:ba:6e:07:22:8b:8a:df:23:ea:42:fb:02:87:
c8:41:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:51 2025 by rpki-client