Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier: 5zBGWxXJpWnwJ3FPdKLo+rkxIX6pm7C/KvRJMJte1qM=
Subject key identifier: 2A:0A:1A:1F:49:EE:85:FB:FC:22:C3:90:53:18:18:96:E4:3E:A8:75
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 0197B6D7B9D369D50B309548900A8CA8F8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number: 08D5
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: I+1OfJDgwwdeCCSdHIU7DpKtzoeTlDULa26rYFA/jRg=)
2: g3b-X86nv3p6U9DOq4hCU_Dnmdo.roa (hash: 2YoEPjb/mUp/HqQp7Qak5HkOS9XgXc9API514lfVQEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b9:d3:69:d5:0b:30:95:48:90:0a:8c:a8:f8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=2a0a1a1f49ee85fbfc22c39053181896e43ea875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cd:d1:b2:0e:04:eb:29:d5:18:41:ad:30:a4:
b8:ca:ff:15:02:39:25:66:f3:81:3b:e9:4f:5d:8e:
87:83:0e:dd:ea:a5:63:76:fe:f6:5b:2a:9d:5d:bb:
fa:48:09:02:d7:5d:71:7a:04:43:9d:24:6d:e4:09:
e3:5a:3c:af:a2:72:62:64:99:77:7b:36:10:4a:07:
50:80:3d:4b:0d:cc:21:58:00:14:95:09:64:b5:d8:
54:b6:de:5d:b0:8f:eb:bd:33:2b:fc:0b:5e:43:54:
5a:41:ca:69:27:22:a5:8d:49:84:3e:a3:db:01:80:
59:0c:0d:76:bf:a0:e2:96:0a:ea:84:94:84:3d:65:
a9:f3:1d:a4:25:51:4e:7c:59:0b:96:c1:24:74:0a:
52:5c:29:50:f4:ab:21:de:65:4f:07:aa:10:6c:8d:
06:03:50:d1:8a:18:f6:86:08:1e:3a:89:d4:01:e4:
ee:1e:f6:8a:89:dc:e1:6c:aa:fb:be:d8:31:d4:17:
1b:f7:dc:98:9d:4c:eb:78:7a:02:a1:62:50:da:c4:
8b:8e:59:db:cd:e5:5a:25:70:aa:55:e5:7b:69:60:
e2:d3:5f:c4:75:f9:d9:09:f5:ba:a0:6c:5d:4b:9d:
b5:8e:f0:55:74:d8:a6:1d:93:ea:b3:8d:af:ea:1f:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0A:1A:1F:49:EE:85:FB:FC:22:C3:90:53:18:18:96:E4:3E:A8:75
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0a:2c:39:90:74:66:cd:ba:c4:a4:a2:b4:a4:0e:97:9b:bd:
c7:8d:22:52:a1:42:1c:51:c1:85:ab:21:3c:c5:a4:f1:e3:34:
35:72:0f:4b:89:ce:bf:59:ef:96:a5:b1:8c:0d:32:6b:66:01:
c7:60:3a:2b:ca:29:8b:80:c1:cc:73:80:d6:90:91:45:42:a3:
61:12:2b:3c:9e:aa:0c:17:5e:00:9e:07:18:d0:3c:2e:17:78:
ed:4d:87:cd:78:a9:a8:b4:77:73:66:8c:0d:49:80:a7:38:50:
8e:1d:5c:67:f7:38:18:f4:0c:b9:b8:4a:df:87:8e:ec:08:df:
4f:0d:12:eb:db:43:14:ab:13:2c:85:0c:da:cc:e6:b7:04:3e:
ea:b5:37:d7:28:12:11:24:b7:b9:04:39:55:c1:ec:b7:61:36:
7f:40:1c:6a:b7:da:c5:f7:a2:91:56:5c:00:9f:a7:68:48:20:
32:ef:b8:70:7e:5e:0b:04:a8:0f:cc:88:9f:2e:98:e5:65:d5:
fd:6f:6e:74:58:d0:5c:a1:34:cc:4c:79:9e:b4:b3:85:b4:7f:
ef:d2:20:b1:54:51:9a:77:aa:6a:cb:fa:3d:a7:44:64:de:ee:
fc:64:8a:ea:30:5b:82:bd:cf:44:67:78:ac:c2:6c:f7:da:74:
fb:c3:0f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:07 2025 by rpki-client