Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: cuU+z2LMCbcGUwD1qpB03wqf30XpPySkL86agb0q6oo=
Subject key identifier: 92:3B:0D:21:DA:ED:6B:0C:1A:B7:D5:C2:6E:B2:2D:7C:F8:FE:0E:11
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 0197B6A1524CE215F2ABF7442F7DCD9D9231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 0EA1
Signing time: Sat 28 Jun 2025 13:01:54 +0000
Manifest this update: Sat 28 Jun 2025 13:01:54 +0000
Manifest next update: Sun 29 Jun 2025 13:01:54 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: L+sKAs4UD981BuOWlFK3IKe11BGRO8UZofTFjWanSCo=)
2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=)
3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:52:4c:e2:15:f2:ab:f7:44:2f:7d:cd:9d:92:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Jun 28 13:01:54 2025 GMT
Not After : Jun 29 13:01:54 2025 GMT
Subject: CN=923b0d21daed6b0c1ab7d5c26eb22d7cf8fe0e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:15:0d:f0:ba:41:c3:48:a9:c0:29:7e:ba:
4a:48:55:a9:40:4b:0e:c6:4b:60:df:09:79:57:cd:
d2:d6:25:9a:c0:48:70:65:ac:ae:89:38:8b:a7:b9:
f0:78:9a:ba:fe:b0:d0:62:de:99:27:ea:16:a7:18:
8a:c6:f8:1a:26:13:34:e3:ce:50:9e:50:69:80:8d:
af:22:5c:0b:bb:c2:33:bb:c7:fb:59:42:4c:0c:a9:
0b:cd:b4:67:39:ff:f3:4c:ff:fa:dc:8d:73:c3:0d:
ad:53:4d:a2:2a:29:4c:4d:ad:93:a0:52:45:55:71:
5f:c7:8c:da:49:cc:f7:ed:38:c5:15:cc:6c:9d:47:
aa:a3:15:be:05:13:0e:82:b2:77:dc:07:2e:98:fc:
28:b1:86:b1:09:ae:15:b8:27:41:71:41:88:ed:28:
9d:69:e9:ad:ff:17:b7:bf:19:40:8c:94:72:ae:d7:
48:84:7b:c1:74:e2:7f:06:6f:8a:a2:dd:9c:d9:de:
5c:9a:54:65:3d:e9:04:23:16:d0:e9:fc:81:fe:13:
67:07:dc:d0:ee:05:47:12:2c:de:7b:5f:bf:2f:0e:
43:fd:fd:47:01:b3:b3:00:a5:9e:47:af:0d:ec:a5:
92:9d:86:65:8d:96:2c:a6:32:f3:0c:8b:78:c0:9f:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3B:0D:21:DA:ED:6B:0C:1A:B7:D5:C2:6E:B2:2D:7C:F8:FE:0E:11
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7b:71:01:e3:f7:aa:4a:7c:de:8a:4d:b0:95:d2:b0:d9:97:
bf:c3:a4:80:cf:f9:b8:8e:74:5f:a0:7c:1c:87:8b:2c:e5:3e:
86:18:72:fe:cb:3f:07:c6:dc:cd:c4:b4:60:0c:e1:bf:61:bd:
b5:8e:6b:30:f6:c6:00:c1:c3:66:1f:50:5b:6d:10:c9:22:cf:
8e:b7:28:c3:d6:9f:db:3f:3b:f0:40:1a:65:59:66:09:ee:e1:
43:a8:d6:a9:9f:3e:e5:75:b2:5a:46:1b:f4:53:93:f4:a3:52:
bd:27:6d:1d:73:77:7a:9f:62:9a:6a:c3:16:2a:29:74:64:6c:
f4:3d:5d:f6:a3:4d:26:20:6f:2d:3b:d5:1c:a0:73:b9:72:47:
c9:9c:ee:7b:3e:f2:87:1a:0d:43:75:26:14:cc:70:47:9d:08:
7d:ac:f0:ce:86:66:54:5c:6e:49:ef:8f:42:c8:2e:03:87:6a:
b1:ff:a7:3f:c4:21:45:3d:7d:73:ab:3e:85:3a:43:f3:eb:e5:
da:c0:6d:08:8a:35:1f:26:ab:24:f6:47:0b:39:42:0b:d1:c2:
9a:e8:4e:b9:30:39:a4:66:9f:d0:aa:05:6f:3a:d4:c3:32:e7:
08:96:68:01:17:9b:77:34:5a:80:e8:ea:50:43:d9:ca:7b:2e:
12:a3:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:58 2025 by rpki-client