Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File: FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier: ypB0q5L7Y8kBJFFZkTZ6eo+3ZVFh+uNyMdjBolp9ll0=
Subject key identifier: CB:00:6D:DC:D2:DE:8A:DF:CE:15:DD:BB:7A:C8:C8:29:06:91:D9:FF
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 0197B6327ECC2F38C63C3C25CDD8663CC1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number: 0611
Signing time: Sat 28 Jun 2025 11:00:51 +0000
Manifest this update: Sat 28 Jun 2025 11:00:51 +0000
Manifest next update: Sun 29 Jun 2025 11:00:51 +0000
Files and hashes: 1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: O5L2bpfZWPwvQJ/+y7jR5ktBbXyzsor+uxyQB0fzikc=)
2: GCjWN1dfacWVs6-dNAwUIB0pPtc.roa (hash: +OOo5n41q6UluB+BR+drcDaI3qsRIhz7e++vaPZKGtk=)
3: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (hash: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=)
4: W-3K5fzCzMBvM9WtH7NvbBMRwIA.roa (hash: RRZIltRS/dq6CUsYykb/8Cw+Mt7NFvaTFyBHpZDyvgA=)
5: lG1BuTFjXhh1jhBZGFRoMZ1VGUk.roa (hash: MY1BZJhxcWBrL8EPmHWLLNAliv/8MF/BrwKcRtPCEYA=)
6: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (hash: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=)
7: uMrc6Goc6EcB4BYik3tS4FAFhEU.roa (hash: XOKT7o47MThPABfgFTBszgq+QbxIg28i2iizclcbpXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:7e:cc:2f:38:c6:3c:3c:25:cd:d8:66:3c:c1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Jun 28 11:00:51 2025 GMT
Not After : Jun 29 11:00:51 2025 GMT
Subject: CN=cb006ddcd2de8adfce15ddbb7ac8c8290691d9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:2b:43:0b:b3:69:ad:7f:66:69:3c:a5:51:
25:0a:6a:07:b3:64:13:34:b9:64:d1:e7:89:4b:47:
ad:0e:0f:15:7b:7e:6c:7b:8f:4c:30:4d:f8:b7:7d:
18:b7:fd:9a:a9:20:e5:d9:54:08:c3:66:fd:7e:c8:
64:0f:dc:18:d5:1a:45:93:fc:44:02:0f:db:1f:ec:
f4:df:eb:61:66:87:ae:21:35:45:bb:99:07:ba:ee:
0e:48:dc:a2:95:1d:3c:ab:85:0e:88:e8:02:83:87:
05:18:fb:9a:12:0f:59:33:84:81:35:96:5c:73:11:
8a:ff:09:8e:b8:92:f1:69:aa:b6:1c:58:ac:9c:42:
ce:79:87:fd:51:c2:d0:f0:c9:91:5e:b8:cb:4c:61:
47:21:34:c2:c1:59:ea:68:f9:38:76:d2:11:38:e6:
9b:47:fe:db:78:b0:ac:ca:94:2f:01:c5:31:d7:09:
b3:63:82:c3:08:76:6e:7c:2c:b7:78:6f:19:c7:ba:
4d:17:be:c6:43:72:5b:11:2e:ad:ca:ac:bd:13:61:
cf:bc:ff:ab:fa:cd:7d:6b:17:93:76:30:e2:3a:d8:
a4:08:39:da:2d:c0:74:ed:e3:bf:9f:f2:b0:de:ed:
38:63:23:20:11:d3:7f:26:48:ca:d5:ab:36:ba:61:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:00:6D:DC:D2:DE:8A:DF:CE:15:DD:BB:7A:C8:C8:29:06:91:D9:FF
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e3:49:98:c0:87:0b:67:6c:3a:95:7c:14:b3:0f:1b:e9:36:
d2:1c:9f:27:4c:e5:74:31:4e:c1:3a:95:e7:a7:36:bb:72:0e:
58:78:18:f7:3b:7e:bd:7a:79:3e:05:f4:ad:90:56:db:03:e3:
01:35:0a:ea:32:10:9c:73:e1:e0:91:7c:95:86:20:b0:08:4f:
ce:f8:5c:40:7f:2c:4b:49:32:86:e7:30:cc:bd:f6:c0:31:b5:
91:1e:4c:c3:52:fe:d6:99:3b:d0:ab:7d:f4:27:22:fd:9c:aa:
91:c5:d6:4f:c6:9a:19:10:c5:02:4a:41:5c:75:85:ed:3c:e1:
f6:72:d3:7a:45:0c:e5:7b:79:61:ef:f6:5f:f7:67:06:42:56:
04:7b:fd:31:55:32:6a:6c:19:9c:66:0f:7a:ac:55:5e:e0:4d:
a1:fc:a4:f3:91:92:43:97:ad:ba:ec:f2:a7:c0:91:21:43:ad:
68:24:f8:26:bf:7d:cc:f3:3c:52:ce:2a:36:5b:bf:a0:40:37:
d6:6f:ac:96:88:34:e4:69:e7:74:65:8d:97:05:29:12:68:4a:
d8:8a:fd:90:07:8d:ca:3e:6c:a3:d0:b2:67:32:4d:2a:00:f3:
f5:b7:f2:7b:dd:34:f0:eb:66:45:e6:43:79:ad:c4:2b:d1:1d:
ee:94:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:58 2025 by rpki-client