Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
File: FDNseNUrqBFXQQArawcNEXrpv80.mft (raw, json)
Hash identifier: xmJl84sduqkCjMp03ON49BqMTae2OsPsQ/WPBTdK/pk=
Subject key identifier: DF:2D:60:63:66:97:85:58:4B:7E:20:D1:93:15:61:14:57:45:8B:6C
Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
Certificate issuer: /CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Certificate serial: 0197B77C80534E189BBE238F00D1CAB08E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
Manifest number: 1151
Signing time: Sat 28 Jun 2025 17:01:18 +0000
Manifest this update: Sat 28 Jun 2025 17:01:18 +0000
Manifest next update: Sun 29 Jun 2025 17:01:18 +0000
Files and hashes: 1: E3L5dg5X3rqNLqYU8O9X1WsszW4.roa (hash: OcbMuDrIfD/A7RNsLFSYw+FRN5f4hK+YArdJTnwQdlk=)
2: FDNseNUrqBFXQQArawcNEXrpv80.crl (hash: W6E9lsZl7bQEu4qSk9iiYVTxRqt57YpDv0SsLjtREhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:80:53:4e:18:9b:be:23:8f:00:d1:ca:b0:8e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Validity
Not Before: Jun 28 17:01:18 2025 GMT
Not After : Jun 29 17:01:18 2025 GMT
Subject: CN=df2d6063669785584b7e20d19315611457458b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:2e:55:c8:fd:6d:2b:67:fe:be:58:30:e6:
57:03:9e:c8:c4:09:03:02:b1:35:5f:6f:aa:f5:07:
6b:77:ff:25:ef:cd:37:93:b5:23:b8:5c:58:b7:9b:
50:5a:c3:59:8b:2b:f1:46:a5:4d:b4:8e:40:4b:85:
6d:44:d5:34:42:f9:03:73:92:48:66:fc:d9:1a:ea:
65:74:c2:61:83:cd:4b:61:29:7b:6a:31:45:af:bb:
77:18:90:46:97:9e:1c:c1:4e:9a:82:51:e8:0f:8c:
55:12:fc:e1:15:a2:f8:eb:43:eb:c6:10:24:0a:94:
d1:1f:e7:03:04:06:15:12:c3:bb:5f:2f:8f:48:7f:
4c:ba:9f:7a:44:cb:46:bd:99:bf:99:81:90:4d:26:
77:7d:94:7f:6e:2d:26:3e:25:5a:f8:d1:cf:7a:0d:
31:57:58:66:c5:36:2a:a6:12:b0:ec:6a:79:7f:b5:
bd:b4:8c:ae:93:ce:e1:86:25:de:de:b2:bd:3e:81:
49:4c:90:b8:d6:53:58:70:96:b4:34:14:58:d4:70:
dc:07:3e:99:b8:31:9a:2f:9c:65:d2:cd:02:f4:ac:
c0:5b:35:7a:f6:80:04:94:2c:7d:e8:e7:78:82:7e:
a5:45:62:58:74:28:3a:1f:11:db:66:4f:c1:ce:87:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2D:60:63:66:97:85:58:4B:7E:20:D1:93:15:61:14:57:45:8B:6C
X509v3 Authority Key Identifier:
keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:76:3f:d3:5d:f1:e7:6d:54:74:1b:d5:96:5f:36:82:64:0b:
72:68:94:e0:cc:6a:85:ea:5f:57:b5:f5:aa:2d:ff:0c:cc:72:
24:a1:b7:1b:ca:79:04:b1:24:08:71:06:a0:fa:99:a4:39:fb:
d8:aa:ff:bb:4a:3a:05:b9:53:3b:0b:e0:e0:54:97:49:57:4e:
82:cb:d5:d4:54:13:13:65:12:5c:d5:1c:bd:75:26:3c:24:85:
d8:28:2b:25:14:23:2f:e9:75:ab:d7:3b:cb:0e:47:21:39:08:
97:88:bc:5c:8a:fc:22:aa:64:d9:8c:30:ac:20:b0:7b:7c:07:
4d:8a:06:1c:b9:b3:a2:63:62:2c:e4:ca:1b:9d:24:f3:2e:88:
f9:6e:c0:76:d8:3a:a8:b6:7b:8d:44:21:a7:91:eb:46:b1:d2:
24:b8:2c:bf:b6:be:0d:61:8c:2f:06:ef:f6:7e:49:53:92:11:
17:5a:f1:02:2e:c5:78:21:5b:c5:06:32:ea:34:10:24:27:cd:
20:4e:35:88:e3:00:b5:87:e5:57:8b:e7:9a:44:1c:73:92:a1:
98:03:8f:70:49:dc:4b:84:b4:47:25:b6:ba:97:43:ee:03:b8:
0a:f1:ca:86:eb:23:35:43:c3:6a:f3:ad:85:96:38:18:e3:ac:
8f:7f:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:46:01 2025 by rpki-client