Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
File: FZe51zSAyiLL8x-q8LzL7TCyCV4.mft (raw, json)
Hash identifier: esDcjl2cDUTdcBm+p5j1ItxYGH+HIG4TIO99WGE3tMI=
Subject key identifier: 3D:AE:05:42:52:CF:6D:F1:B3:4E:24:5E:76:6E:92:29:EF:BE:8E:3B
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 0197BA0F2641E8A9AD67894388A24C4001E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
Manifest number: 0645
Signing time: Sun 29 Jun 2025 05:00:44 +0000
Manifest this update: Sun 29 Jun 2025 05:00:44 +0000
Manifest next update: Mon 30 Jun 2025 05:00:44 +0000
Files and hashes: 1: FZe51zSAyiLL8x-q8LzL7TCyCV4.crl (hash: tKn7Uox759fPMR2q5/ZXuluY0KCPI2RZVdiMrjbQWDI=)
2: KxRNTvfcdP27-i8KDlCuxj_UX9s.roa (hash: olLk9GQzBEMbkOZCVQ+if+KnQS1x8YbAz2sIcJuFwbg=)
3: TTEx5Tf_ryhhBEghXe_juH2H65U.roa (hash: 6yFkwOTsWr11Au8Jovaobg2AJZpMXPDe7vY/stuVAs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:26:41:e8:a9:ad:67:89:43:88:a2:4c:40:01:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Jun 29 05:00:44 2025 GMT
Not After : Jun 30 05:00:44 2025 GMT
Subject: CN=3dae054252cf6df1b34e245e766e9229efbe8e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:c5:7a:ba:da:88:c8:a1:b5:e1:83:43:49:
f6:38:f6:5c:e9:ba:84:29:34:c1:75:fd:c6:fd:0f:
1f:f1:4f:4a:eb:c9:47:fc:a9:06:99:79:3a:40:80:
71:bb:09:63:79:d7:39:5b:25:ee:9b:92:1a:2e:bd:
3f:31:9e:0e:61:aa:f8:d0:13:c5:34:4b:ce:20:8b:
5d:bd:d2:64:f5:17:fd:96:02:d9:26:48:9e:0e:88:
dc:40:3b:c4:9b:08:c5:68:8a:a1:36:bc:25:b9:1a:
a0:04:de:dd:52:ae:c1:69:40:11:2f:4c:59:6c:aa:
c8:31:c6:1b:d2:b6:e8:30:9e:8d:c6:c8:26:bd:5f:
a9:27:a8:30:82:a7:66:ae:65:c9:4c:7e:f5:f0:89:
be:f6:de:49:97:68:6d:b6:4a:83:44:e0:65:d4:cb:
7d:14:92:9e:8d:14:8d:29:1d:8b:98:3d:91:e8:2b:
29:7d:25:19:7c:75:ea:90:92:0c:25:47:ad:9e:9f:
c6:fe:5c:79:e0:cb:18:2a:67:73:50:f3:8a:ba:cb:
c4:a0:41:75:ee:bd:05:e6:59:4c:34:7d:f7:7d:96:
bb:74:52:11:ca:b9:a9:cc:03:e1:5a:2f:f7:6d:bc:
52:ee:1c:1f:f9:c3:16:fb:19:77:9f:e3:ae:c3:01:
c5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AE:05:42:52:CF:6D:F1:B3:4E:24:5E:76:6E:92:29:EF:BE:8E:3B
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3d:1a:27:76:96:9b:3e:0c:0e:be:16:c9:d6:41:04:e7:72:
e8:fa:04:5b:06:85:f4:da:80:8c:de:94:4a:75:e7:5d:17:55:
db:a5:ae:87:70:e9:b1:3b:f2:a0:9f:82:58:92:d0:19:6a:00:
6a:62:a3:0e:01:9d:10:af:d5:9b:43:e9:a6:95:2e:a2:ff:26:
f2:77:77:cd:87:0f:03:bd:50:e6:aa:21:62:b2:a3:9a:a2:e0:
eb:1d:28:e4:04:e8:eb:e8:5c:0b:98:3d:f1:22:2f:3f:12:ab:
bc:3e:1b:77:8b:ce:25:03:57:b7:f4:ec:44:2f:36:18:b8:ae:
37:c3:04:a7:eb:ff:55:ee:cb:58:8f:09:80:7f:e4:fd:0a:46:
71:b1:67:12:77:18:6f:d8:cf:73:b6:0f:19:c6:06:59:cd:58:
4a:23:03:c0:5b:c6:97:6e:2c:82:af:00:11:88:30:3a:4c:48:
01:a5:24:82:94:82:81:d6:18:98:1f:8c:d7:6b:ab:45:b3:d1:
f6:e9:76:05:86:90:f7:89:57:4d:20:72:b9:c2:69:df:d4:3c:
08:41:a7:11:cf:7e:5d:9f:44:f8:91:ee:7b:b0:48:3f:84:05:
46:f7:f0:8d:ea:a7:c9:7b:7b:3f:26:ce:4a:e2:dc:ef:c3:02:
c8:ea:33:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:23:07 2025 by rpki-client