Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: SvDZsIOnPxShzZ7ylI0fEzk+g+S45GOTY1uowa5VLGw=
Subject key identifier: 4D:89:1C:14:84:F8:3B:1D:D4:83:B2:91:74:40:44:32:64:2A:01:4F
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 0197B7EA8D691069B2A64D4DF225E43533FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 1521
Signing time: Sat 28 Jun 2025 19:01:31 +0000
Manifest this update: Sat 28 Jun 2025 19:01:31 +0000
Manifest next update: Sun 29 Jun 2025 19:01:31 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: Q1pP6NzjvuA0tVDqsqTV5jJmsu/GnIMp4iPxt8eMk/M=)
2: kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa (hash: K3F9IA4gy3lGNBan+gMrBm2P+dEVmz4mQ6ObmV/2TV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8d:69:10:69:b2:a6:4d:4d:f2:25:e4:35:33:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Jun 28 19:01:31 2025 GMT
Not After : Jun 29 19:01:31 2025 GMT
Subject: CN=4d891c1484f83b1dd483b29174404432642a014f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:c7:f7:32:77:f2:19:10:b3:55:33:3f:4c:
a3:8d:af:b9:71:d6:3c:59:06:59:94:90:7f:73:48:
a1:fb:bf:6f:ea:58:c9:8f:66:79:9c:08:76:d1:9a:
ad:ac:12:bd:ce:9c:af:cf:ad:7b:ed:e6:66:27:f4:
03:0f:3a:41:45:21:69:b1:34:68:c6:5a:5f:ef:fb:
e1:b6:88:ab:9b:93:dc:f8:95:9e:71:c8:24:5a:3d:
43:3b:62:8f:e7:51:00:4a:e5:76:09:9b:71:e6:9f:
48:c1:df:40:da:ad:96:18:aa:60:4d:08:99:b5:82:
c1:c2:6f:c8:be:c6:15:eb:50:40:94:e1:29:63:75:
39:3f:7b:19:aa:c7:08:26:00:6e:27:2e:6d:9f:2f:
43:81:96:32:11:f0:75:8c:f5:7b:7f:1a:25:79:33:
d8:63:c0:f5:a4:b3:c5:99:86:c5:f4:66:08:0c:41:
c2:48:df:83:f6:ef:88:f1:32:39:1f:8a:69:94:fe:
40:eb:00:de:9e:6c:9e:9a:0a:4f:a7:6f:e6:f2:1f:
da:2e:e6:20:01:23:08:bb:c3:5b:b2:ed:17:4e:c4:
85:08:bd:cd:f6:f6:95:db:c2:70:87:d0:fe:fc:ab:
e5:d9:9f:89:4c:55:b5:a9:16:6f:c3:49:9b:47:d2:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:89:1C:14:84:F8:3B:1D:D4:83:B2:91:74:40:44:32:64:2A:01:4F
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:79:96:a4:8d:62:84:f7:ab:22:e7:76:02:1a:72:54:0b:f0:
50:4c:f4:b3:97:ef:90:68:bf:12:a5:0b:89:73:1a:91:b7:4c:
1f:83:19:bd:92:68:8f:0d:d3:5a:c3:c0:63:40:89:80:b8:50:
e2:81:80:cc:78:48:48:ee:bb:b8:27:12:ec:6a:ed:37:a8:b9:
cd:f9:82:4e:5e:bd:27:cd:07:0a:74:88:49:87:7b:1e:d8:2b:
7c:d8:9a:af:c7:83:70:52:64:a3:0d:44:c1:7a:a5:09:cb:5b:
ca:0d:24:bc:b0:ca:f5:ef:b0:78:a3:59:f8:e6:8b:61:23:e7:
b5:cb:28:a3:71:0d:6f:a7:b3:7f:18:a6:a5:2c:9c:74:2f:b4:
cc:e0:88:ca:10:17:9c:f3:44:36:a1:ea:4a:6b:9b:f2:ba:94:
3d:7a:b1:99:6b:94:be:3c:dd:56:de:65:2c:85:37:c8:44:52:
4f:a2:02:43:19:1e:a7:76:ab:2c:05:95:b2:f8:7c:e8:c7:e0:
01:d4:3a:ad:4a:40:09:bb:9f:d5:1a:12:69:5e:9d:4b:de:60:
24:33:61:e7:2e:54:36:08:ea:b7:c0:ee:8a:db:5b:6a:b7:ee:
39:8a:3e:4c:67:f8:e5:5f:7a:35:12:7b:c6:95:3b:fb:1a:c5:
5f:e4:06:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:42:58 2025 by rpki-client