Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
File: FXM_-CvgC0GpkN7WtysEy3v1gNc.mft (raw, json)
Hash identifier: 3dgwwO/Yci96BBuBL/GK/mvLWM1lXllBt1pX7l12I3o=
Subject key identifier: 64:0C:E0:B5:8C:C5:9A:4D:69:84:F0:E5:FA:6E:4E:8E:9E:E1:E9:3A
Authority key identifier: 15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
Certificate issuer: /CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Certificate serial: 01967A8DFABEF6D72183FD136DFDBDA8155A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 04:00:47 +0000
Manifest this update: Mon 28 Apr 2025 04:00:47 +0000
Manifest next update: Tue 29 Apr 2025 04:00:47 +0000
Files and hashes: 1: 64zRShTV31-oIpx-wKCS8H98LZE.roa (hash: BgDFhrJmyJFk7YH+jYYjlsS94cvZOyBrU+0fh461ZcY=)
2: FXM_-CvgC0GpkN7WtysEy3v1gNc.crl (hash: /0z/j+BMfX46q/5B52vyTS1Tw1vZkTSVytYaQTCWGgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:fa:be:f6:d7:21:83:fd:13:6d:fd:bd:a8:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Validity
Not Before: Apr 28 04:00:47 2025 GMT
Not After : Apr 29 04:00:47 2025 GMT
Subject: CN=640ce0b58cc59a4d6984f0e5fa6e4e8e9ee1e93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:35:51:11:c8:8a:54:71:ce:8c:93:05:2a:
1c:99:37:e7:18:da:4d:96:1a:78:bf:8e:7f:58:4a:
a9:b6:59:49:e0:52:d5:6a:e4:2f:26:44:65:7c:df:
0c:42:e6:b7:79:9f:5f:fc:1a:07:24:15:48:b9:6c:
12:4b:69:96:1c:2b:91:76:4c:aa:cd:aa:e8:27:10:
ab:b4:10:14:45:66:e7:bf:84:39:bb:d4:cd:92:63:
13:2c:66:de:9a:01:4c:6f:5d:bc:20:a8:a6:61:06:
95:16:2a:49:1e:b7:03:ff:99:06:14:1e:01:41:ff:
af:cf:b5:ad:eb:f3:6e:62:73:a3:5a:fe:29:af:30:
59:7d:8a:c1:04:cf:9e:50:2e:08:d3:24:fa:a9:9b:
87:19:48:ad:60:89:f8:45:cc:84:80:02:60:10:47:
aa:98:41:fc:ff:7e:7d:fa:df:03:e7:08:b2:e0:88:
4d:a7:5b:93:7f:4b:34:34:8f:81:a4:7b:38:a8:e4:
a4:27:cb:bc:37:6f:65:44:79:fa:39:2a:fc:60:a2:
a2:37:2d:3d:e4:39:a6:7c:43:c0:86:82:46:fc:20:
7b:a3:26:7a:1b:3c:b1:2a:3a:2d:2c:d4:e7:ea:58:
8d:93:a0:66:f3:57:9f:85:37:22:fa:b9:3a:f0:91:
cc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0C:E0:B5:8C:C5:9A:4D:69:84:F0:E5:FA:6E:4E:8E:9E:E1:E9:3A
X509v3 Authority Key Identifier:
keyid:15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:75:fe:e9:34:80:f5:70:df:38:73:9e:ba:63:ba:10:ee:0b:
8b:e2:4c:19:ac:d5:fb:26:f9:3c:e3:7e:03:9c:0c:f5:38:07:
1a:72:9a:6b:9c:51:4a:88:05:8c:7b:4d:f2:f8:ac:47:f2:44:
a7:a1:2c:f5:5a:84:1c:84:41:e2:6e:80:2e:2c:43:e5:75:13:
8b:03:59:cd:ce:b4:44:18:25:f8:9a:8e:8e:da:88:ac:a5:9a:
2a:47:55:5f:5b:cd:a2:b9:ab:3c:67:77:ae:9c:a6:c7:3e:88:
8c:60:f0:1b:de:65:9f:43:c7:27:ba:a7:30:2d:fa:0e:d0:a5:
26:7f:43:0b:06:83:36:2e:34:71:36:e7:04:59:b3:c3:2e:96:
a0:00:1a:94:58:87:5a:a8:e9:f3:3f:77:c8:9f:b6:61:7e:9b:
53:75:f9:54:8f:17:84:4e:1d:91:7d:ad:00:5d:87:a9:91:a7:
bf:42:a1:fc:56:9e:4d:09:3c:5b:19:be:d7:b9:69:be:c0:ac:
c7:bf:58:9e:16:2b:37:78:0b:e4:a1:df:c8:94:69:52:1c:4b:
3d:94:f6:8c:a8:3e:32:e3:5f:60:ac:e5:68:d8:6a:c6:9c:71:
ba:dd:df:33:39:87:14:dd:81:6c:bf:4f:63:38:88:49:f8:91:
cf:02:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:30:36 2025 by rpki-client