Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
File: FVCvriuu-2uI-XUbsyGOs5uUtXY.mft (raw, json)
Hash identifier: CwGMwMWVL9Yp2fYnHS+Kxm4O3Jglj6Pod0ht5n69skM=
Subject key identifier: 26:25:C3:A9:44:D3:E3:13:B6:53:F8:3A:8D:63:0C:19:8B:95:A7:4E
Authority key identifier: 15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76
Certificate issuer: /CN=1550afae2baefb6b88f9751bb3218eb39b94b576
Certificate serial: 0196790D1374EAA867CD6F02F764582C560F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 21:00:22 +0000
Manifest this update: Sun 27 Apr 2025 21:00:22 +0000
Manifest next update: Mon 28 Apr 2025 21:00:22 +0000
Files and hashes: 1: FVCvriuu-2uI-XUbsyGOs5uUtXY.crl (hash: Hjj33MBTCxPcKmZqqXHTuaDYQuMKgQBEPGnlXVhvFGs=)
2: t9fTM1TKvJ-oUXQJ9lDM9WsVyDc.roa (hash: bT5E6LtHCC1AluQgd2lvyOIQ+/FsjKMjc8eOVOWcAoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:13:74:ea:a8:67:cd:6f:02:f7:64:58:2c:56:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1550afae2baefb6b88f9751bb3218eb39b94b576
Validity
Not Before: Apr 27 21:00:22 2025 GMT
Not After : Apr 28 21:00:22 2025 GMT
Subject: CN=2625c3a944d3e313b653f83a8d630c198b95a74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:20:49:86:5b:05:f2:41:41:4e:4c:06:78:
59:72:40:68:d2:a5:24:8e:9f:70:6a:04:b6:19:3b:
c3:3e:1e:a2:57:06:14:5e:cd:25:60:1b:76:56:49:
61:93:e7:d6:b8:58:cd:a5:a0:5e:80:18:4f:c5:b5:
b5:40:c1:ac:0e:44:f3:84:b8:3f:66:51:fb:44:04:
96:23:53:f3:40:03:1b:05:5f:79:26:bf:06:c2:07:
0c:aa:be:a9:ab:17:b9:1e:26:9a:75:db:68:00:fb:
36:77:97:21:64:3d:1a:87:5d:2e:55:d7:64:07:40:
14:8f:88:2a:de:85:ec:95:0d:b0:31:7d:c0:09:bc:
e7:55:17:e1:68:76:e8:e1:0b:cd:e1:c0:a6:81:9e:
fa:21:8c:e2:3d:77:2c:56:04:6f:28:b5:2a:77:d4:
f3:78:2c:67:04:de:82:0d:a2:fe:ed:33:e1:2d:70:
0a:79:d3:ed:a1:e6:d8:91:a3:b6:95:bd:b2:7b:20:
eb:80:e3:11:d9:51:32:31:25:b5:1d:64:5a:2c:a0:
d6:08:e0:3c:de:e5:f3:5e:f7:0b:00:b6:e6:ff:65:
b7:3e:13:7c:37:d7:f2:e3:37:74:26:8f:28:3f:9b:
85:bd:1b:6d:8b:58:d8:ae:44:b8:c8:e0:2c:7f:83:
f3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:25:C3:A9:44:D3:E3:13:B6:53:F8:3A:8D:63:0C:19:8B:95:A7:4E
X509v3 Authority Key Identifier:
keyid:15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0e:89:85:36:3c:4d:a7:b4:97:66:03:32:07:ac:10:6e:7c:
8b:e7:cb:29:0a:db:e2:8a:11:52:8b:e4:f2:ab:8a:47:68:7c:
80:37:f9:23:b2:0e:b1:3a:ff:d0:b7:28:fd:3d:23:1d:70:38:
30:78:7d:7a:fb:94:ec:cb:a8:fe:08:65:db:b3:55:0b:c8:f9:
ca:59:31:42:62:0a:9c:6b:60:3f:57:01:f9:af:80:32:f2:8d:
34:d2:3d:b8:a8:db:c0:de:9f:a8:ac:0a:93:c2:ae:0a:b7:f3:
40:23:38:9d:0e:a4:9d:9e:e0:ed:58:4f:4d:7b:0b:79:04:94:
f8:45:1a:ac:f2:f7:f0:61:4e:c7:94:95:72:09:95:40:be:80:
15:0e:4d:36:75:f0:40:33:9d:e5:de:22:29:4c:ee:76:c4:ea:
60:9c:95:21:4c:15:f5:24:a9:d9:20:42:27:4d:bb:07:ef:fc:
a9:69:32:67:01:1c:11:8b:2f:2c:fb:7a:8d:e9:1e:a3:83:e5:
f8:01:a3:fb:e5:42:be:3b:4d:6f:8d:74:cc:c8:ac:74:62:66:
2e:3e:f7:3c:4b:02:de:84:b6:e6:cd:7f:97:75:e1:e6:20:ff:
e5:fe:ca:33:16:60:e3:2c:3f:1f:e2:56:db:1a:bf:6d:72:99:
c3:93:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:19:11 2025 by rpki-client