Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
File: FPwSEe469lf8lPkvoDCd5sbJQG4.mft (raw, json)
Hash identifier: GqLuajw8PUoCTK5dxBfTjOx9jxd+UhiVTrPe8GEJSs8=
Subject key identifier: DC:FA:7B:1E:FC:C3:1F:B6:3E:DB:89:2B:89:19:AC:16:85:1E:11:74
Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
Certificate issuer: /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Certificate serial: 01967BD761CD2450505C543DD552AF5337A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
Manifest number: 0BC7
Signing time: Mon 28 Apr 2025 10:00:34 +0000
Manifest this update: Mon 28 Apr 2025 10:00:34 +0000
Manifest next update: Tue 29 Apr 2025 10:00:34 +0000
Files and hashes: 1: FPwSEe469lf8lPkvoDCd5sbJQG4.crl (hash: QOJcGfFAN5iPLeY5K+hSaeIxou/VCa8KrXIbSo1YQAY=)
2: aJypmqoFfKbNLA7QelNPg-kxzbw.roa (hash: AlnIanfnH1GwrGuXXqK+U4eJyego+t2Sw5napesUvxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:61:cd:24:50:50:5c:54:3d:d5:52:af:53:37:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Validity
Not Before: Apr 28 10:00:34 2025 GMT
Not After : Apr 29 10:00:34 2025 GMT
Subject: CN=dcfa7b1efcc31fb63edb892b8919ac16851e1174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:ca:6e:25:84:29:15:48:96:b5:80:61:09:
38:5e:7f:92:7e:29:b9:24:0c:35:f5:15:ea:66:f0:
d1:6b:cb:2c:1d:41:6c:0f:bf:9d:d1:84:a7:88:a7:
41:60:0b:13:da:03:62:8e:46:71:7a:0b:b3:df:d8:
10:12:46:ed:b3:81:41:cb:08:ca:3d:ee:b3:30:74:
b8:7d:33:c5:86:25:cc:4f:ce:36:b0:78:2d:c9:10:
de:17:ba:9e:d4:86:15:dc:05:a3:35:53:2d:28:6f:
4a:3d:fe:bd:bd:8a:10:7f:e7:72:3a:40:0a:af:96:
5a:78:90:38:e3:d6:7d:1f:a7:05:14:72:a8:cc:ce:
89:74:ae:a7:5f:ce:a7:ad:30:8f:e6:fa:18:71:6a:
4e:85:c9:a5:98:c7:69:77:4d:29:bd:c3:dc:3c:34:
63:d7:cc:94:5b:7a:0e:92:70:00:5f:f6:6f:69:d2:
fd:0d:2d:0a:fc:08:8f:ec:32:3b:75:37:fc:07:20:
2b:69:b4:c6:98:6a:65:8c:3e:ed:1b:53:88:eb:f6:
32:14:15:b6:98:e7:b8:4d:20:88:14:ed:9e:4c:bd:
a6:72:de:1f:df:68:47:11:9d:b4:40:80:4d:8c:92:
7a:cc:0b:0f:16:9c:69:c4:31:c9:ae:a9:4a:97:ea:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:7B:1E:FC:C3:1F:B6:3E:DB:89:2B:89:19:AC:16:85:1E:11:74
X509v3 Authority Key Identifier:
keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1a:e3:1f:15:ff:ac:91:e6:eb:c2:03:6e:ba:b1:52:c0:14:
0a:80:4a:f4:c6:c1:f0:d9:32:cd:ba:5e:6d:64:df:dc:aa:98:
02:e7:e4:3b:41:36:ae:4c:dd:bc:ca:84:87:e4:ce:92:0e:dd:
a2:d6:ee:0d:d5:29:12:88:00:a9:06:d3:31:e8:96:03:af:f5:
c9:bc:00:29:78:b9:0b:b9:b6:a0:37:bd:87:4d:87:28:87:ee:
ab:26:5d:1d:fb:2b:61:8f:3d:4e:d0:79:15:43:31:68:3b:ab:
d8:b0:5a:10:44:2a:74:46:9e:f2:e7:0b:ea:a8:95:1a:64:bc:
e8:44:5a:9d:89:f0:05:ed:12:a3:12:c9:0a:d0:1b:97:22:5a:
a8:44:e4:96:85:ea:26:0c:3e:7b:fb:60:a8:a0:ff:da:2c:f0:
fc:b5:bc:fd:b1:37:09:2f:ea:4f:f3:8b:21:04:77:38:19:3f:
03:fa:8a:7d:86:44:b5:66:b4:8d:e4:98:4b:7e:e1:0d:1e:42:
88:86:69:4d:8f:14:a7:81:50:e8:d8:fb:f8:16:20:73:67:ef:
d4:9f:e9:fb:e6:d8:b3:62:48:14:3f:00:56:29:ab:bb:2c:ed:
4b:99:88:8b:f0:3b:be:2e:d3:ab:a3:eb:9e:34:02:51:dc:b7:
a2:68:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:52:11 2025 by rpki-client