Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: ZLJs5rQDrqB5xJYfGxl5N+hKfktC0dIBLC/bnUJ1tTg=
Subject key identifier: 88:98:F9:1F:F1:1E:0D:9B:B3:88:6E:85:D3:4A:35:F3:FA:51:C8:F9
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 0196851199B43DBB25435E5178AFEF330BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 0636
Signing time: Wed 30 Apr 2025 05:00:45 +0000
Manifest this update: Wed 30 Apr 2025 05:00:45 +0000
Manifest next update: Thu 01 May 2025 05:00:45 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: r3XKJCzaLQkhl1sI5oLGBRnW5inOofZBvT7lqhXJmDo=)
2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:99:b4:3d:bb:25:43:5e:51:78:af:ef:33:0b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Apr 30 05:00:45 2025 GMT
Not After : May 1 05:00:45 2025 GMT
Subject: CN=8898f91ff11e0d9bb3886e85d34a35f3fa51c8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:22:7e:fc:22:56:0a:e7:2c:39:c5:7e:42:
2d:7f:b8:cc:50:48:21:ad:58:f3:49:97:50:45:92:
92:58:11:b9:12:43:5b:79:7f:3c:63:94:f1:27:d8:
b6:08:ad:4e:bc:56:2c:a4:5f:16:5c:41:6f:40:a9:
e9:66:43:f5:22:1b:36:99:87:cb:9e:29:33:06:dc:
42:00:cf:8d:03:77:00:04:d3:ea:13:97:90:81:d0:
d4:5d:a5:d3:0e:e4:53:07:da:ec:3b:cc:2c:9e:0f:
39:35:59:f1:70:e1:09:03:c2:1c:05:e9:47:66:d6:
5c:65:98:07:bb:fa:8a:01:5f:89:b3:dd:79:ee:cf:
00:cd:61:7a:7b:d2:01:1e:ee:68:42:9a:74:e9:8d:
3d:fc:c4:34:25:8b:7a:d0:25:50:79:96:83:84:75:
04:85:48:04:54:29:90:42:a9:27:c6:18:91:1b:de:
15:b3:3c:dd:ab:1b:7c:3c:09:97:97:84:4a:1f:2d:
c5:c9:a7:f5:52:92:d3:da:e8:ba:f4:4d:d5:02:92:
45:1f:df:87:66:d6:8a:08:9a:5f:96:90:53:35:02:
6c:91:9d:e7:75:42:99:de:eb:e3:b5:27:67:a1:ee:
29:d8:78:19:fa:6f:4f:a2:d1:8a:79:b6:ac:fa:f3:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:98:F9:1F:F1:1E:0D:9B:B3:88:6E:85:D3:4A:35:F3:FA:51:C8:F9
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:77:10:f3:12:b1:64:92:d1:92:24:71:e5:bc:b5:f5:db:34:
5f:cc:e6:41:c6:ae:e8:de:80:ba:d0:cd:5d:07:8a:cf:1d:ac:
4a:16:d9:ef:b7:19:3f:ff:1f:ae:97:a1:4e:81:b2:1e:8b:95:
73:48:ca:31:04:c2:98:ba:64:bd:1a:44:91:16:4a:17:d0:e6:
23:7e:a0:36:a7:2f:54:b3:7c:51:d0:73:ac:bb:60:85:0d:8a:
2f:3c:9f:20:58:0e:7b:70:6f:6a:4a:c7:31:f0:55:93:13:b6:
91:78:69:13:54:2b:8c:66:09:72:f2:a8:4c:f8:99:24:bd:2e:
53:6a:a3:a4:be:bb:c4:81:84:99:9a:5f:5f:dc:66:df:f3:67:
e5:45:91:f9:a2:2d:32:0e:e8:42:72:5e:aa:9a:1e:8c:69:66:
c4:be:79:c8:e1:72:b6:66:76:9e:38:1e:c9:ff:92:48:86:47:
d8:7c:12:b7:26:cf:92:d7:04:6b:68:f6:88:ec:ed:2e:5f:34:
4d:46:30:14:26:28:9c:d4:37:9f:b2:68:4a:2e:12:33:4a:cc:
e5:d6:8e:db:c8:9e:b1:18:b5:e0:15:85:75:40:da:6b:c5:b4:
ba:f8:65:8b:45:a2:b7:99:9f:3e:ce:90:3a:46:a6:e6:ef:95:
12:21:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:58:11 2025 by rpki-client