Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File: n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier: bV0HtUJYGhmq3zX+vDqrrcSp4R4RDMmdmCtUFBoRfZc=
Subject key identifier: BF:D9:D0:F3:C1:8E:71:24:06:1A:A7:9C:DE:CF:3E:27:24:CF:C3:D9
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 019682B4E228FBFD87B83F57E873F8D1BF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number: 0FCE
Signing time: Tue 29 Apr 2025 18:00:14 +0000
Manifest this update: Tue 29 Apr 2025 18:00:14 +0000
Manifest next update: Wed 30 Apr 2025 18:00:14 +0000
Files and hashes: 1: 1-SvxvqtngGHpYm4Mb_K72J1J0SU.roa (hash: fltwqIioPSuzKLuXGtdMjJVRWOd9cnpy/Vmxbwnrchg=)
2: AgU0XBmsv6hrvw1_FhFtRPIvIVA.roa (hash: yuLOgd4MMg3W+BuujF35ssU+fj+q8gIALwBMEgUaqi0=)
3: HjZYRM1GY8NwIlqa0kEmRhdDg7o.roa (hash: k83Jec9pog7vuk6fuX8SfpctGFX9GXrAU6iLBU2zk9g=)
4: dWB5v_50s28dCnQL8B8bFn58q18.roa (hash: pyj99aGAlWW7KJ5ZJq2AB9ncbyLG79M0Bh7ShdPddh0=)
5: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: 5Xh5s3Y5OHboKgw71PazjrLTlNIaY7xuYdsTmewoJDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b4:e2:28:fb:fd:87:b8:3f:57:e8:73:f8:d1:bf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Apr 29 18:00:14 2025 GMT
Not After : Apr 30 18:00:14 2025 GMT
Subject: CN=bfd9d0f3c18e7124061aa79cdecf3e2724cfc3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d1:a9:cf:b5:2c:c2:65:0c:fa:5b:d2:3e:31:
1c:c0:3a:af:1f:e6:41:0f:08:ba:0b:02:c9:a4:f0:
ce:4d:6a:39:c1:b9:3a:ea:13:41:7b:82:c0:dc:43:
58:ba:0e:32:d3:59:fc:f4:d2:88:ad:12:58:ed:72:
39:36:f6:fa:98:36:82:48:46:bc:36:71:bf:2a:d4:
84:eb:de:f7:d0:a8:a4:8e:0d:5a:7e:57:7f:4e:fc:
9c:a8:d1:3b:d4:bd:96:ae:b8:86:ce:e2:7e:47:6a:
cf:01:f6:e7:cc:74:77:7a:a1:af:24:33:57:80:2a:
b7:2a:9f:cf:14:3a:e4:79:b9:9c:e6:83:5c:e8:66:
a3:e8:d7:45:c3:41:d5:87:51:55:08:00:34:db:2a:
2d:e6:70:82:7b:b2:d2:38:c8:11:4b:99:7a:75:cd:
76:3c:b1:b0:a9:ed:4c:17:9b:e7:11:55:52:e9:00:
08:91:07:63:07:ed:7a:8d:a8:1b:a0:c5:75:08:5e:
3d:61:37:ac:08:3f:06:03:58:e1:82:80:48:e1:20:
1d:ae:e5:bb:c0:86:1e:ab:da:72:b2:6e:39:30:9b:
f6:15:c2:5a:89:e9:a7:c4:b9:bc:dc:4e:00:90:36:
38:f2:8c:8c:df:57:9d:78:aa:4b:02:63:5b:2b:99:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D9:D0:F3:C1:8E:71:24:06:1A:A7:9C:DE:CF:3E:27:24:CF:C3:D9
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ce:c3:28:5c:67:58:30:6e:05:b5:41:e7:19:de:5a:41:90:
76:9b:52:6f:23:84:5b:8d:ce:c5:cd:60:8d:0b:ac:d8:77:21:
f3:6c:a8:d2:4a:47:06:3f:92:7d:cf:13:7f:cb:7b:c4:93:be:
ee:01:bc:db:18:7d:de:2d:1d:e0:42:c1:10:5b:23:df:75:2a:
8a:12:e5:ce:74:16:8c:35:25:02:0e:8f:ea:48:f0:4e:93:92:
7d:60:45:36:39:fa:ca:ab:38:3e:6d:5a:cd:fc:01:7c:86:86:
b6:bd:9f:5d:02:37:01:04:5e:43:e6:bb:30:72:0c:ac:d1:a7:
98:2e:b1:48:65:50:dd:ef:11:7e:af:43:de:06:5a:41:d4:da:
4e:b8:e7:3d:6f:22:97:aa:6e:a2:5e:59:80:47:d8:35:d5:a4:
59:e9:62:00:fc:e7:40:76:04:b0:d1:c7:ba:32:28:57:e7:4a:
ec:c1:19:99:29:4a:f8:33:4b:b8:89:ff:c3:21:18:2f:35:5f:
09:25:d9:79:df:83:9c:1e:31:5b:df:8e:f0:bf:ee:5c:79:cd:
6e:11:73:f7:4e:48:bb:49:33:3f:48:29:23:a5:f9:71:ce:37:
b6:6e:3e:a6:0a:67:2c:8f:7e:e0:11:cd:9e:a9:14:58:de:4f:
6a:d3:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:06:54 2025 by rpki-client