
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File: Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier: ev85wGazmxSvQ2uoUtz6zvj9dkIrG24rZVHrAlF+CYo=
Subject key identifier: 10:C7:AB:B9:9C:42:4A:4F:51:02:ED:D7:C6:99:D4:2E:89:F5:08:37
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer: /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial: 01968736B296F853201301F905FF5C70FB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number: 034A
Signing time: Wed 30 Apr 2025 15:00:30 +0000
Manifest this update: Wed 30 Apr 2025 15:00:30 +0000
Manifest next update: Thu 01 May 2025 15:00:30 +0000
Files and hashes: 1: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: ZEoJSMFxiB6FQIQJ35hOYwblqFHa4wfttmyJ1NKDKsM=)
2: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (hash: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:b2:96:f8:53:20:13:01:f9:05:ff:5c:70:fb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Validity
Not Before: Apr 30 15:00:30 2025 GMT
Not After : May 1 15:00:30 2025 GMT
Subject: CN=10c7abb99c424a4f5102edd7c699d42e89f50837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:2a:d7:30:cd:ea:24:b0:7f:2a:b4:5e:bc:
21:c9:91:7a:b3:e4:33:25:02:a9:5a:77:43:99:b5:
d8:0b:33:12:df:6f:00:60:35:51:0c:69:c0:ac:e3:
57:ea:ab:33:0c:46:1d:e7:b6:ca:83:26:84:24:b2:
db:86:0d:9e:3a:93:75:28:fb:d9:db:d9:45:b9:46:
57:03:df:6e:50:4c:86:75:90:d5:e0:a8:a9:53:fd:
b0:c5:14:08:52:ee:f7:9d:50:a6:c0:45:28:44:c3:
e4:43:32:81:1f:de:5e:ab:aa:1e:43:23:99:0c:03:
3d:6b:2e:76:df:8a:e1:ba:fc:11:93:46:65:6d:b8:
bb:b9:4c:0f:72:7e:b1:42:08:78:38:46:48:ff:a2:
5e:da:2f:4f:0b:61:0d:94:75:cc:50:41:d6:2c:86:
96:4e:29:e5:4d:ff:1d:96:1e:77:3c:57:1a:ca:fd:
af:5a:1d:a2:15:f4:28:b7:10:b7:01:3e:97:69:5c:
1f:2e:b4:91:8a:fe:5e:76:2e:cb:fd:ce:87:7f:1b:
73:6a:52:48:e6:7f:5f:45:9b:05:36:e4:3f:cc:b5:
15:65:fc:6c:50:00:17:d3:e5:72:57:21:dc:f0:37:
d4:d4:1b:60:f1:4d:2a:a7:d6:1d:28:9e:ef:d4:58:
b5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C7:AB:B9:9C:42:4A:4F:51:02:ED:D7:C6:99:D4:2E:89:F5:08:37
X509v3 Authority Key Identifier:
keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a4:89:26:25:c3:46:39:7f:e7:d0:03:63:3b:02:d9:68:b5:
7d:e9:86:2d:26:7c:87:f8:10:e5:e5:03:38:8e:ba:0d:fe:08:
ad:95:7c:62:5d:01:1d:46:22:7c:41:ab:40:39:40:30:cd:db:
00:32:8d:db:e0:8b:4a:d5:41:e4:05:50:88:5e:ea:42:a3:91:
7f:2f:06:35:a8:ea:a4:3b:e2:2b:5a:07:7b:ad:ee:ae:e5:92:
7b:9e:53:08:24:91:f0:34:79:37:65:81:e6:51:61:f2:af:be:
2b:77:0c:c6:88:99:c3:ad:2c:08:27:0d:e0:eb:2f:7a:f8:05:
23:a7:32:99:e7:1b:ad:45:85:77:25:6f:54:13:a6:5e:87:27:
75:59:62:0b:0b:37:2e:9f:52:34:f7:50:56:0d:58:95:b2:04:
e7:96:23:eb:2d:ac:d8:49:4a:36:be:72:fb:8d:8a:be:3e:8c:
ff:fc:3e:2c:59:66:ea:97:8a:f6:94:d0:90:e1:fc:11:f9:45:
f0:55:1c:75:a5:58:ab:dc:c2:b9:75:76:4f:2a:25:ea:8c:c5:
7f:8e:ae:66:51:af:2f:88:44:6d:a5:ee:43:92:72:96:0e:b5:
b1:22:53:9e:70:18:49:7e:be:a9:26:01:ff:2b:66:e5:4a:60:
67:b4:0d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:20 2025 by rpki-client