
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
File: FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft (raw, json)
Hash identifier: cdpWOHYUfWhIYEKtUR/0e86krkBEkKJcDezf0IZkIF8=
Subject key identifier: 6C:7D:4A:F7:1D:51:D4:40:75:9D:E6:67:F1:74:38:4B:59:1F:6C:23
Authority key identifier: 16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
Certificate issuer: /CN=168a919a4a463f3ca2bba5442550fc247da90cae
Certificate serial: 01967454E5480412276E671B871535E55B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
Manifest number: 2E
Signing time: Sat 26 Apr 2025 23:00:42 +0000
Manifest this update: Sat 26 Apr 2025 23:00:42 +0000
Manifest next update: Sun 27 Apr 2025 23:00:42 +0000
Files and hashes: 1: FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl (hash: 4NkvXNT8UnP3V/ThlFmQUtAvFyZVyKCdr+hgABYxZJo=)
2: ve2iEFS7yneK4NHtoTNszVB8cZo.roa (hash: g/XvhTcgORHoQzc25n1ZqGUd92LVhhds69w5ITmpr4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:e5:48:04:12:27:6e:67:1b:87:15:35:e5:5b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168a919a4a463f3ca2bba5442550fc247da90cae
Validity
Not Before: Apr 26 23:00:42 2025 GMT
Not After : Apr 27 23:00:42 2025 GMT
Subject: CN=6c7d4af71d51d440759de667f174384b591f6c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:4d:da:77:27:0d:b2:55:d6:eb:e9:40:14:
e1:18:d4:42:de:50:e3:62:b8:77:15:f3:5c:f1:7f:
00:3b:75:ec:91:c9:0f:5d:e2:ee:44:6d:93:10:1b:
38:98:68:d6:ad:84:ff:75:c7:c5:33:50:b3:bc:fc:
4c:c5:66:91:85:21:f5:a7:57:48:1d:7c:16:a1:0c:
75:66:cc:6c:1c:4f:53:2c:4a:5e:e3:b1:c2:a2:93:
74:35:83:23:22:83:29:dc:d1:bf:b7:04:3a:9d:2c:
03:97:08:fc:bf:6e:56:72:5e:92:db:4f:8b:15:74:
f1:90:22:ef:4b:53:7d:22:6d:2b:3c:06:37:b7:8a:
2d:8b:10:ed:7f:31:49:68:70:a9:08:19:df:8f:33:
a7:66:f8:41:42:c7:4e:c8:74:ee:16:75:7e:50:6a:
45:af:cf:87:27:e2:11:da:87:2e:86:12:6b:a3:33:
7b:69:61:89:86:58:e5:cf:7e:fc:4f:0a:ec:6e:15:
68:51:0d:68:1d:11:d6:18:c7:98:a6:e0:2c:87:c3:
90:04:df:73:c0:d6:4b:ff:0a:eb:5f:65:cd:9a:82:
0f:51:d3:ac:25:3f:8b:17:33:76:82:68:22:83:56:
02:ba:0f:02:25:23:9a:66:9e:87:4c:1b:18:e6:1e:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7D:4A:F7:1D:51:D4:40:75:9D:E6:67:F1:74:38:4B:59:1F:6C:23
X509v3 Authority Key Identifier:
keyid:16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f7:ab:4b:67:33:7a:2e:05:16:4a:9b:4f:fe:dc:01:62:9f:
68:9e:b0:30:60:3f:4d:66:0c:c7:6c:18:fc:78:d2:35:7c:a4:
3b:b4:87:59:15:46:ed:15:80:4a:eb:38:f2:11:e3:bd:ec:a4:
59:42:7e:f7:6a:ef:9b:fb:3b:0b:44:96:87:97:8c:7f:eb:f4:
84:c9:8c:73:41:b1:ef:e5:3b:32:68:fe:ba:11:3b:3e:95:4b:
db:74:f5:36:37:c4:5e:a5:8c:d9:49:c8:ca:7c:6f:31:e6:47:
38:df:05:a5:43:54:1b:b4:5a:36:1f:20:58:47:bb:62:e5:12:
a6:24:ab:b0:bb:42:6f:d5:9f:b4:0c:57:07:01:a3:21:c3:c0:
f5:68:a6:0d:65:7c:77:ec:fb:f5:99:5d:91:26:e6:a2:fb:15:
4c:be:68:00:ae:3f:76:9f:12:f6:70:a2:31:c5:34:d8:1c:c8:
a9:5f:b9:10:d3:dc:65:17:2e:53:40:54:3d:81:d0:e9:44:ed:
c8:8b:84:b9:15:01:6c:05:85:6b:fc:01:d8:62:1f:85:85:29:
67:66:e1:c2:ab:2b:f2:8d:d1:4b:15:79:9c:c9:1d:8d:fe:ab:
6a:fe:b7:73:72:05:04:f7:77:80:b8:d6:e8:91:ff:f0:f5:23:
ca:c4:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:44 2025 by rpki-client