Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: 8KUMiaTUEHon498XdA9aRqeCvJoK63dFtsQPHzA0cYU=
Subject key identifier: 0B:99:18:09:93:D5:F9:F8:DC:03:0E:7E:08:6D:B0:90:2C:5E:C8:64
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 0196723059303DA494232B60E15D64FC1A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0C70
Signing time: Sat 26 Apr 2025 13:01:33 +0000
Manifest this update: Sat 26 Apr 2025 13:01:33 +0000
Manifest next update: Sun 27 Apr 2025 13:01:33 +0000
Files and hashes: 1: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: OmUK3rVpoU3I31BydDb64oJb3GDSqbOGAoEjad6SHTY=)
2: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (hash: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=)
3: ouo267dSlLznMI9vKQqz-AZYNWg.roa (hash: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:30:59:30:3d:a4:94:23:2b:60:e1:5d:64:fc:1a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Apr 26 13:01:33 2025 GMT
Not After : Apr 27 13:01:33 2025 GMT
Subject: CN=0b99180993d5f9f8dc030e7e086db0902c5ec864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:3a:8f:ce:d9:59:75:ec:f9:d2:fc:2f:3a:
95:d2:62:21:77:0a:5f:20:06:c3:74:cf:76:9d:85:
8f:c8:a1:b5:1d:09:6b:ea:41:eb:ad:ca:c5:ef:1b:
79:86:f2:8b:ad:f4:87:9b:69:be:ee:13:c9:8d:05:
90:59:cd:4b:ea:a6:9e:96:2f:f6:c4:9b:c1:8d:7c:
3c:f7:83:0d:ee:b5:53:f9:2b:5d:50:14:29:6c:67:
17:f6:66:6e:e5:0c:e2:87:73:00:02:e0:53:ac:c7:
2f:bd:db:61:b0:b2:d3:88:33:29:a2:1d:10:73:d9:
49:0f:d0:87:0a:31:c5:98:55:42:be:14:4d:3d:38:
69:1c:e3:55:62:96:7f:66:a6:0c:f9:b5:d3:6c:79:
72:dd:8f:97:89:54:37:1d:0f:01:56:3f:b8:c5:7c:
43:3e:6e:66:f1:85:32:15:bd:96:15:c7:bd:10:8a:
f6:ff:c2:61:fc:07:2e:a1:aa:ad:80:7b:0b:5f:b3:
fb:64:39:55:19:cc:7c:78:01:b2:29:bf:bf:c1:f5:
b9:bc:43:5d:31:2d:58:07:96:ee:97:b7:e3:b7:93:
e4:6c:34:07:14:7f:a3:c3:f5:df:ec:1b:07:74:64:
73:c1:fc:a1:d3:98:7d:61:e4:3e:d1:a7:b1:21:b1:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:99:18:09:93:D5:F9:F8:DC:03:0E:7E:08:6D:B0:90:2C:5E:C8:64
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3f:44:a9:06:50:df:5b:64:57:6c:d4:4a:8f:1e:5f:3a:a2:
7f:78:af:10:3e:1a:52:46:0d:27:81:3a:1b:4a:18:58:a0:ee:
19:0e:fc:40:f4:3c:b9:0c:48:ec:85:50:4e:50:5c:db:52:1a:
51:59:8c:8d:68:c3:f8:4c:9e:70:18:74:6d:b7:93:be:45:c5:
af:8d:78:58:df:53:c0:ab:a9:81:39:b3:3c:90:74:43:df:36:
fe:69:fb:ec:14:f0:38:3f:a8:eb:6e:4f:d0:80:1d:b1:72:ab:
f6:7d:3a:08:28:c8:c2:e6:18:09:38:7e:92:b0:20:e7:29:b9:
5a:b5:da:55:34:50:29:59:9d:c0:95:4a:62:7f:d1:d7:f7:6a:
c0:f2:0e:8d:39:6a:0c:e7:52:28:f4:3d:96:2b:21:00:44:cc:
b0:1a:10:7b:a6:5e:79:a4:d8:15:32:cb:7f:03:c0:8d:9d:fb:
da:fe:71:ed:dc:31:99:11:3d:e1:8e:b3:23:54:72:04:d5:44:
79:e0:4f:ed:4e:09:0f:8b:d7:67:d4:17:8b:64:64:17:9a:05:
07:98:ae:99:49:4f:74:c2:62:e5:84:49:47:30:74:07:bb:ce:
73:21:1a:68:11:b0:9a:38:df:0d:e7:08:c0:c9:42:e6:8b:24:
3a:f9:dd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:56:12 2025 by rpki-client