Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
File: FqBO4EsSgj6FP_JD02VR5M5oOnM.mft (raw, json)
Hash identifier: ImsmCCWHth4bN82D9wi1tvPRd+ye5ykmoKxQc0CgrVs=
Subject key identifier: 30:85:FF:8D:71:54:99:B9:26:B1:C9:0D:7B:0A:BC:1C:38:0C:26:BC
Authority key identifier: 16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
Certificate issuer: /CN=16a04ee04b12823e853ff243d36551e4ce683a73
Certificate serial: 01967D20C4A9B57FC6A93598EFC503A9E33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 16:00:21 +0000
Manifest this update: Mon 28 Apr 2025 16:00:21 +0000
Manifest next update: Tue 29 Apr 2025 16:00:21 +0000
Files and hashes: 1: 7yvWMV7T5eN6efasr2rdxP4qnTg.roa (hash: IQLAVcCJbXWjx9lqcgGZjEbAOQis8qmzfLoEHM8bDrs=)
2: FqBO4EsSgj6FP_JD02VR5M5oOnM.crl (hash: 3yFFkTDBPCQcEkgHHzmOk1WILMsXPakedwwehZOFtOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:c4:a9:b5:7f:c6:a9:35:98:ef:c5:03:a9:e3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a04ee04b12823e853ff243d36551e4ce683a73
Validity
Not Before: Apr 28 16:00:21 2025 GMT
Not After : Apr 29 16:00:21 2025 GMT
Subject: CN=3085ff8d715499b926b1c90d7b0abc1c380c26bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:76:ac:12:25:96:69:55:76:da:2f:1d:ef:
73:fe:8f:7c:e7:83:80:5f:fd:dc:13:4a:55:85:4d:
bd:5b:07:00:d5:88:f4:3b:35:af:43:96:55:1b:d3:
01:ae:ae:6f:31:4b:b5:36:3c:45:90:f0:2c:d3:00:
7a:48:99:c4:e0:42:d4:23:00:b4:54:07:73:e8:ff:
14:c2:2e:be:01:53:cc:30:d8:be:ae:c6:0a:29:bb:
f9:fc:3c:56:84:3d:6a:93:e4:45:58:60:e7:1f:03:
04:8e:7c:00:e5:bc:e9:b2:62:33:6a:aa:8e:5c:27:
f7:87:b8:0b:e0:3a:b5:b1:a2:f2:81:99:f9:14:52:
94:69:8a:6c:a1:84:b1:36:4f:26:4c:f8:0b:24:bc:
88:89:6b:f0:79:32:c6:56:f8:8e:dd:91:82:0b:33:
54:14:42:c7:50:a6:10:f5:1d:97:0e:e7:5c:55:9d:
be:b8:80:10:39:85:d2:9c:2b:b0:73:d4:c1:89:2d:
f7:50:85:eb:bb:9d:e3:a6:e2:10:b5:f2:e2:10:c3:
80:a7:0f:1f:02:1c:34:ad:27:3c:c4:49:78:0c:80:
5d:09:67:38:e9:60:77:81:c0:20:8a:4f:76:9c:45:
f3:ee:bd:8c:19:bf:e3:b3:6a:0d:11:47:f2:4d:40:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:85:FF:8D:71:54:99:B9:26:B1:C9:0D:7B:0A:BC:1C:38:0C:26:BC
X509v3 Authority Key Identifier:
keyid:16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:55:95:b2:50:88:57:c0:e7:00:ef:18:6c:ec:02:39:1c:25:
70:a3:12:05:e2:6c:54:fa:c9:de:cb:50:ee:8e:b2:d3:30:8a:
f8:42:27:8e:1e:ee:e1:d1:e3:68:0c:7c:58:d2:93:b2:43:da:
fb:68:1b:05:23:c2:06:db:f8:16:87:82:0e:bc:a3:84:32:cf:
e6:90:50:c9:2b:ab:1b:85:18:7d:1e:d9:61:05:31:cd:0e:5d:
55:34:48:ef:52:b1:76:70:14:ee:60:81:6c:d0:cb:4f:7b:c7:
89:dc:e6:cc:6b:1b:a0:99:4f:44:c7:20:0a:ef:ec:86:ca:bc:
32:36:a7:99:33:80:5e:cd:b6:20:b1:1d:1c:e2:83:98:c4:7f:
38:dd:74:27:8c:dd:58:4d:95:a4:03:cf:7a:c8:e0:61:1d:c1:
7c:ac:71:34:d8:c7:1c:53:b0:fe:da:bb:59:80:71:87:7d:a1:
6d:5e:cf:88:a1:a3:3b:4f:f5:b3:6e:d4:1c:ed:0d:1e:0c:1a:
60:fa:0b:50:68:ef:1b:bd:77:c8:65:bd:1c:c5:f0:b8:b0:f6:
91:15:f2:06:02:02:c2:e8:54:04:f4:d3:7a:7a:ce:1c:1d:66:
dd:6e:f1:61:37:36:3b:c3:9d:b8:db:6d:10:3e:69:a1:f9:61:
30:49:55:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:10 2025 by rpki-client