Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: Z2lqndDFzGo+eDtR28gKgtAosd1sRrlTgiCGTW1MOpg=
Subject key identifier: FA:FB:6E:A1:C4:BF:54:31:BE:81:3C:03:D3:21:C2:6E:CB:1D:81:BC
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 01967FEB016CA3BF670017AB02873DC02606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 13FE
Signing time: Tue 29 Apr 2025 05:00:29 +0000
Manifest this update: Tue 29 Apr 2025 05:00:29 +0000
Manifest next update: Wed 30 Apr 2025 05:00:29 +0000
Files and hashes: 1: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: tzoS2snh5Czo9x/8XcGUNBmQR7M9UbMm0FoRc5cvTZk=)
2: qGeya0gXk3lefb1rAtWCYxucLVU.roa (hash: ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:01:6c:a3:bf:67:00:17:ab:02:87:3d:c0:26:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Apr 29 05:00:29 2025 GMT
Not After : Apr 30 05:00:29 2025 GMT
Subject: CN=fafb6ea1c4bf5431be813c03d321c26ecb1d81bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:f9:a9:88:1f:66:d7:17:81:0c:ce:66:2a:
9d:13:00:50:af:11:3d:d3:a3:ce:02:33:e1:23:48:
3e:71:bf:c3:fd:11:05:91:40:44:29:0c:cf:3f:ef:
02:e1:44:c8:96:a6:93:b1:30:a7:c2:4d:08:fd:af:
83:a7:48:98:d3:18:02:08:51:43:08:32:5a:8c:d4:
a8:7a:16:c6:1a:be:4e:b2:b4:e7:ab:72:6a:a9:3a:
0d:81:b5:97:72:ee:18:09:18:76:6e:1f:ad:fe:45:
3f:2f:5a:20:75:cc:c7:b6:aa:ee:f4:b3:dc:7f:d9:
d4:50:9c:88:87:8b:3f:09:ba:c1:4b:0a:93:e9:6e:
f8:f5:21:26:c6:4c:d0:29:ed:55:28:a4:dd:36:a9:
9c:8a:82:10:1b:d3:cf:62:58:9c:e5:b2:9c:fb:c5:
6c:bb:28:51:7a:60:99:af:4b:1e:49:4e:dc:7f:41:
c3:cc:fa:3d:71:63:6e:b6:e1:a9:9f:a4:b4:bc:46:
69:6f:14:6d:ee:e4:ae:2d:32:61:93:f1:b9:fb:2c:
14:59:24:f6:b1:f1:ce:73:f5:e1:e8:a7:0c:3e:d3:
14:4b:40:ff:c5:fc:e4:82:ea:06:54:db:26:ed:06:
ae:fb:c4:a9:8d:53:69:cc:77:23:a5:46:2d:c7:d5:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FB:6E:A1:C4:BF:54:31:BE:81:3C:03:D3:21:C2:6E:CB:1D:81:BC
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d8:2a:e0:60:1b:52:f6:6e:7a:81:84:c6:16:89:94:12:5d:
9e:7c:06:82:93:39:6b:34:fb:14:41:f2:9b:ca:f6:1b:98:2d:
a7:70:c2:a6:fb:2b:23:e1:73:ca:ed:d3:0f:c5:3b:ef:c3:b2:
3c:8c:ac:c2:1b:7b:64:48:82:6e:4a:ca:dd:31:28:52:02:34:
08:e7:e3:2b:fb:41:e3:83:2a:6d:17:61:3b:18:de:43:27:8e:
44:18:32:e7:71:93:43:15:7a:9e:99:6b:30:e9:9a:d3:d4:74:
c0:4f:57:7b:43:f9:a3:8a:af:c8:cd:49:f9:e8:e7:bf:16:b6:
25:c3:29:7e:90:82:17:b1:c8:87:fe:27:3c:dc:6b:f0:10:11:
f2:5f:5d:de:5f:f5:55:01:05:a5:54:c3:eb:31:65:32:a2:ad:
58:09:b8:90:55:69:7a:39:cc:de:e4:8a:c8:73:90:ad:cd:4f:
73:f0:bd:f4:7d:b7:a4:63:56:7b:e2:28:f9:5c:fb:a3:13:a1:
9c:57:a8:a6:d8:44:86:3e:cf:bc:d8:78:30:22:27:17:fa:3a:
61:cd:ea:8d:2e:14:f5:b4:b1:4b:c6:4f:10:6a:3e:21:11:ce:
9b:14:76:97:b6:77:29:ab:21:dd:73:8c:25:8b:fe:4c:be:b6:
8c:64:1a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:42:21 2025 by rpki-client