Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier: 0NcE1Dyd7kHjiCghpD/UBDU4NVuxYvq17IG92lJuR3E=
Subject key identifier: B5:F0:A6:23:95:4B:7C:39:ED:0D:80:1A:F3:52:D2:D5:EE:C3:4C:4B
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial: 01967A20237A96D7526E30C121687B404CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number: CD
Signing time: Mon 28 Apr 2025 02:00:48 +0000
Manifest this update: Mon 28 Apr 2025 02:00:48 +0000
Manifest next update: Tue 29 Apr 2025 02:00:48 +0000
Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: 3Eqk1xhjwwGIH+1KO5bg78pINTU3oeyDTjtrJd6lkBk=)
2: VjoP5kM-KwhZcj01jM3hl-6r6UA.roa (hash: vqqeCugYqbCnSBb7Wp1fy/fzybkRWWHMWjjnU8HbuEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:20:23:7a:96:d7:52:6e:30:c1:21:68:7b:40:4c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Validity
Not Before: Apr 28 02:00:48 2025 GMT
Not After : Apr 29 02:00:48 2025 GMT
Subject: CN=b5f0a623954b7c39ed0d801af352d2d5eec34c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:a2:30:db:5f:33:cd:a3:a1:07:f9:9e:42:
33:1d:84:b6:b5:70:f6:f6:07:f4:98:b2:4c:c4:f6:
2a:97:6b:f1:91:ef:c3:10:58:3b:b8:85:51:32:e8:
48:e8:ad:9e:57:b7:0a:08:bd:1d:05:06:41:00:73:
13:e4:4f:5b:bc:59:84:c9:3c:8e:05:3a:2e:d5:ac:
5e:fa:c9:dc:d0:c2:20:8c:d9:25:98:e2:46:10:72:
2d:36:5d:5e:5b:81:ad:1d:54:99:6e:45:98:19:67:
72:bb:0c:a8:48:6d:f8:a8:da:cf:30:a0:d0:a5:f6:
3f:bf:a9:6b:50:5c:58:1a:98:37:2f:a3:8b:3b:30:
b2:3c:e7:29:bf:16:67:bf:84:6d:71:fc:78:1a:ce:
c2:5d:0b:44:91:20:1e:f6:b9:72:3f:2e:7a:2a:51:
91:ac:d7:c7:a9:29:cb:41:f5:cc:e3:5c:99:e7:49:
c0:1e:d8:5b:1b:de:35:7e:14:9f:29:80:53:fc:36:
9f:19:25:63:8f:d0:45:f9:35:9b:a1:eb:c9:fa:bc:
fc:32:43:3f:e4:4d:c5:79:2d:7c:ad:c4:4a:42:a5:
79:71:1b:13:57:45:6c:ac:3d:ad:a0:5b:75:2e:f5:
d0:d4:32:c8:bd:26:71:85:d9:89:6a:a4:76:ac:ff:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F0:A6:23:95:4B:7C:39:ED:0D:80:1A:F3:52:D2:D5:EE:C3:4C:4B
X509v3 Authority Key Identifier:
keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e0:30:1a:32:99:3e:81:7c:d5:8d:e2:61:b7:de:40:9b:c1:
b2:5d:99:9c:6d:a1:5e:e1:a5:f6:94:b1:cb:d0:51:80:84:5a:
34:8a:1c:f6:50:4c:f9:ab:d4:3e:23:ee:9b:b1:3f:df:bb:70:
93:d2:64:a7:59:f5:2b:ff:b2:2d:73:0d:e6:c1:08:a3:45:d1:
2b:e8:33:6e:e6:30:da:2c:7b:c4:da:62:fe:22:2c:38:c9:b1:
c5:22:9d:e3:fd:03:93:a4:40:d4:a1:ec:80:e9:28:5f:19:af:
a1:28:e4:f4:ca:a6:75:b6:9d:e1:0e:cb:9e:98:f4:db:e1:06:
54:0a:90:22:10:c0:a7:5c:b8:46:3b:bf:70:1e:f6:c9:2b:7f:
51:2a:81:e0:77:74:c6:86:5e:c7:b2:f9:c3:33:bf:17:ea:c5:
14:3f:c0:3c:51:28:f0:f6:af:83:5a:b4:5a:92:eb:c3:83:29:
03:16:dd:38:be:22:e2:d3:37:54:46:23:6e:bd:26:90:48:03:
7f:67:eb:b0:05:b0:5c:bf:48:c3:bc:a5:4e:5c:ec:12:b3:e2:
98:45:1d:e4:3a:2e:01:71:d1:d3:47:8d:93:c0:c9:46:a8:7c:
fe:a1:04:4b:ad:ed:a5:06:8c:2b:56:03:97:7b:47:d4:95:83:
55:a0:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:15:17 2025 by rpki-client