Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File: FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier: HLp8fduCh5vHO8RsAdLFKntmzdSblBvu9OV7TqDI0K8=
Subject key identifier: 41:EF:B2:A2:C6:F9:E4:6C:04:D5:74:A7:16:DB:8A:3D:A5:AA:A6:ED
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial: 01967868CC97298BF5984523F0756EAC939F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number: 0E8E
Signing time: Sun 27 Apr 2025 18:00:55 +0000
Manifest this update: Sun 27 Apr 2025 18:00:55 +0000
Manifest next update: Mon 28 Apr 2025 18:00:55 +0000
Files and hashes: 1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: GE1L9LiX2D9dmbv4h10Vr92HOIh0PggLr02DVVPhpFU=)
2: sdQpr9vBWbo2oFyAIJwywqV94V0.roa (hash: q2Hm5+yXKjxuN/cBMa4LO9usoHIS/gexRqRStEbsYf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:cc:97:29:8b:f5:98:45:23:f0:75:6e:ac:93:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Validity
Not Before: Apr 27 18:00:55 2025 GMT
Not After : Apr 28 18:00:55 2025 GMT
Subject: CN=41efb2a2c6f9e46c04d574a716db8a3da5aaa6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:36:b2:f1:69:e9:89:f1:78:c1:1f:98:ea:
4e:24:cb:c5:2c:51:fc:8e:ea:e9:c4:8b:6f:26:11:
21:f0:c6:b7:a5:bb:4e:56:ab:b5:04:83:19:bd:d3:
6a:27:ce:0b:19:47:8a:af:04:bf:93:e6:67:a3:ce:
41:e0:f8:f4:62:bb:55:c0:2b:de:f3:b6:60:42:9f:
0d:01:f0:ad:28:32:bb:14:c3:1e:4a:f1:96:0f:10:
fa:4d:3b:2a:52:e7:96:c8:0c:f1:69:aa:35:e6:2f:
49:89:38:30:9e:6c:a1:bd:9e:aa:64:47:b6:81:0d:
14:63:8f:61:d2:92:82:d8:ff:c7:81:48:d5:10:5d:
a8:09:4d:7a:bf:56:50:ff:7a:83:b6:18:8b:27:aa:
95:92:dc:c5:ad:b7:b1:82:ac:52:ef:79:93:70:e2:
55:e7:fd:b4:99:b9:78:27:c0:51:dd:15:9f:07:be:
1d:23:4a:63:93:78:78:d1:fb:c8:93:99:05:dc:17:
68:b5:83:25:53:b9:17:85:6d:57:b9:cd:e4:08:d7:
51:90:7e:22:2d:9b:2b:93:36:f3:4c:fb:4f:52:a7:
02:43:c6:cf:30:c3:27:6b:5f:70:45:8b:1a:51:32:
8d:a8:05:71:de:f1:e5:5c:b1:16:86:07:f5:3c:05:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EF:B2:A2:C6:F9:E4:6C:04:D5:74:A7:16:DB:8A:3D:A5:AA:A6:ED
X509v3 Authority Key Identifier:
keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:91:ad:90:4b:bf:d7:fe:c0:29:b1:70:7c:37:d0:d0:9d:94:
c5:12:91:8f:a2:d7:54:5e:92:31:86:5e:0f:74:d6:e8:d2:78:
aa:5f:1b:68:2a:ff:32:e4:4c:25:97:0b:e9:c1:d7:b7:81:e5:
2e:12:02:5e:e8:0d:62:23:e2:d5:d0:f7:cb:cb:b5:b4:1e:2b:
f4:f8:f8:6b:e9:d6:a8:52:4c:04:3f:f9:92:4e:8e:e3:b9:43:
a9:ef:59:c9:23:dd:d4:9c:93:6c:65:cb:e1:24:41:72:1d:f6:
4c:a0:9e:1e:b0:0a:d6:ef:88:0e:c3:fc:80:13:f6:dd:a4:8b:
e5:0f:dc:cf:17:e9:68:b9:ff:1b:fd:bd:53:97:5e:65:f5:01:
40:aa:d3:6e:6a:ff:e4:7d:6f:5f:36:e9:6d:c9:e8:fe:49:bd:
f6:5e:43:71:b4:7b:6c:33:49:83:24:a7:9a:9b:fa:df:f3:c7:
04:6b:8f:33:ba:e2:03:33:9a:52:51:4c:e9:07:bd:40:7d:4a:
38:e8:92:a0:ee:e3:03:d4:fa:2e:23:69:30:52:49:85:a3:43:
5d:2b:51:0d:63:6e:78:7b:6f:f6:ba:cd:79:4f:5d:f0:7b:4e:
07:c8:63:4d:92:bf:52:b3:e8:98:4d:cf:4a:3b:a1:de:f1:23:
bd:5e:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:15:34 2025 by rpki-client