Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File: FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier: EdSk8bjxDYyd8hMCVNV0ys7Ke7mHrzCSNP/FEN5kwfE=
Subject key identifier: 85:F4:2D:2A:23:3F:FC:EA:F6:5B:D1:DF:32:87:A2:78:57:1E:CA:F6
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 019675307F1247FAC3EF86CE43A06B69ED03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number: 1515
Signing time: Sun 27 Apr 2025 03:00:34 +0000
Manifest this update: Sun 27 Apr 2025 03:00:34 +0000
Manifest next update: Mon 28 Apr 2025 03:00:34 +0000
Files and hashes: 1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: fmM02JxZMuC0a7a81ZqHV4CVGmKeS3BF3L+RX/nY92o=)
2: kc-ZCrpFtG9x51LpF4W3iw7kDzs.roa (hash: aN11v2IUXg+LXUfyuCNuVklkgeIw5ckCn/DmdMCJWXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:7f:12:47:fa:c3:ef:86:ce:43:a0:6b:69:ed:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Apr 27 03:00:34 2025 GMT
Not After : Apr 28 03:00:34 2025 GMT
Subject: CN=85f42d2a233ffceaf65bd1df3287a278571ecaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:2d:af:13:05:6e:17:ad:58:9a:8e:6d:1c:
3f:a7:a1:93:b3:66:42:63:08:63:44:cf:53:c3:87:
5a:81:64:07:2c:73:d5:fc:0f:3b:69:1a:7d:62:da:
ec:1d:50:c1:da:bb:e9:55:d2:08:32:11:6b:80:60:
53:f5:aa:86:b2:9e:e3:76:b0:51:53:23:8b:f1:87:
a0:5c:72:15:92:1f:01:ed:9d:c0:0f:62:70:1f:1f:
c1:6f:9e:9b:50:21:8f:e0:7d:e8:c8:cc:c3:2c:6b:
2e:12:2e:8c:68:4d:58:73:3e:1f:e0:03:eb:04:6c:
cb:b0:84:03:d7:26:89:0a:da:03:f1:61:4b:ee:43:
2d:51:41:2b:10:d4:94:a9:9f:0e:58:27:62:c4:ec:
c8:94:c6:cd:42:ad:1d:5c:f8:49:a6:c4:5f:7b:8a:
8d:b1:06:60:2b:ed:26:05:3d:d2:a2:f5:2c:6b:68:
02:60:13:85:13:26:f2:dc:b5:8e:6f:3a:90:78:bb:
e8:2f:79:a4:5e:8e:f7:9c:1b:c3:62:46:72:ea:de:
d9:fb:05:9b:4e:24:46:94:2d:75:6c:f8:62:52:c4:
fb:a8:12:f9:f4:ac:62:40:f5:fe:d3:02:74:1a:79:
b9:5a:0d:ed:1d:39:d8:fe:cc:a2:f7:7c:27:50:b6:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F4:2D:2A:23:3F:FC:EA:F6:5B:D1:DF:32:87:A2:78:57:1E:CA:F6
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ec:fa:ff:bb:38:c8:54:a4:3c:58:a2:db:e9:f0:66:aa:5b:
67:9d:bc:14:e5:ad:e0:44:e8:a3:83:28:a5:77:93:2a:e5:3f:
6b:b9:63:30:8a:9c:da:45:a9:93:17:f7:31:a0:b0:40:3a:8c:
f1:a0:e0:f2:b7:06:70:5c:0a:90:1b:63:e8:96:85:91:90:10:
6a:46:d9:78:12:3b:66:b6:a5:7f:54:90:df:ab:55:98:ab:e0:
b8:6b:66:48:bc:d9:ba:6d:f7:2b:29:e5:e4:56:88:0c:df:f7:
0a:d8:56:b1:b1:b1:4f:ca:b8:05:be:dd:8c:c8:e5:9f:13:ba:
bb:a9:e5:68:90:af:12:f6:d1:af:f4:fa:00:f9:18:bf:ca:b4:
e3:53:59:d3:cd:64:37:3a:f1:99:ea:d8:7e:7f:1d:c9:d2:e4:
bf:0e:65:b3:b7:c3:9d:57:c6:b3:f1:14:ad:09:90:82:e6:01:
48:57:ba:3f:74:93:de:d6:d5:e5:47:46:68:5f:8e:98:90:8c:
f0:50:b7:bc:22:7e:1d:66:a9:db:31:10:0b:0e:9c:02:ea:97:
56:e1:53:09:1b:cb:29:a1:7a:be:b0:89:29:5f:73:5b:56:dd:
ab:62:83:36:6d:be:de:11:75:79:57:5e:ce:cf:dc:13:c0:2c:
65:1a:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:41:54 2025 by rpki-client