Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File: FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier: Nc3WhR6ops4NGJar89Qr7/vufJSQ+drrf491ikRL+tk=
Subject key identifier: 99:E6:16:28:BF:3D:DC:5C:F9:75:BB:0B:42:DB:D0:2C:FD:87:EF:33
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial: 01968B136AA5904891F2E27BEB9DB796F333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 09:00:27 +0000
Manifest this update: Thu 01 May 2025 09:00:27 +0000
Manifest next update: Fri 02 May 2025 09:00:27 +0000
Files and hashes: 1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: umJgXsfL1x14HvWT17MOYlRxzqlLm59xiU9S15HJ+Cc=)
2: pS03aj6wmU86Zu9PqgpTPjvPCgM.roa (hash: aUGGuBTytMASII0PgxjFCUwQN+XTGnbhLsjxVU+JfJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:6a:a5:90:48:91:f2:e2:7b:eb:9d:b7:96:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
Validity
Not Before: May 1 09:00:27 2025 GMT
Not After : May 2 09:00:27 2025 GMT
Subject: CN=99e61628bf3ddc5cf975bb0b42dbd02cfd87ef33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:4f:2d:45:b1:38:2f:c7:c6:af:34:07:30:
71:0e:eb:75:d7:70:27:00:ef:02:eb:ab:08:f3:75:
56:dc:13:cb:c0:7c:24:c5:b7:4c:cb:77:52:20:a5:
7c:43:73:8e:e2:6a:a8:79:e7:06:37:81:a5:cf:9d:
a1:eb:d8:9a:fc:11:dd:c5:d9:bf:b5:b5:05:30:7f:
e6:97:f7:f7:d8:ca:28:bb:34:c1:7a:7a:42:87:6f:
5f:30:82:fc:27:c2:4d:6c:fd:c5:36:9d:e0:93:2d:
fc:68:95:63:a3:19:96:25:52:69:26:65:c7:9d:bf:
d6:41:60:de:a5:0d:15:c5:93:12:f7:3e:72:d0:98:
d9:b6:24:4e:3b:07:eb:88:72:95:02:b4:2f:82:a7:
76:5e:35:69:86:8f:65:45:26:fa:e1:2a:7a:56:92:
44:e3:ba:7e:84:1a:57:fe:1f:d7:b3:ac:ab:3d:fb:
ef:1e:5a:bd:7b:af:f5:e8:30:9a:37:eb:93:61:f1:
9a:32:85:9a:94:45:38:18:31:7e:16:50:ff:2c:95:
54:bc:31:52:e8:b8:7f:87:9b:3a:5d:36:e4:d3:4b:
fb:50:2e:c2:51:1e:f7:6a:63:da:63:96:4f:ff:94:
9b:44:19:9a:05:d8:22:2a:55:99:d8:65:cc:74:ef:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E6:16:28:BF:3D:DC:5C:F9:75:BB:0B:42:DB:D0:2C:FD:87:EF:33
X509v3 Authority Key Identifier:
keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:49:6b:7c:b6:7b:b4:d2:3d:fa:e7:2f:d1:f6:1b:33:83:ec:
2f:36:82:5d:e4:dc:40:88:ee:32:79:09:0f:88:ab:90:4e:5f:
f0:c2:40:a2:2d:6a:5b:1a:59:0b:8a:c3:d7:5b:9b:08:fe:f1:
70:bd:fe:ca:b0:0c:44:af:af:22:f7:6e:c6:40:04:d6:36:eb:
0a:fa:fb:fa:7d:31:5b:ef:43:74:56:e4:13:e4:fc:ea:a0:b4:
8e:58:45:3e:34:e2:54:ea:85:3b:f9:c0:bc:6c:8e:85:f6:48:
b2:17:4b:be:6b:a9:1e:ad:e4:60:ba:e9:c8:c7:d6:6d:16:13:
11:a5:2e:59:8a:94:b4:99:3b:d5:73:76:57:ee:33:c0:ad:f0:
d1:eb:9f:df:ba:62:da:55:aa:9c:2c:53:1a:6d:d6:7e:62:dc:
f8:6e:03:75:a1:6a:02:9f:f4:4d:5a:37:5a:0e:e8:c4:77:6f:
f8:18:7f:55:8a:61:de:bc:f2:f6:f7:c7:4b:84:fb:51:77:3e:
31:1a:20:48:72:7d:7b:77:94:66:24:9d:40:95:ce:9a:f1:dc:
ca:79:11:ad:a6:ad:46:6b:3a:bd:45:39:ac:00:31:d3:29:26:
98:c0:9a:d2:cd:64:1b:38:e5:4c:ec:6a:d5:09:d9:01:b2:8a:
2f:2d:b1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:24:30 2025 by rpki-client