Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: ADu1t4cwLUG2GeKZZ1vn2gWtM1KrHL3mCT/gaA3vsJ4=
Subject key identifier: 09:AB:FA:0A:9D:18:AA:4E:96:E9:BE:48:CB:5C:EC:79:08:47:7A:38
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 01968E14CA75C94B4871C48625EBC37F5BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 14C9
Signing time: Thu 01 May 2025 23:00:49 +0000
Manifest this update: Thu 01 May 2025 23:00:49 +0000
Manifest next update: Fri 02 May 2025 23:00:49 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: tKT5ju5Lunu7dpoXmST9Dpe4j47mOKAtEj5Znzye5ic=)
2: XWiker2v7GIlhkuZZtR48lVm108.roa (hash: NhUbFkPuOTxAHiVlHIvGiCnLEnSRvJwEzL+UojBb8qg=)
3: zJ5MYEMzWfucEDGxLfmRzsaSeEg.roa (hash: 13et8HkfUmrO0+ptVe41OzMBwG62Ru5G13R9afNJkP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:14:ca:75:c9:4b:48:71:c4:86:25:eb:c3:7f:5b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: May 1 23:00:49 2025 GMT
Not After : May 2 23:00:49 2025 GMT
Subject: CN=09abfa0a9d18aa4e96e9be48cb5cec7908477a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:8c:ec:06:82:59:b6:b3:e2:28:6b:47:6e:
0d:ad:20:c4:8d:63:e4:3b:15:07:66:0e:15:7b:a1:
46:f9:61:c7:08:69:86:33:2d:7c:82:18:5e:50:1a:
3d:0d:a3:57:6c:6b:5f:5b:7b:06:9f:a3:e8:a1:f5:
c3:b4:52:3a:4c:4c:7c:2b:49:f6:2e:aa:ff:0e:73:
fc:a2:cb:d7:92:26:b2:70:9a:9d:49:e1:c1:f6:68:
36:d0:04:17:68:cb:bc:90:fc:8f:c1:9b:27:31:96:
5a:81:14:17:55:7d:25:4b:a2:d0:d0:f1:0b:10:9d:
a7:c5:9e:55:36:35:6d:ff:0d:48:d5:9b:4f:ee:67:
94:85:1c:d5:af:b1:99:e4:65:bd:c0:38:c4:b9:c3:
89:62:32:ad:0d:75:3d:90:0a:3b:42:11:b3:a5:02:
b6:5c:fc:3c:7d:9b:6c:70:66:0f:a5:18:e5:df:80:
94:f1:db:09:76:01:13:db:9b:1a:63:d5:1f:fb:5d:
8b:7e:b8:3a:f4:e9:53:a9:98:59:06:04:63:3a:ff:
45:43:64:0a:53:b1:27:da:93:d1:de:49:d0:66:a4:
7c:12:25:33:ea:2c:5f:9a:39:c7:b2:00:47:82:1c:
24:c0:2f:e0:d1:bd:93:3f:68:18:38:a1:28:c6:9c:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AB:FA:0A:9D:18:AA:4E:96:E9:BE:48:CB:5C:EC:79:08:47:7A:38
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9d:c0:07:72:f6:64:d7:2d:ef:22:f7:b4:77:96:96:9b:da:
af:65:f6:a7:36:5b:e2:b7:8e:67:90:56:12:25:ed:fa:55:ad:
19:37:3f:05:de:83:78:b1:39:67:26:16:23:1d:b4:00:bc:e3:
34:03:4f:89:00:57:78:37:98:d9:9a:80:fb:0b:77:35:46:3b:
6c:c0:59:17:50:a7:d8:47:89:21:7d:64:e4:56:f9:2d:8e:97:
75:06:e8:7c:4c:cd:8e:6a:62:56:4c:a9:b3:fb:d1:c5:ee:e5:
e6:b0:23:f7:d5:7c:86:26:34:0c:10:ff:7e:05:3c:4b:d4:09:
b7:53:cd:ef:35:83:fb:d6:77:56:d9:3c:f3:5b:5f:3f:6d:20:
d8:54:00:45:2c:f2:2d:e2:ec:b1:be:f5:d9:76:78:64:dd:9c:
40:a8:4a:a1:46:06:b2:b5:d1:fb:7e:ac:5a:77:66:7b:47:89:
e7:aa:48:da:ab:1e:0a:72:3a:6d:2d:36:9d:a9:63:ee:49:15:
a7:16:f5:4b:83:5c:79:15:f7:5b:77:20:1f:9e:de:c3:bd:f9:
23:f1:86:9a:07:14:08:a1:7c:64:a5:4b:bd:6a:34:aa:5c:cb:
b3:37:3a:61:fa:f6:d0:8e:dd:0f:4a:52:d1:cf:e9:b9:5b:1d:
4c:24:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:02:45 2025 by rpki-client