Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier: Q4LM25kcmnlVd4Fn9w5jl8n/eUD0EszYKBqF2d79a7k=
Subject key identifier: FC:8C:7E:2B:75:A3:52:59:94:A0:0C:8E:54:B8:96:EE:7A:3D:E1:BC
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial: 0196764316A241AD793977B20FEA8BE298E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number: 14A3
Signing time: Sun 27 Apr 2025 08:00:30 +0000
Manifest this update: Sun 27 Apr 2025 08:00:30 +0000
Manifest next update: Mon 28 Apr 2025 08:00:30 +0000
Files and hashes: 1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: 51UOsvpRoviiwr+mHPMke2q+TyEVDDwMkoHTIbDdXxA=)
2: 95gvF9PQMIrb-BKphnns2uDXNiw.roa (hash: MBJ0PohSRVPGJ57dBumqXOfbyvugttOgIAsIwTytItw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:16:a2:41:ad:79:39:77:b2:0f:ea:8b:e2:98:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
Validity
Not Before: Apr 27 08:00:30 2025 GMT
Not After : Apr 28 08:00:30 2025 GMT
Subject: CN=fc8c7e2b75a3525994a00c8e54b896ee7a3de1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:e8:20:75:1d:76:da:57:22:83:9f:d6:3e:
d7:50:ab:72:64:2e:ea:1a:5d:8a:51:f5:13:0e:99:
2a:cb:99:a8:d9:20:51:d1:1c:ed:07:93:27:ba:ae:
e4:60:7f:08:74:29:4e:8c:a5:81:8c:d5:d1:d4:d5:
25:a6:a3:e8:68:81:17:b4:12:23:af:9a:fd:bf:26:
0e:ee:e3:be:70:ec:d6:dd:5a:62:03:f9:57:40:2a:
0b:b4:2e:4a:b7:d1:df:2f:cd:78:05:31:4e:51:01:
90:05:e6:8d:2b:2a:4f:eb:e5:41:61:0a:fc:19:76:
64:44:bc:f3:9d:7c:dc:6c:c6:eb:03:f5:86:aa:a2:
4b:75:da:49:97:48:7d:ed:1c:0a:bb:c4:cb:2f:df:
7a:70:ee:61:86:b9:ff:0a:e5:7e:74:af:5a:71:38:
4a:56:89:32:d0:1b:bd:05:2e:5e:de:e2:55:f9:69:
ef:b1:90:fb:22:53:61:77:61:95:eb:fb:24:7f:2c:
99:ea:8b:d4:d7:82:2c:7b:59:c8:28:25:26:f1:70:
ad:43:8d:0f:34:c5:f7:76:bc:0b:5f:f2:04:69:41:
b9:da:f2:c9:13:db:91:05:21:0f:39:76:62:5b:97:
8e:33:e5:49:1c:f5:30:88:c1:a2:ca:1e:8b:1d:c2:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8C:7E:2B:75:A3:52:59:94:A0:0C:8E:54:B8:96:EE:7A:3D:E1:BC
X509v3 Authority Key Identifier:
keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1e:e2:ca:ef:29:51:9e:31:21:38:ee:b9:35:5b:88:3a:9d:
db:d9:cf:60:2d:80:74:31:e5:36:74:ec:4c:ff:64:a5:d5:7a:
0b:62:30:36:4a:b7:4b:8a:82:dd:95:93:ba:ab:66:11:a8:35:
c7:68:67:b1:d2:84:40:4f:dc:d1:36:bd:76:8e:b0:b5:cd:06:
9d:cc:19:b0:cb:4a:c8:fe:cd:8a:5f:55:0c:ee:b0:f4:88:19:
30:a9:0d:97:48:92:d8:f4:de:e6:bc:47:c5:71:2f:68:49:10:
12:7d:f7:32:72:e4:f3:d3:58:ee:dd:24:e3:7d:25:31:06:ca:
5a:b7:d1:22:ee:35:11:17:00:97:84:54:cb:fe:9e:f7:57:e6:
bd:ce:bc:91:dc:10:23:e5:62:c5:8d:38:1d:b7:04:ed:12:4a:
fc:0d:ec:8d:5d:8b:ea:73:e3:e2:28:db:5a:fb:e9:c9:fa:ba:
f5:c3:2c:4d:ee:0a:17:db:85:91:85:8f:b4:5d:2f:52:33:3d:
53:48:a8:e6:cd:9e:e4:56:03:c8:46:38:17:0a:6c:a1:76:e4:
26:ef:9a:67:c1:f6:29:cd:73:55:12:cb:b1:87:e7:7a:21:6d:
6e:df:79:2e:32:ca:a9:7f:8d:dc:25:43:21:a7:8a:f4:fb:fc:
c9:3b:50:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:49:53 2025 by rpki-client