Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: G/wBuwAZGbQOJ4e38XRpZfs5VH+wz7BV5ra2fGUbeuo=
Subject key identifier: 98:46:74:D5:36:B9:42:5D:70:85:6D:82:60:AB:C8:A8:C0:3E:EC:C9
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 01967D5789788C0BD2AFF3F8AE8DB9794C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0B19
Signing time: Mon 28 Apr 2025 17:00:10 +0000
Manifest this update: Mon 28 Apr 2025 17:00:10 +0000
Manifest next update: Tue 29 Apr 2025 17:00:10 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: gYAYWCwFPS7+RbxcnsGprVT83PxZAY+mktEhvxyztak=)
2: XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa (hash: LgD69e+nouQ5z7eZNAgfyUxJCnIL4Pp/DimPZswYsNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:89:78:8c:0b:d2:af:f3:f8:ae:8d:b9:79:4c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Apr 28 17:00:10 2025 GMT
Not After : Apr 29 17:00:10 2025 GMT
Subject: CN=984674d536b9425d70856d8260abc8a8c03eecc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:3c:0f:0f:b4:14:eb:49:62:3d:c9:0d:1b:
a3:2b:81:e9:27:47:d8:4d:b7:52:d4:80:fb:b7:50:
b8:0a:eb:71:76:e5:8c:70:a6:cf:5b:18:01:79:2f:
57:a4:c1:70:8a:1d:73:6d:94:02:f8:27:24:78:29:
fe:72:83:34:64:48:7f:d8:ff:67:91:fe:a9:6d:25:
07:4e:76:77:4b:98:61:aa:54:52:79:4e:2e:2f:c1:
97:bf:06:c8:7f:b8:49:5c:ae:eb:fb:b2:6e:12:52:
41:23:b9:1f:28:10:d8:d8:70:51:e9:b3:2e:b0:fa:
a0:f5:2a:e5:42:8c:91:ff:10:d9:87:12:21:d3:74:
21:50:71:67:8e:a8:ab:c4:ed:91:96:73:64:89:57:
d7:4c:ea:30:6f:21:86:4b:21:eb:34:80:78:32:79:
43:96:7a:99:d9:2c:d9:f3:64:73:d4:85:c8:2d:4d:
11:bf:20:e8:b8:3a:3e:33:4f:79:21:17:9e:df:86:
96:8f:2b:c4:42:6f:b1:7b:95:8f:e9:db:af:4e:e4:
28:4c:e2:cf:15:95:c7:da:a2:f5:33:e9:8a:42:96:
8f:e7:b1:e8:29:fa:ca:12:ab:11:b1:7b:63:ea:11:
95:6c:cb:8e:4b:10:3c:3d:be:83:86:40:b2:01:dd:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:46:74:D5:36:B9:42:5D:70:85:6D:82:60:AB:C8:A8:C0:3E:EC:C9
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f1:78:48:49:f9:0e:cc:d0:ad:a4:1b:d5:1e:70:15:74:cd:
b0:ba:20:05:38:4e:f4:19:31:ec:62:d9:f7:8d:47:80:34:08:
f6:ad:75:7c:69:16:08:45:5c:17:70:0d:c0:3a:42:16:4e:05:
08:7c:a7:79:d0:a3:70:a1:23:7b:55:d8:61:d8:6d:9f:56:29:
1f:80:29:64:1d:80:7b:5e:36:4b:50:a0:2f:ff:33:96:28:ec:
9d:26:a9:5d:15:f3:e2:29:c0:d0:10:b9:40:50:e9:fe:92:40:
47:7e:af:a3:7f:80:93:11:5f:d1:cc:fe:df:12:72:f8:bb:88:
7d:04:b7:d9:1b:d7:51:f4:3c:91:88:08:e1:c3:22:a0:1e:4e:
8d:22:cb:78:67:c5:99:44:aa:e4:af:ad:f3:15:09:f4:6f:9c:
20:36:f1:2a:a9:d4:1c:7b:b9:0c:63:79:c2:8c:c4:03:bf:e8:
fe:ea:99:17:06:aa:52:43:f2:69:8c:27:bb:17:09:0c:ed:ff:
e5:8f:47:e7:d1:cc:b4:f0:82:b4:50:f8:99:45:b6:df:76:9a:
b2:54:43:b9:87:57:89:0c:8e:07:68:ab:b0:d9:3d:f7:08:5f:
1f:af:69:aa:db:25:d2:de:27:f8:4b:9b:f3:ad:c8:f5:66:0b:
a5:1e:8f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:03:35 2025 by rpki-client