Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File: FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier: AZlfC/4EmFccHkqok6I1/rDSIhk5sHvHrdvm/D0FYeM=
Subject key identifier: B7:19:4D:49:0E:54:CA:13:15:27:7D:8B:76:05:E7:DD:71:9A:1A:EB
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 019673AFE708DBD69C25456CBA8A6320B1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number: 0AFD
Signing time: Sat 26 Apr 2025 20:00:29 +0000
Manifest this update: Sat 26 Apr 2025 20:00:29 +0000
Manifest next update: Sun 27 Apr 2025 20:00:29 +0000
Files and hashes: 1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: X1/jgVMLTalILlvo46WKHMz8k6dfXyF2pLFQ2q43YrY=)
2: ejP-cqngAl2WeEUv13m8XETr7WY.roa (hash: LoPRyo03v+sBUkzNnzQYBljjeo3cKGIRbIW1IcB6h4c=)
3: jRgLBU0x04bcrCqoAsjc1LU66SE.roa (hash: nfzJrFphVt8WQGlI/qwAihviviH5Ky8UyaUYyOFvqY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:af:e7:08:db:d6:9c:25:45:6c:ba:8a:63:20:b1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: Apr 26 20:00:29 2025 GMT
Not After : Apr 27 20:00:29 2025 GMT
Subject: CN=b7194d490e54ca1315277d8b7605e7dd719a1aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:bc:a1:54:c2:23:bd:fc:e1:e8:73:c2:df:
41:29:a3:99:f0:08:c2:1a:ed:69:9d:b3:f8:1e:fb:
44:1d:bf:27:d0:05:6d:2c:23:7b:d0:25:34:b4:24:
27:6c:3b:89:e5:00:b0:b3:a6:e4:98:f0:ff:d4:94:
a9:00:7d:b3:4f:a9:2f:2b:59:e5:67:76:6d:8c:bf:
70:e0:6d:02:fe:78:e2:ae:b7:c6:eb:e2:39:e6:18:
35:b4:33:9f:3c:8e:c0:51:1e:98:1c:4e:e6:5f:36:
1a:c9:c8:ca:1b:fb:be:2c:d6:dd:b5:fb:f2:2d:7f:
f9:b9:85:8c:c1:1d:b6:7a:72:f3:d6:42:59:95:75:
2a:d4:7e:f5:91:b5:ed:11:9d:27:55:43:62:62:2a:
a6:b8:b9:a6:dc:49:68:2c:b7:a4:3b:d3:fe:7c:62:
2f:6f:24:84:5c:9c:93:fd:91:ad:38:8d:7f:17:7f:
ed:08:fb:c4:69:4d:19:56:37:dd:be:5f:d8:28:65:
67:7b:3a:3e:fb:dc:44:81:d5:56:9f:59:7c:b2:97:
db:c7:05:f8:22:b4:68:a9:01:a6:7e:21:5e:0f:55:
40:32:aa:35:2e:41:d8:88:59:32:6b:2c:c8:9e:3f:
e0:99:35:32:68:a3:5f:96:b6:98:be:fc:43:65:68:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:19:4D:49:0E:54:CA:13:15:27:7D:8B:76:05:E7:DD:71:9A:1A:EB
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:44:1a:7d:05:2b:4d:1b:d3:e3:5a:de:d9:d5:05:ba:61:7d:
82:ba:4b:89:66:54:1d:b8:f0:bc:35:6e:89:26:f5:89:d9:22:
58:1f:7c:e8:3b:d4:a2:98:a9:1c:02:87:b5:83:91:a9:d1:20:
e0:ff:5b:53:8d:09:43:80:dc:9f:a8:ad:fd:43:03:f8:e2:05:
e4:b3:2a:b1:28:04:37:34:71:29:84:b7:29:45:04:3b:b6:9b:
5e:28:06:63:2f:a5:e7:0d:fe:20:01:7b:5d:bc:f0:f5:f8:74:
05:80:fc:3f:bd:aa:3d:82:7b:89:e7:f9:76:8a:e8:63:f9:b3:
0c:f1:c6:62:b3:07:5e:1a:a3:f3:59:65:a4:dd:1a:ea:97:76:
1d:f5:1a:99:79:3d:bb:12:a2:fb:ad:46:fd:9f:ac:b0:d8:24:
24:a6:be:c7:17:5a:de:15:d5:f2:49:85:fe:bd:ba:a7:f1:f5:
f7:41:cf:39:03:be:56:c6:7e:3c:4a:87:21:f1:fc:d1:fb:0d:
34:40:e8:34:29:54:bf:18:8b:35:85:dc:3d:0e:f8:8d:ad:8b:
6e:8a:7c:fc:b1:83:ed:f7:2e:db:09:57:06:4e:c1:a5:8c:c1:
4e:bc:f7:87:1e:03:83:67:15:3e:56:4c:3a:0e:d7:d0:22:97:
31:f3:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:51:58 2025 by rpki-client