Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
File: FXHxV8OlvVz_XRpH1BlkiifjWps.mft (raw, json)
Hash identifier: p73u9yAvht2eVWKKDPXA09T9+7J6L07gacQysqUP9N4=
Subject key identifier: B0:C0:E3:87:36:7D:F8:A4:66:F2:B5:C5:DD:91:1D:06:21:B9:2F:CC
Authority key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
Certificate issuer: /CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Certificate serial: 0196771EC13F26B9A091B53EE1C25DCE5B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
Manifest number: 1420
Signing time: Sun 27 Apr 2025 12:00:26 +0000
Manifest this update: Sun 27 Apr 2025 12:00:26 +0000
Manifest next update: Mon 28 Apr 2025 12:00:26 +0000
Files and hashes: 1: FXHxV8OlvVz_XRpH1BlkiifjWps.crl (hash: BaLuPdRJmDHlOQmPEd59FA6PwwE2krOTNwU3lpZeEj8=)
2: SbwwM1J0cW50ffjT8dS57JOEZaY.roa (hash: KDW7Xd6V5dGu/swRg1Y5NG1n0fbHWB4uQ3FumDxnAtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:c1:3f:26:b9:a0:91:b5:3e:e1:c2:5d:ce:5b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Validity
Not Before: Apr 27 12:00:26 2025 GMT
Not After : Apr 28 12:00:26 2025 GMT
Subject: CN=b0c0e387367df8a466f2b5c5dd911d0621b92fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:d0:f5:70:64:fa:cd:80:bd:b6:45:5a:b0:
a3:21:6a:7d:b9:70:9a:63:40:bf:53:d6:35:14:ac:
30:93:d4:83:1e:33:39:24:f5:09:7e:79:b3:f2:f7:
44:6f:0f:c0:4d:d0:e0:7a:cb:03:a5:85:b2:20:97:
75:59:d7:b0:78:b8:98:5a:67:aa:ff:bb:21:c9:18:
68:3d:36:f6:f0:3c:b5:7e:44:72:27:65:ce:ce:08:
6e:8f:b6:48:1e:2e:2c:10:64:bd:b7:0f:83:5d:8b:
8e:e8:dc:35:e1:09:2d:50:ff:43:ce:5b:6e:da:65:
93:cc:fb:b1:35:4a:93:75:f9:9f:62:14:25:95:f5:
c1:50:7d:67:b0:47:92:72:f1:32:99:83:10:1e:8e:
63:7e:f9:78:e3:d1:6f:d4:30:1f:8c:3f:6a:19:4b:
49:8b:dd:50:80:93:dc:38:7f:45:b2:1e:c2:7d:f6:
1f:c9:05:06:1d:71:97:4d:56:43:b4:d5:66:e6:5e:
6b:e9:45:04:34:9d:44:bc:38:44:09:42:39:0c:ca:
65:8d:81:9e:81:af:eb:fa:d7:90:63:e9:c7:3c:d5:
6f:77:37:12:81:14:66:93:2f:fa:ed:5e:d1:4a:0d:
fa:ef:0b:93:85:72:5e:81:95:6b:1d:db:a8:9f:95:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C0:E3:87:36:7D:F8:A4:66:F2:B5:C5:DD:91:1D:06:21:B9:2F:CC
X509v3 Authority Key Identifier:
keyid:15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:08:9f:28:f4:93:66:80:9b:66:73:c8:a9:d4:34:c9:02:a8:
f6:bc:50:4e:14:7b:1f:58:68:9f:57:f4:0b:ba:e4:b3:bc:c5:
be:ba:72:10:74:dd:1a:4e:e2:e6:a7:e7:b4:fe:e3:71:75:3d:
f2:91:fd:ee:0f:3d:96:97:4c:4f:5a:05:13:b7:99:5b:f9:22:
fe:0e:5a:81:2a:c1:f6:c1:ed:9a:0a:16:70:07:16:0f:a6:82:
91:0b:86:53:23:d3:cb:6b:44:60:27:3d:2f:43:6b:b9:1f:26:
7f:40:fa:3b:17:fe:13:86:2d:80:4b:33:da:61:44:61:cd:90:
70:34:2e:a9:ae:37:22:92:15:89:98:20:7c:b8:81:74:c9:c4:
c2:59:7b:e0:68:36:59:ba:e0:b0:81:19:df:02:c1:e8:0b:6d:
c2:d9:6d:a1:99:d9:f6:b5:4c:14:2b:a8:68:f0:b3:34:bd:e8:
e2:8d:23:77:33:21:aa:75:a5:06:39:36:a2:d4:8d:fe:68:3b:
10:5e:03:12:23:f8:f4:3a:3b:40:47:71:e8:78:f9:48:5c:c2:
35:16:db:f4:f9:d6:bd:d1:45:ff:3f:1d:3f:d4:69:1a:cf:5b:
c2:2a:21:cf:32:27:f3:dd:a0:19:d5:f9:b0:f0:43:c5:3e:25:
62:b7:6e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:50 2025 by rpki-client