Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
File: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft (raw, json)
Hash identifier: Xa0O8V2LmasrEQBfu+ved7a2YWGPUM0rPQbm2PxFS1o=
Subject key identifier: 35:35:AC:3A:6B:8A:93:BA:5A:F8:1A:CE:B0:1E:50:CC:82:74:0B:6D
Authority key identifier: 16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
Certificate issuer: /CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Certificate serial: 019699E16FAE370D5CF3DE1506E866E420F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
Manifest number: 09E9
Signing time: Sun 04 May 2025 06:00:10 +0000
Manifest this update: Sun 04 May 2025 06:00:10 +0000
Manifest next update: Mon 05 May 2025 06:00:10 +0000
Files and hashes: 1: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl (hash: uEgPg99LL5x6ti/4tAFz0PzzweXukkykSvmT1xx2AVo=)
2: KhY12QXPgZGvijy8NVkM5-EZS4E.roa (hash: CzHA8lyjc+xI7dPqpc2iJoeImIrTVoVteRcgbm8dNIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:e1:6f:ae:37:0d:5c:f3:de:15:06:e8:66:e4:20:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Validity
Not Before: May 4 06:00:10 2025 GMT
Not After : May 5 06:00:10 2025 GMT
Subject: CN=3535ac3a6b8a93ba5af81aceb01e50cc82740b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:f1:67:03:2c:3a:1f:6a:6a:25:96:04:23:
39:3d:13:b6:25:c0:49:a3:b8:ef:5b:92:57:77:b3:
60:cb:f7:1e:8d:ea:7e:a4:78:17:5c:bd:eb:88:71:
3c:4a:78:55:bf:65:2b:ac:a8:09:a4:03:9e:91:60:
3b:49:9b:46:ae:62:bb:29:84:b7:e9:33:04:0a:de:
a8:9d:9b:c4:bd:b1:67:e0:63:7a:ff:4c:51:46:03:
64:72:e3:79:8d:6a:d3:d7:56:1f:cb:a5:4f:02:31:
d3:fc:20:52:12:84:96:0f:47:62:bb:61:8c:8b:16:
a4:8d:aa:b0:02:d4:10:98:ce:e3:1e:7e:c2:a3:76:
ed:a2:ea:59:56:41:a2:60:3a:7a:3a:f5:c0:eb:8b:
7a:e2:52:e0:dc:dc:7e:42:c2:d1:48:cf:fa:67:c8:
cb:d8:61:f4:83:4b:3e:e1:e9:8b:a6:3d:ed:0a:36:
af:49:6b:6f:0c:f1:8d:3b:27:4a:b7:33:e5:05:d6:
6c:a4:b2:cf:3f:e6:34:cc:14:d7:68:b5:ff:34:6e:
9d:be:73:5c:30:fd:3d:31:c8:3e:85:1d:a3:f2:e8:
7a:51:3c:6e:62:5d:5b:de:7c:ca:68:ce:59:35:d1:
aa:fb:9b:c4:fe:8b:c7:6f:2b:06:cd:44:0a:02:de:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:AC:3A:6B:8A:93:BA:5A:F8:1A:CE:B0:1E:50:CC:82:74:0B:6D
X509v3 Authority Key Identifier:
keyid:16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:52:45:31:a1:a2:53:37:b7:db:62:c8:36:8e:94:5a:1a:66:
b9:a2:8c:f4:71:74:08:01:26:9f:3d:24:50:b7:44:52:47:dc:
b4:1f:ae:d3:a2:75:a1:05:f4:1d:0e:05:2f:db:47:cd:d4:03:
4f:d0:6b:e1:a5:ca:3e:4a:48:fc:b8:6a:0b:5d:b6:d4:ae:24:
05:88:f8:43:d6:06:46:38:c9:d6:0b:62:0e:7d:ad:31:89:73:
ad:df:df:8d:da:3a:a7:a4:67:de:ac:af:83:77:7d:cd:3f:fe:
d1:ae:a7:b5:fa:0d:19:c1:2d:59:d7:85:91:5c:bd:54:62:0b:
76:8f:2a:39:e1:b2:e6:8e:be:f7:64:07:31:e6:a7:a0:53:8e:
12:86:e5:17:a7:45:d1:07:6d:64:b7:31:71:cd:8b:f6:12:c0:
e5:29:78:84:e6:6d:c6:2b:e4:e8:22:6e:14:c5:79:ef:75:5a:
82:23:3d:7f:8b:d8:e8:67:58:f0:56:6b:a0:6e:32:ec:61:59:
f4:e2:91:9e:aa:a1:7f:aa:a1:52:b2:a0:d0:33:53:c7:4b:d3:
21:1a:10:8c:5c:3c:b7:44:bc:67:47:bd:54:7d:27:3f:e5:07:
f9:11:41:16:cd:2e:36:53:ca:6b:ff:5e:bc:4d:3e:06:6d:56:
f2:92:e0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:49:20 2025 by rpki-client