Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: YbizNdcgZL9ANeNdGBHr3tE1uLtzivqoYy/9M3zA5DM=
Subject key identifier: 37:91:F8:39:3A:39:AF:B3:C0:99:97:7E:83:EE:49:F4:A4:76:0D:43
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 01967AFB73D9DA0E3C2D674BBE19DEFD3931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 151E
Signing time: Mon 28 Apr 2025 06:00:21 +0000
Manifest this update: Mon 28 Apr 2025 06:00:21 +0000
Manifest next update: Tue 29 Apr 2025 06:00:21 +0000
Files and hashes: 1: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: 8to4PRgiq7s2iiIOGAdLuLAis+u81wt/BzxduXWScB0=)
2: UUcKOryc_ykhvD7v1VUPE00sScs.roa (hash: dAexA2neb3HcfI1bNYdykFIadotQ4NdMRRVIE6QTBe4=)
3: q7sVZrLDAVZQekWMRkAvaSDSl9g.roa (hash: RRTQ5jExs41DvyGCsYtTzal7l6KRuDTnah7ylDN5VEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:73:d9:da:0e:3c:2d:67:4b:be:19:de:fd:39:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Apr 28 06:00:21 2025 GMT
Not After : Apr 29 06:00:21 2025 GMT
Subject: CN=3791f8393a39afb3c099977e83ee49f4a4760d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:93:25:8d:76:8c:b5:96:4a:f8:aa:77:bb:
f1:59:d2:b5:3a:c6:d3:75:92:65:7c:6c:38:ae:24:
de:a9:58:dd:21:73:6f:8a:cf:be:b4:90:a8:69:5d:
2f:34:e1:1d:cd:2c:16:62:54:b8:68:3e:ae:9e:97:
d5:44:b1:e1:a0:c0:c6:f8:6b:af:52:a6:1b:7b:79:
4a:5c:d7:31:67:a2:29:5d:0f:84:ec:3c:09:9e:2e:
93:72:7d:83:58:d0:6e:82:d5:26:1b:82:29:db:a6:
38:01:f2:77:67:5e:e5:ca:95:e8:78:86:2f:83:55:
01:9a:f0:f5:b4:b2:3e:c1:9a:6d:f9:36:db:6a:53:
00:da:24:89:80:95:41:83:e5:dc:41:43:10:b0:77:
d2:55:41:11:20:92:4a:ae:b2:13:ab:9f:48:46:fb:
d1:b2:7f:c7:f3:e4:e2:db:7c:11:c6:16:03:51:26:
f4:ad:ea:c1:54:57:8f:bd:1c:40:93:80:d1:79:be:
c4:26:81:03:3c:eb:b4:a7:08:e8:8c:60:81:14:90:
cb:a3:db:18:a2:99:5b:cf:51:08:8d:33:34:a2:5f:
7e:48:fb:1a:fe:7d:02:18:d3:10:00:f1:af:0e:97:
e5:8c:b8:35:63:8d:48:75:49:48:b8:c4:83:73:aa:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:91:F8:39:3A:39:AF:B3:C0:99:97:7E:83:EE:49:F4:A4:76:0D:43
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:56:fd:d4:de:22:da:62:3c:42:28:45:cd:2e:42:16:30:c1:
66:c0:a0:95:81:f8:ba:37:4e:54:8c:cd:e3:a7:54:d1:a8:08:
70:44:df:cb:4f:11:aa:cd:2d:63:82:e4:cb:db:b3:66:db:9c:
7a:d4:74:33:b3:77:fc:ed:ee:78:2d:d1:6a:db:31:1c:f3:7f:
80:db:0d:19:37:09:14:72:26:89:0e:a3:d9:71:a4:a4:5a:39:
7d:32:21:54:cf:5a:d3:46:13:6f:fd:ef:26:0f:95:f7:c8:98:
b0:f8:ba:d6:13:38:65:d6:1b:b2:61:c3:f5:16:8b:26:b5:f1:
e9:f1:8c:fd:91:62:44:aa:18:b6:e0:6e:47:69:6a:83:1a:72:
5a:4f:77:5f:7d:3b:94:ec:2d:48:08:c9:dc:cf:39:fe:dd:af:
62:9a:5e:a7:91:41:e4:86:97:eb:b5:7c:56:a2:f6:f1:c9:c7:
7e:93:42:a4:0a:bb:f6:01:4b:97:cf:f4:94:e1:51:80:d3:29:
b6:24:67:9b:fc:1a:00:30:f3:01:4f:be:b7:db:58:8e:c4:b1:
49:72:d4:e5:8d:0e:bd:00:16:69:41:b3:22:24:9a:96:80:d5:
63:9d:76:ce:d0:a6:18:a0:e6:67:b1:99:72:06:2d:8b:63:77:
a6:cf:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:21:00 2025 by rpki-client