Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: QwkBSsTRPYRtpQ5RAGXO5E3DHElmRKAXd040mkxjjvA=
Subject key identifier: 8F:61:DD:5C:F0:76:DF:3C:B0:77:F7:6E:3F:F9:4D:43:BE:55:EB:B2
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 0196753023057C9E027F70094A38C8AAAC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 03:00:10 +0000
Manifest this update: Sun 27 Apr 2025 03:00:10 +0000
Manifest next update: Mon 28 Apr 2025 03:00:10 +0000
Files and hashes: 1: FLzhahX1RfEQksVef8HwMw5EmEI.roa (hash: 3r/+kxvTsJcUwXkCOUAwIQMliVjMUukx9o6NgfAcfNk=)
2: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: fcAcZ7YaVZ8JBmBgmaUy4bReQleUFDsS7J1TNSZJXQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:23:05:7c:9e:02:7f:70:09:4a:38:c8:aa:ac:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Apr 27 03:00:10 2025 GMT
Not After : Apr 28 03:00:10 2025 GMT
Subject: CN=8f61dd5cf076df3cb077f76e3ff94d43be55ebb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:b7:4e:f1:c6:53:18:b6:6a:4f:9d:aa:d2:
f9:ef:07:5b:bf:77:66:46:bc:4e:ce:9d:6d:cb:7f:
9f:96:4d:c9:10:1f:07:68:8c:66:48:b5:88:e6:59:
0a:e7:6a:a4:6e:b9:d1:b3:0b:3f:5e:f1:c4:83:d3:
99:bd:56:7c:cb:12:7c:1c:cd:da:f5:cf:46:da:f0:
47:3c:6d:02:21:ec:17:68:a7:5a:88:2f:54:28:66:
87:e8:e4:11:35:09:c9:4e:23:5a:92:52:99:e7:84:
59:07:70:df:37:61:13:cb:21:8c:3b:11:37:2a:00:
d9:04:7d:20:e5:d6:2b:42:86:60:26:1a:71:ec:47:
8e:46:4b:4a:68:90:cf:29:93:bf:ed:0a:07:ec:9d:
00:99:46:81:5f:f9:0f:ab:5c:93:7d:1a:7a:8a:51:
39:76:82:5a:12:03:ca:2c:19:0b:4d:86:9b:33:51:
14:bd:8f:a9:57:f5:99:da:93:f4:0d:57:fd:bb:1f:
2c:9d:c3:bf:99:00:b7:4d:59:4e:d5:75:13:00:09:
bc:96:73:4a:c8:4d:64:eb:6f:5e:92:2e:90:51:05:
a8:bf:5f:2e:05:7e:ed:59:73:ad:f5:d9:42:e5:83:
91:58:70:06:29:15:a8:6c:b3:20:15:8b:48:48:db:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:61:DD:5C:F0:76:DF:3C:B0:77:F7:6E:3F:F9:4D:43:BE:55:EB:B2
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9d:89:bb:75:b3:98:4a:35:8a:4b:2f:af:26:f7:b2:ca:c3:
dc:0a:f9:88:96:f4:3d:62:df:b3:1e:55:e1:8d:fc:56:4d:25:
9c:33:70:de:47:c6:c9:3e:b3:b9:a8:fc:89:2d:bd:90:00:ef:
59:43:52:db:d7:cd:d7:2b:8d:a5:7b:7a:5c:98:81:fd:68:95:
3e:7a:9c:21:c9:0d:c7:7d:a5:c7:c1:1a:49:37:be:ed:bc:2e:
d5:af:49:84:fd:e3:c3:86:cd:7c:3b:a9:b1:57:61:5e:67:cb:
4b:f7:fd:34:f8:34:68:26:aa:fd:aa:48:5c:f6:16:06:5a:96:
d7:db:09:75:af:ff:7e:9d:4d:a7:c7:4b:51:86:2b:4b:fb:8a:
46:33:28:d8:a8:0d:55:a4:de:a8:42:01:a0:e4:03:93:4c:63:
68:d6:9d:8d:6d:24:15:2d:67:04:e5:33:37:7a:21:a2:94:3a:
66:ae:8d:b6:a5:54:12:d2:f2:c6:47:f8:e3:c3:41:76:79:37:
68:08:06:ec:cb:5a:96:c5:61:3e:fb:77:6b:44:1d:40:4d:01:
87:40:00:cc:82:cf:0f:44:20:bc:e8:a1:ac:22:18:85:b8:10:
da:ed:45:0b:2f:59:b0:1c:20:b4:ee:28:6b:96:1f:84:ed:32:
1a:a3:04:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:35 2025 by rpki-client