Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
File: fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json)
Hash identifier: c1paZeJWKwNGwAe13oatjYUR/FRUW1wtMssvrzXBxtQ=
Subject key identifier: FE:C1:04:7A:C0:01:DB:44:93:36:4E:CB:08:7A:90:70:6C:D9:7B:2E
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial: 01969FE411CC623991B7AA413BF12EF40357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
Manifest number: 0F94
Signing time: Mon 05 May 2025 10:00:46 +0000
Manifest this update: Mon 05 May 2025 10:00:46 +0000
Manifest next update: Tue 06 May 2025 10:00:46 +0000
Files and hashes: 1: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: tPUPn9z8S+6cEoenu7EebNGhbdWF+O6qcXsIGV6vKtU=)
2: iSrIgRlu5YD7Koa8bEOEIApsG1I.roa (hash: 1rQNsMYOVuSbFnE+oDLQ6neckAWKt+MSYxXbU0fBqpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:11:cc:62:39:91:b7:aa:41:3b:f1:2e:f4:03:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
Validity
Not Before: May 5 10:00:46 2025 GMT
Not After : May 6 10:00:46 2025 GMT
Subject: CN=fec1047ac001db4493364ecb087a90706cd97b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bf:b2:10:f3:df:66:86:33:56:29:26:7a:ed:
6f:c8:3a:04:ee:ce:b7:2a:72:17:31:d5:1a:88:d4:
e1:5a:76:2a:bd:02:d8:26:81:76:eb:00:fc:86:01:
1b:b9:b3:a6:89:19:2b:c5:ca:03:12:9f:e1:d2:d4:
e7:62:5c:e8:99:19:f9:cd:01:16:89:81:4e:e9:b2:
bc:65:cf:dc:72:23:d8:42:80:62:92:de:9e:a9:fd:
8b:12:cc:fd:39:0d:3e:9b:8a:69:76:05:eb:8e:0f:
7d:fc:35:89:04:b0:cf:1a:86:25:5e:08:6d:d2:64:
22:38:5a:fc:f1:7e:d5:ab:68:8d:2d:30:63:55:5c:
83:ed:b1:ce:d4:a9:9a:83:50:ee:7c:46:1d:05:1b:
87:55:ee:6b:bf:05:fc:b7:54:ae:cb:8f:df:68:a1:
74:30:33:6d:2d:60:3d:77:87:39:13:aa:50:c6:58:
38:ab:df:f4:55:75:3e:84:ae:b5:3d:eb:08:12:d2:
1f:ce:8e:f7:f5:b2:88:53:82:84:84:33:46:48:24:
5b:ea:48:b4:42:89:61:04:9f:b7:99:c3:d7:fe:4b:
04:c2:b5:5a:78:1b:5f:64:a9:61:83:83:b3:d7:5d:
f4:64:74:ec:5d:c0:a3:cd:13:2b:e4:f4:30:ba:82:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C1:04:7A:C0:01:DB:44:93:36:4E:CB:08:7A:90:70:6C:D9:7B:2E
X509v3 Authority Key Identifier:
keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f7:02:17:71:5c:5f:0e:d4:5e:a9:2d:10:2e:e8:47:1b:1f:
60:80:19:8c:06:49:57:44:71:fa:83:9c:58:87:ed:40:25:e3:
7f:bc:e1:e2:ad:b2:8b:22:ca:19:73:96:dd:5d:e6:cb:74:ee:
08:5b:0c:b1:20:79:e6:d7:0c:82:72:a0:c4:7f:78:70:28:a7:
2c:b1:90:a3:94:55:aa:68:68:cc:70:94:a5:05:07:07:c4:21:
a1:00:fa:a6:c3:dc:7b:ce:7d:46:10:0e:f3:ce:3c:be:14:b9:
69:ae:62:77:3e:a9:14:80:a6:12:7a:60:69:16:98:94:45:ab:
1d:4a:27:63:40:b3:0d:ac:3b:5d:b5:8a:9a:2f:f1:54:64:4f:
da:a9:91:af:d6:32:bd:06:53:14:d8:ff:3d:47:5b:2c:01:84:
09:13:fb:91:2a:9a:7d:fe:2b:f3:e2:18:76:d4:8f:25:48:11:
2f:85:dc:b9:83:46:e8:01:c7:21:8a:d0:ba:50:4b:31:df:57:
fa:2b:86:45:94:0e:1b:41:ed:32:9b:cd:ea:b8:71:6f:d7:26:
d9:ee:33:f4:f1:67:93:2b:26:b6:a9:b6:65:39:5c:14:d3:fa:
2a:23:d0:b8:c7:81:af:01:70:e7:19:c9:2d:61:81:56:dc:21:
95:6a:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:19:24 2025 by rpki-client