Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: oPWyKT42ghUwwJkXOocAGvm5eNfk3mptmCHQ824+DMM=
Subject key identifier: A5:12:39:57:A4:93:36:3B:6B:CC:BD:02:C4:84:FE:E4:E9:AA:69:09
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019685805A423CD1BC440BAE497AD5C1BCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 09CE
Signing time: Wed 30 Apr 2025 07:01:43 +0000
Manifest this update: Wed 30 Apr 2025 07:01:43 +0000
Manifest next update: Thu 01 May 2025 07:01:43 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: pXBGi6FrqdWUlQRMn3oKiztjQvMHuhAib/iramvAhNA=)
2: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (hash: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:80:5a:42:3c:d1:bc:44:0b:ae:49:7a:d5:c1:bc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Apr 30 07:01:43 2025 GMT
Not After : May 1 07:01:43 2025 GMT
Subject: CN=a5123957a493363b6bccbd02c484fee4e9aa6909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:7d:03:e4:35:b0:b3:4a:32:9f:8b:b1:f1:
ae:ef:4f:c6:cf:0d:61:c4:c8:14:69:3e:c9:c3:9e:
0d:9b:82:7b:fa:47:11:4b:10:ce:58:1e:bf:b3:53:
02:9e:65:d3:43:32:92:b3:ef:11:fa:9b:a4:92:1d:
e3:57:c5:00:44:49:57:f1:f8:c7:e7:cd:f9:22:7c:
d9:2f:19:7d:b5:49:5c:19:88:9c:5f:78:32:58:c4:
a0:a0:44:74:35:8e:cb:89:30:4e:9e:9e:74:9a:f6:
5f:dc:74:12:2c:c0:85:51:b0:81:42:a2:f7:7e:80:
82:9c:9d:55:90:1e:a9:1e:8b:ba:bc:60:34:69:a9:
59:cb:ad:56:7d:3f:6d:2c:f4:81:b4:bd:5a:84:69:
90:33:16:49:43:ed:e5:9b:8b:10:32:9a:a9:4b:c7:
fb:ba:da:23:50:b4:08:ca:98:1f:f0:a0:cd:ae:0c:
60:05:fa:f2:43:69:2b:46:97:89:27:e5:c9:3f:47:
9c:8e:5b:ce:b0:b5:63:37:2f:bb:f2:35:02:ea:75:
28:57:ee:d4:2e:20:ba:87:2f:12:31:d5:2f:40:43:
2b:0b:68:e3:21:22:e2:58:6e:7a:99:e2:e3:ec:b4:
d6:64:2d:84:08:25:c9:ea:c8:8f:db:b3:ed:82:f4:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:12:39:57:A4:93:36:3B:6B:CC:BD:02:C4:84:FE:E4:E9:AA:69:09
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ff:ae:58:53:74:40:41:8f:df:a2:cb:60:f8:0f:3c:f3:a6:
ce:5e:a9:3b:64:4a:d6:d8:4c:85:cf:31:ed:f8:fe:36:09:d4:
29:e5:d9:90:31:06:3b:1f:2e:0a:fe:be:27:a9:7b:bb:c0:b0:
66:bf:2b:e5:d6:9f:b0:a8:02:76:7c:12:64:45:85:25:97:9f:
8d:49:87:39:12:a0:c8:fc:11:df:53:dd:77:84:18:9f:bc:2c:
aa:b3:ef:1e:37:b9:80:ac:53:d2:19:d3:49:ab:ea:27:de:76:
77:bd:7e:f9:52:db:8f:91:75:04:1f:e8:a5:7c:3d:b9:42:4b:
5c:9a:4b:44:e3:ee:8c:b8:2e:2e:92:3a:60:b7:0b:83:6d:2e:
ab:d0:ef:09:72:47:91:27:e8:37:3f:b5:03:b8:80:71:75:5a:
fe:76:4a:5a:10:a1:6e:1f:57:0f:6f:d9:80:b2:7e:0a:16:cd:
41:88:16:14:49:dc:73:a5:3e:06:30:b4:00:c4:0e:03:97:a1:
14:00:ae:a1:80:49:52:49:37:c9:59:e1:94:f3:24:2c:41:50:
43:c7:13:b2:14:4e:18:35:30:19:7a:56:cd:04:c6:72:2e:9a:
19:57:b2:6f:05:0d:b9:9e:f4:46:99:3f:a0:0e:f3:26:cf:10:
a9:a8:f5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:07:33 2025 by rpki-client