Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: 5ZTA0YqvFa5uvXkZeHtDUIRWgFCy7oawZSeVY8s4Gv0=
Subject key identifier: F0:F5:1B:A1:6A:39:BA:39:2E:39:19:93:09:C9:CC:59:A0:19:E9:07
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 01967643192E6D59193AC8DE0D367BF9E414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 044F
Signing time: Sun 27 Apr 2025 08:00:30 +0000
Manifest this update: Sun 27 Apr 2025 08:00:30 +0000
Manifest next update: Mon 28 Apr 2025 08:00:30 +0000
Files and hashes: 1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=)
2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: ze2+gFXkGqcN92kjmbSl47WzCF99WCxBLs5f2ZkbkV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:19:2e:6d:59:19:3a:c8:de:0d:36:7b:f9:e4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Apr 27 08:00:30 2025 GMT
Not After : Apr 28 08:00:30 2025 GMT
Subject: CN=f0f51ba16a39ba392e39199309c9cc59a019e907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:01:5d:f6:c5:48:a9:97:7a:49:2e:f5:00:
ef:90:5a:d2:c2:dd:4b:96:4c:89:bf:47:52:55:ac:
b0:b4:d1:75:eb:90:fb:8f:d0:9d:9e:f8:1b:d1:58:
2c:d7:98:f9:95:86:9d:f3:dd:ef:fc:cb:0e:22:b8:
70:ad:1b:19:e0:2a:a7:6d:7a:20:67:21:e8:2e:a3:
83:0c:d4:62:9e:42:be:bd:a2:86:79:05:bc:4e:e4:
4a:50:a9:f2:fb:66:f3:15:b2:ef:0f:1d:36:28:58:
88:82:52:8c:ed:0c:2a:fb:24:90:d3:c4:0b:93:90:
3b:fe:ca:70:a1:27:24:83:9e:d4:74:5d:0f:54:d6:
2c:ea:8c:8e:de:06:07:e3:a6:56:3a:e6:2f:ac:b8:
66:8a:55:5a:2c:e0:c5:b6:27:7f:df:da:2f:48:67:
e9:99:f3:98:fd:c3:52:51:00:89:14:23:ab:17:93:
b3:93:0f:54:47:3c:7b:7f:ca:66:e5:50:ca:c5:88:
f9:c8:10:74:f3:80:9e:5d:e3:01:0d:70:96:bc:71:
c7:dc:82:e2:96:82:6c:ba:bd:46:5c:5b:0f:2c:67:
f9:20:0f:47:38:dc:67:71:a7:40:b0:69:be:9d:9d:
68:77:c0:5a:06:e9:5c:dc:93:47:b2:9f:5d:9d:34:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F5:1B:A1:6A:39:BA:39:2E:39:19:93:09:C9:CC:59:A0:19:E9:07
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8c:e4:25:44:af:1b:ed:b4:9e:e1:57:01:91:96:c3:0e:12:
43:fa:4a:e5:b5:1a:95:86:66:99:d0:f3:bf:e7:a7:c2:42:bc:
02:35:16:9e:c6:e6:d3:5a:3b:5a:3a:27:17:db:6c:50:a4:88:
15:b3:da:b8:44:69:09:0e:51:46:bc:5e:cd:ad:73:ae:cf:9f:
d1:12:ed:4d:93:65:d4:51:46:b5:e3:84:07:2b:4a:60:0e:ff:
55:9d:c6:04:8b:3f:7c:b8:0d:75:93:16:80:0a:8d:ce:cd:57:
b1:86:6a:a5:34:21:25:aa:f6:4c:38:11:e6:2b:e4:a7:41:f5:
9c:08:c5:0c:aa:43:13:04:19:f0:a6:a7:c3:d6:87:e2:ea:53:
28:bc:31:07:33:f7:51:da:ce:87:22:a2:ef:b4:0d:3d:2a:85:
ae:34:c9:66:16:0b:24:c6:61:9d:52:dd:d5:4a:38:b6:73:bb:
ea:48:7e:2c:4b:16:b6:f5:c6:c9:8b:47:03:6a:b7:37:18:a5:
08:b2:7e:ff:f7:89:da:37:6f:ec:8d:41:61:e2:50:ff:99:73:
98:83:a4:a3:39:18:e2:f2:99:5c:63:c1:06:12:73:52:44:88:
98:c2:0f:3f:6e:00:4f:60:14:ff:07:e4:f1:7f:da:20:aa:41:
ac:9b:10:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:56:19 2025 by rpki-client