Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
File: FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft (raw, json)
Hash identifier: rlpgVujm9WrA6dXOa2wJsmM/M4Pqj5RwSfpZoxdXt0g=
Subject key identifier: D3:30:4F:E1:43:1B:B4:CC:D9:A9:7C:59:E6:00:18:39:A4:97:AE:35
Authority key identifier: 14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
Certificate issuer: /CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Certificate serial: 01967E3392BADF2E994C83BE114C986D0E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
Manifest number: 0348
Signing time: Mon 28 Apr 2025 21:00:31 +0000
Manifest this update: Mon 28 Apr 2025 21:00:31 +0000
Manifest next update: Tue 29 Apr 2025 21:00:31 +0000
Files and hashes: 1: 5wZ-uBzQ29mM_QfzDccMNqqdNYo.roa (hash: 2S+nSZvpWE37VjSR3BnNzUoM6C8tVAdRbE/bGKNExEc=)
2: FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl (hash: fryu4j1LQUNIdM4T71tWYUYxGh/dckalLvU3slYijUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:92:ba:df:2e:99:4c:83:be:11:4c:98:6d:0e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Validity
Not Before: Apr 28 21:00:31 2025 GMT
Not After : Apr 29 21:00:31 2025 GMT
Subject: CN=d3304fe1431bb4ccd9a97c59e6001839a497ae35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:e6:72:25:1e:71:76:79:2d:71:b0:23:f2:
2f:18:f6:fa:bb:e8:be:92:36:1a:8e:53:02:63:18:
a5:d9:94:36:94:93:0e:fe:18:5a:5c:dd:58:8c:53:
9e:90:5a:e3:af:b3:1f:6a:09:2e:07:3d:b0:28:67:
03:fa:21:7d:6e:79:96:11:da:36:0c:b5:40:18:d0:
28:42:d5:07:9a:1c:9a:f6:e3:33:2d:db:55:0e:dd:
0e:20:a6:e2:99:98:a7:87:8c:83:0f:d5:b3:b7:2c:
8c:e2:38:b4:2a:23:e1:91:80:df:56:3c:12:cd:ff:
d7:08:a2:cf:7f:83:93:20:ef:a5:e3:40:9c:55:08:
53:84:c1:c1:9f:47:9a:87:9c:be:a7:03:4b:d0:4a:
eb:a0:91:24:51:10:38:85:b0:c1:a8:8e:fe:ac:a5:
3e:ea:9e:01:85:fd:f1:99:cd:9d:5a:70:27:21:95:
bd:a0:b0:4e:13:ed:73:b5:cd:fd:5d:e6:fe:38:17:
d4:d6:f6:34:23:2c:fa:dd:62:a3:8e:2d:40:70:af:
57:6f:11:d6:ff:c6:6a:00:ea:1d:e9:4a:a7:11:d8:
ef:2d:73:a4:56:06:25:08:22:88:cd:c3:a9:2f:72:
4a:e2:a3:c9:d3:6c:24:d9:94:f3:fe:2d:0e:a2:4d:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:30:4F:E1:43:1B:B4:CC:D9:A9:7C:59:E6:00:18:39:A4:97:AE:35
X509v3 Authority Key Identifier:
keyid:14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:21:88:de:d1:73:38:81:a6:32:45:5e:14:31:b2:ef:b9:dd:
73:2e:3e:09:3d:32:33:01:c8:ec:99:6b:f6:5e:22:9d:ca:ff:
1b:c9:85:c7:92:d3:76:21:69:43:ab:d3:d5:2a:2e:e7:37:af:
2b:74:cd:bb:9e:40:83:b5:25:af:d2:5f:37:9e:4a:c2:4a:fc:
4e:dc:a5:57:dd:75:75:1c:01:12:02:97:6e:a3:78:01:1b:c6:
ce:58:cb:e2:b0:2e:85:95:71:18:92:bb:a2:0e:f2:ea:a3:77:
a2:5d:4b:30:a7:2f:ae:6b:4a:8f:11:76:90:09:08:bd:e3:59:
60:57:1f:80:46:14:65:fc:4a:7b:50:09:f0:5d:4e:76:d6:4a:
d1:f8:b1:2b:57:ed:4b:56:a2:d5:30:49:22:0e:9e:98:eb:25:
19:78:b7:52:df:26:26:b2:cc:58:48:cb:5d:d7:28:6a:25:4d:
04:84:9a:83:9f:86:c2:e0:07:1a:62:39:5f:15:f2:f3:6c:f3:
4c:44:d5:e3:11:f9:63:2c:16:5d:01:cb:3a:d1:d1:f0:50:a7:
c3:de:f2:73:ae:19:e4:7a:38:13:18:87:db:51:7e:92:2e:02:
c3:b9:d7:78:ba:cc:19:84:36:2f:e9:bf:e3:35:d9:b9:b5:97:
28:04:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:20:53 2025 by rpki-client