Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier: FU7XNvUJlQA5GhvJN3UELeOn/sJJy5o7EGtjH8gcOT0=
Subject key identifier: BF:D1:85:4C:85:50:88:67:DA:A7:FC:A2:1B:85:09:15:21:3B:FC:9C
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 01968DDD97C3969BC875E61B0AD9864D679D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number: 121A
Signing time: Thu 01 May 2025 22:00:31 +0000
Manifest this update: Thu 01 May 2025 22:00:31 +0000
Manifest next update: Fri 02 May 2025 22:00:31 +0000
Files and hashes: 1: AcPmWwo94r8m4Vj4-gToYDvTsGU.roa (hash: +evKtbSFjpYA6xBirW2To9jZahtd3cCQYx8e8YIZ/g8=)
2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: kAuCFgsABxBFXmxFtnzhG1J1aNfZzpJa39uebIrpCwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:dd:97:c3:96:9b:c8:75:e6:1b:0a:d9:86:4d:67:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: May 1 22:00:31 2025 GMT
Not After : May 2 22:00:31 2025 GMT
Subject: CN=bfd1854c85508867daa7fca21b850915213bfc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:48:e2:3d:36:f5:43:27:a4:8e:43:9b:9f:
3c:45:dc:b6:d6:d2:f2:58:9f:69:06:08:88:5f:0a:
7f:f5:9e:f6:43:75:a8:21:0b:3b:ad:b1:da:4a:07:
c5:19:85:de:f0:84:4d:fe:e4:db:5b:62:01:71:bd:
4e:58:00:3f:e7:49:3a:2e:ec:6e:e0:30:ad:78:84:
1a:6e:38:29:3a:f5:ce:06:bc:c2:4f:0c:e6:1d:29:
a4:fd:4d:a7:22:1c:c9:8b:74:c1:a5:6e:3f:c5:db:
9b:f6:55:ac:1d:5d:94:c7:2c:7c:28:0f:42:82:04:
cb:3c:5a:a1:9b:0e:cf:a3:19:58:1a:d6:90:74:d7:
74:b4:39:90:01:19:fc:59:7b:73:99:5b:35:78:f2:
fc:8c:32:d9:e4:f9:4d:0a:a3:2b:6d:38:39:18:37:
47:a0:d0:4b:90:26:33:b5:61:ee:f2:98:64:54:7f:
b7:d4:38:c8:75:3a:9f:7d:ea:33:d3:26:8c:1f:82:
e0:5b:d9:0c:62:67:b2:11:2a:cc:11:6c:9e:97:32:
a9:e0:a7:34:2e:ae:ea:e7:1e:c0:72:82:49:70:30:
66:8d:2a:11:74:95:c8:d4:60:8a:43:4e:57:db:a8:
27:d2:26:bb:ae:66:59:35:4a:e5:27:82:6a:ef:e0:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D1:85:4C:85:50:88:67:DA:A7:FC:A2:1B:85:09:15:21:3B:FC:9C
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6e:86:ef:fb:3f:f0:89:c5:65:2d:b7:5f:97:62:66:d7:18:
46:34:9a:15:47:af:05:95:4a:13:c1:eb:f7:e9:9c:3f:ab:d4:
74:f9:23:13:53:41:27:66:82:c6:ab:51:4f:44:2e:4f:e5:12:
fb:fa:4b:1d:9e:03:c9:66:16:f5:ce:be:a7:72:5f:81:1d:4e:
fa:a0:fc:d3:77:77:39:f3:a3:bd:18:54:3d:90:07:3d:f3:ca:
a8:46:81:ab:b5:7c:56:b8:84:6a:54:a7:a5:47:7c:a1:ce:78:
1b:87:aa:3a:9a:11:bf:31:39:b7:52:b5:57:7b:76:23:7c:ee:
59:ce:ff:45:13:f3:28:c3:ca:e1:4a:8e:61:93:6d:2d:9c:f1:
d3:b8:0c:fa:a4:5a:62:c5:de:33:2d:a3:75:60:13:b6:8f:fa:
22:c6:75:f1:87:ad:37:1a:d5:a9:9b:3d:8e:15:d2:4f:e7:d1:
8d:48:00:78:41:fd:78:54:21:7c:4f:91:9a:51:bd:ee:1a:cc:
b7:e8:37:13:e5:a4:ad:e6:bb:57:e7:46:6e:b7:d6:83:7b:9e:
f0:b2:df:7f:d1:3c:7f:aa:b1:5b:e2:37:86:27:31:72:63:76:
73:91:6e:cf:c2:2f:c5:f6:d1:9e:dc:a3:01:fa:9a:eb:40:91:
18:0f:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:53:12 2025 by rpki-client