Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
File: FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft (raw, json)
Hash identifier: LjYd6MpP+KFDg1nLLqmKMrufbhvvQEXL2UuNfhlwE9o=
Subject key identifier: 08:6E:F8:67:F0:46:BA:E8:73:B2:38:AE:E5:41:B8:43:63:A2:51:1C
Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
Certificate issuer: /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Certificate serial: 01967F462A33ED4D68F4FD1EDBFD62A9D334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
Manifest number: 0991
Signing time: Tue 29 Apr 2025 02:00:26 +0000
Manifest this update: Tue 29 Apr 2025 02:00:26 +0000
Manifest next update: Wed 30 Apr 2025 02:00:26 +0000
Files and hashes: 1: FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl (hash: +HBmjUZl9JF1a4xB/OIO6mC1yN98OheP1WcypmB3ne4=)
2: QNhj8szxUJQB2UJkTSFbnKRcj2U.roa (hash: G9tQdAu6v2DV1kcxNZeTfgXQ9D3NQf3F0+ROvxbmmRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:2a:33:ed:4d:68:f4:fd:1e:db:fd:62:a9:d3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Validity
Not Before: Apr 29 02:00:26 2025 GMT
Not After : Apr 30 02:00:26 2025 GMT
Subject: CN=086ef867f046bae873b238aee541b84363a2511c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:ad:44:19:3f:b7:94:ba:93:24:77:71:a8:
7e:e5:4a:a1:58:7e:0b:dc:94:6e:f1:2f:c5:1e:d2:
6d:98:c8:06:96:cf:c9:57:fa:38:9d:55:87:6e:5c:
b5:dc:82:55:f3:01:9c:47:77:fa:af:78:b8:af:03:
70:f8:b2:19:86:e3:a9:93:fa:ed:67:06:1c:18:cd:
49:71:8e:73:1d:0a:b6:f5:94:bd:0a:c6:3b:b9:d1:
e1:0b:71:c7:d4:18:1a:c7:eb:c1:a4:2c:33:2f:60:
31:6b:05:1b:85:9b:2d:91:bd:3a:7f:57:03:d5:84:
92:e9:5e:62:c5:6f:a0:df:71:8e:35:eb:3a:d9:e1:
4c:fa:2f:d5:0a:4a:80:96:f4:35:91:6f:d8:63:20:
bf:18:b4:f6:e6:0c:f3:b7:4b:3c:4d:ad:7d:76:f2:
5a:cc:a0:d7:91:6f:29:a7:69:ce:23:cb:04:b9:3f:
a0:99:08:1e:e7:12:7d:71:50:81:b7:64:b7:b1:90:
3b:2b:12:3e:1c:48:c5:3a:ee:c7:5a:74:d8:b8:22:
fe:21:17:1a:96:a1:58:49:a8:be:31:ea:a5:15:a1:
47:4c:5e:87:e1:93:24:f2:ae:23:28:54:bb:ec:0b:
ed:9f:d1:7c:1e:31:64:db:2b:9f:56:f9:11:66:ba:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6E:F8:67:F0:46:BA:E8:73:B2:38:AE:E5:41:B8:43:63:A2:51:1C
X509v3 Authority Key Identifier:
keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8f:4e:a4:51:c0:7c:2e:e6:cb:71:89:66:85:df:96:eb:fd:
c3:c1:f7:58:da:70:7c:c4:b7:21:c7:5b:28:92:c6:65:21:5a:
ce:8d:14:88:d4:a5:a6:ba:4d:4d:f6:ad:36:48:d6:6f:27:19:
87:8e:30:87:c7:9a:a3:15:81:73:a7:d3:81:34:fe:ef:96:d8:
1e:b1:53:66:15:1e:39:7e:a8:92:9b:36:d8:fd:f8:9d:74:54:
0f:45:c5:8a:5d:6e:8e:b4:ff:03:e8:8c:30:3e:92:c2:04:f4:
b5:2c:cc:21:0b:b6:4b:c7:d3:9e:32:f7:7f:19:15:b0:48:9a:
e8:3e:f5:bc:79:19:6f:6b:e7:59:9b:83:f2:c7:58:d3:c5:ce:
37:68:a0:85:c5:29:fc:71:97:f0:61:2e:f4:78:3b:6f:50:a7:
e1:d7:f4:a2:33:b4:10:20:14:66:06:b4:6b:4a:36:01:08:43:
b1:e1:be:84:c0:6f:16:cc:f8:ba:ee:77:d2:48:67:82:70:81:
09:e7:83:f1:c4:5a:7b:aa:1f:98:15:c5:67:70:e8:36:08:2f:
67:be:a4:73:9d:01:88:a4:39:b9:ea:d4:08:41:bc:d8:75:fb:
74:0b:3d:e3:b7:ce:3d:82:aa:52:20:6e:2c:0f:eb:37:63:a8:
ee:2c:03:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:46:05 2025 by rpki-client