Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
File: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft (raw, json)
Hash identifier: aLs9cJKP7FraprEFctdH6NXL9FkS4ZK2EQN5u61RAKk=
Subject key identifier: C0:75:FB:30:93:FA:07:B0:15:D0:97:34:66:44:1F:AF:FC:1F:9A:A9
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial: 019653EE8F8C93DC73F35570FF46AC675823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
Manifest number: 0B3A
Signing time: Sun 20 Apr 2025 16:01:05 +0000
Manifest this update: Sun 20 Apr 2025 16:01:05 +0000
Manifest next update: Mon 21 Apr 2025 16:01:05 +0000
Files and hashes: 1: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl (hash: Rguhu+kRG8P0EmwCcuxA7EEZY1t/Pk5zCIKM9uS2oYU=)
2: krakPppfz7flLx069ZARtir4dzE.roa (hash: rc01bvPv/5+vfBCkfObVuaLV/O1M46ZYkYO5PLG/3iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:8f:8c:93:dc:73:f3:55:70:ff:46:ac:67:58:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
Validity
Not Before: Apr 20 16:01:05 2025 GMT
Not After : Apr 21 16:01:05 2025 GMT
Subject: CN=c075fb3093fa07b015d0973466441faffc1f9aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:e7:99:de:92:a0:ec:30:da:dc:6f:f1:19:
a5:63:e1:7f:9f:aa:14:66:df:26:73:bc:b4:1c:b7:
13:2f:3b:b5:5f:5e:51:a5:59:f6:df:2b:34:c7:57:
1c:c7:e1:fd:b6:3b:2a:d4:3a:73:e3:2f:72:de:07:
17:31:b1:1b:6a:29:93:9a:8f:25:da:bd:5b:f7:5d:
78:3a:ea:c1:25:ee:e3:05:b1:5f:a8:70:d7:ce:a3:
bd:0b:29:4b:77:eb:90:af:e1:43:58:e0:f7:1d:ca:
3d:c8:e5:8a:18:e8:e8:ac:71:7c:a8:25:a9:64:35:
52:17:37:4d:85:53:9d:46:9d:ea:56:f8:3f:29:f7:
29:84:d2:9f:38:ca:11:a8:94:52:ad:89:7b:8a:7c:
d9:d7:4f:01:f5:52:ac:fc:0c:cb:5c:0a:87:e0:65:
2e:8e:b8:39:61:b9:a4:fd:fc:a1:0f:ca:ad:7c:5d:
91:14:65:a4:44:3c:8a:b1:5e:c0:75:78:44:de:f8:
6b:43:a5:ac:bb:41:3a:e1:7a:f7:17:23:1e:c9:22:
3b:7b:9a:ac:2e:98:3e:93:c7:5d:c7:70:84:86:fa:
e5:6f:86:44:20:d4:5a:9d:eb:9e:6d:73:a0:51:36:
03:93:23:17:01:dd:13:d2:a6:ee:49:e4:e0:c9:71:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:75:FB:30:93:FA:07:B0:15:D0:97:34:66:44:1F:AF:FC:1F:9A:A9
X509v3 Authority Key Identifier:
keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4c:ea:b3:4b:6f:df:0e:5c:20:55:13:08:0d:72:18:39:17:
7b:8f:b0:8f:61:11:8f:4b:aa:19:70:48:15:63:b8:a3:60:23:
d9:4d:08:c7:1d:ae:81:f0:a2:72:54:eb:70:1a:fa:f5:6b:11:
ea:34:0f:95:a4:94:01:58:48:ea:ef:66:2e:ae:41:89:e7:15:
9c:4c:5a:55:2f:19:f3:a3:59:88:c5:8b:c3:e6:e4:42:16:74:
c4:7f:85:41:7c:77:f5:9f:8a:6c:a5:ef:fd:3d:06:b5:30:29:
2c:22:f1:3e:68:30:0b:0a:90:f9:e7:12:b1:25:b9:a0:29:c6:
76:1d:43:3f:37:44:f8:ea:9a:87:75:f3:9c:f1:43:dd:d2:f9:
90:09:b1:fd:98:17:e5:75:91:d0:c4:1a:fd:56:29:b1:3e:2d:
c0:b5:c2:08:ce:f5:a1:75:67:16:13:c3:07:c6:3a:39:51:67:
06:06:73:14:de:cc:60:cd:94:3d:5f:37:a2:8f:db:21:61:1b:
33:a5:1e:23:93:d9:6a:cf:bc:4a:1f:9f:79:a9:db:d2:5b:10:
61:82:06:08:a5:bd:f8:9e:46:6f:38:76:39:e3:0b:0e:94:56:
24:f4:81:b2:43:0c:3a:f5:3c:74:6c:50:bc:77:85:f7:02:ad:
a8:ff:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:26:33 2025 by rpki-client