Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
File: FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft (raw, json)
Hash identifier: KT69At/D6ugB1OtGdou1Jn+LGYaEInTYFXzf/cOZuno=
Subject key identifier: F5:61:D3:51:67:5F:B4:55:72:1A:F0:4B:4E:EF:7C:27:DA:4C:E3:B6
Authority key identifier: 14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
Certificate issuer: /CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Certificate serial: 01965FBBFBDC1F59377A48902E714AFD1F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
Manifest number: 127F
Signing time: Tue 22 Apr 2025 23:01:17 +0000
Manifest this update: Tue 22 Apr 2025 23:01:17 +0000
Manifest next update: Wed 23 Apr 2025 23:01:17 +0000
Files and hashes: 1: FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl (hash: qW2Nzz73OIo6rfpRcM/7MUpXieP7DKUzMclHiw5JVmE=)
2: _0Ovr-P6Apyo_tveovy4IKn6bqU.roa (hash: ocYJ6sP+UnlpINi5qB4yLeRqouA2cf9W4NHegtvwt7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:bb:fb:dc:1f:59:37:7a:48:90:2e:71:4a:fd:1f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Validity
Not Before: Apr 22 23:01:17 2025 GMT
Not After : Apr 23 23:01:17 2025 GMT
Subject: CN=f561d351675fb455721af04b4eef7c27da4ce3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:29:11:6e:c9:57:8b:b7:b4:e7:cc:5d:d5:
b9:16:d1:55:00:98:02:0a:82:06:80:64:b3:66:2e:
f5:8f:c5:bc:74:83:e6:e7:86:f5:59:f0:8f:9a:cf:
c8:ef:8c:a3:7d:56:43:77:72:83:f1:49:f6:e6:a2:
20:51:10:26:73:ff:29:c8:72:3b:b8:24:2e:7c:4a:
e2:a8:a1:19:b0:8d:8b:2c:14:33:5a:70:29:e8:38:
80:69:99:26:d6:11:63:eb:e1:38:5d:dd:6e:8b:6f:
69:5b:7e:ec:7c:46:b2:49:42:06:d6:72:33:d6:b5:
37:90:9a:a9:8f:64:c2:fb:24:d1:35:ed:75:e1:59:
f8:09:4b:58:1a:ee:9e:34:c5:a3:1e:e4:cc:0a:51:
81:a8:fa:0a:b1:59:56:62:ff:9e:0e:e4:36:7d:62:
e9:46:3e:c7:11:0c:54:03:98:71:a8:3a:b0:d3:3a:
85:0b:17:83:e1:96:60:7a:f3:31:e9:de:c7:87:f4:
77:5f:ce:60:87:2f:3d:ea:d8:c5:11:a2:a7:f8:86:
8a:0a:a8:26:2d:19:40:ca:9c:54:4f:60:c3:a9:05:
20:cb:b4:28:bc:01:fb:64:0d:94:c1:9b:8c:71:08:
8d:62:a5:bc:c8:6d:38:cd:fd:09:d5:1e:cd:18:8b:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:61:D3:51:67:5F:B4:55:72:1A:F0:4B:4E:EF:7C:27:DA:4C:E3:B6
X509v3 Authority Key Identifier:
keyid:14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:df:aa:af:e3:da:0e:ce:cb:3c:38:47:83:3a:8c:0f:12:4b:
e6:33:b1:b6:4d:d0:a2:ad:e8:4c:7f:3a:d3:a5:d7:1f:63:24:
fd:f2:ad:07:f8:c8:be:4f:3b:77:ae:ae:d9:5c:05:4f:78:fd:
fd:4f:36:ce:18:62:48:4e:c6:dd:b8:9f:40:18:af:46:74:04:
98:ca:1a:cc:2d:94:88:42:58:b2:d8:7f:f8:98:7c:d5:17:f3:
a8:bf:d0:fa:34:3b:2f:6c:7b:eb:04:87:44:72:1a:46:bd:3e:
74:de:2c:03:64:fe:19:d1:64:64:b1:4b:ff:c2:10:b8:09:66:
fc:a2:92:12:ff:d8:da:5e:7e:4e:b4:77:da:1a:b6:9e:ff:e5:
b5:43:18:58:20:02:f6:81:33:82:6f:ac:14:31:a7:12:b9:0c:
97:c7:d1:b4:f5:69:55:c7:df:bf:9e:09:9f:d5:3c:1e:19:8b:
c7:95:d0:eb:c7:75:b7:20:25:8a:25:2e:85:d7:8b:27:32:be:
28:7e:cc:a6:5e:92:48:ca:bd:53:cb:1c:75:85:b0:58:82:30:
eb:be:c0:28:1b:46:cc:3d:1f:7a:78:63:0a:f6:d4:5a:c6:6e:
40:0c:29:a0:71:6b:9e:2e:76:f5:48:2f:c2:fd:75:b9:a3:9b:
92:14:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:56:58 2025 by rpki-client