Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
File: FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft (raw, json)
Hash identifier: /Q7rB9ZzMOUR1hclZSF8meaGpw4mfp3Ffdqjfyewq6Q=
Subject key identifier: 97:A9:12:CB:DD:F4:0B:48:ED:99:58:86:A8:36:71:EA:A7:20:C6:5D
Authority key identifier: 16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
Certificate issuer: /CN=168a919a4a463f3ca2bba5442550fc247da90cae
Certificate serial: 0196556E55DBA517A1DEA3B134D271D54D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
Manifest number: 1E
Signing time: Sun 20 Apr 2025 23:00:16 +0000
Manifest this update: Sun 20 Apr 2025 23:00:16 +0000
Manifest next update: Mon 21 Apr 2025 23:00:16 +0000
Files and hashes: 1: FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl (hash: HaLH+iO11V0cH8zh8mutp/helc0oqVkkQ4bsQjnGvdA=)
2: ve2iEFS7yneK4NHtoTNszVB8cZo.roa (hash: g/XvhTcgORHoQzc25n1ZqGUd92LVhhds69w5ITmpr4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:55:db:a5:17:a1:de:a3:b1:34:d2:71:d5:4d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168a919a4a463f3ca2bba5442550fc247da90cae
Validity
Not Before: Apr 20 23:00:16 2025 GMT
Not After : Apr 21 23:00:16 2025 GMT
Subject: CN=97a912cbddf40b48ed995886a83671eaa720c65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:03:cc:88:a6:b2:d5:24:a0:43:da:4f:44:
3a:cd:06:53:f9:6a:a6:c9:fa:94:75:df:2d:48:d1:
37:90:e8:36:ce:96:59:fd:4f:0e:d3:54:18:93:3c:
af:65:c4:d7:23:fb:4a:ca:01:9a:9e:b7:5b:e0:b6:
ea:2b:90:e3:fa:74:0c:c9:a5:87:cf:3d:e2:70:42:
b3:6b:3c:8c:6e:4a:c1:25:f8:a3:a0:6e:c5:31:96:
8e:e2:9d:d1:ab:60:5a:a1:a7:28:d0:11:fa:a6:8a:
82:5f:0a:be:98:56:fa:4a:ec:a1:ac:51:5d:42:c4:
de:52:20:e3:f7:04:e4:7a:81:e1:1b:93:eb:8d:77:
12:5b:f4:9a:87:d9:01:95:16:45:2c:42:69:04:6d:
a4:7b:ac:d3:76:ee:77:2a:7b:ad:51:91:b0:73:0f:
77:3b:5c:63:35:02:b4:c6:f5:bc:48:f8:fa:20:89:
98:1c:62:8f:be:43:b8:04:2a:6e:c9:8b:82:78:72:
f8:36:a7:3f:9b:a9:b4:af:8d:5b:3e:65:5b:72:aa:
5c:83:a1:53:74:4d:56:fc:40:cd:95:1a:aa:6b:ff:
b6:2c:5f:80:14:2d:e2:75:cc:99:ab:c3:b4:75:f4:
d3:e6:88:39:f6:70:2c:df:cc:a5:08:7f:a0:a2:79:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A9:12:CB:DD:F4:0B:48:ED:99:58:86:A8:36:71:EA:A7:20:C6:5D
X509v3 Authority Key Identifier:
keyid:16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1c:d8:8e:7e:cf:f3:01:7b:e7:e7:d4:86:63:0d:17:78:4b:
4a:13:59:53:2b:fd:d7:5b:4f:fe:31:5c:85:f2:38:6c:92:3f:
7f:89:ed:f5:e0:5f:f5:fc:9a:6b:d6:84:be:da:38:aa:88:bc:
a7:ce:98:f5:61:e3:79:d3:d5:6a:2c:f4:d0:24:1c:0d:62:1e:
89:3f:91:26:ec:96:0f:72:68:1a:66:e5:b0:c7:4f:3f:b6:3e:
b9:32:49:0e:da:4f:0c:53:66:c8:e6:49:70:cd:34:33:96:7a:
93:23:2b:89:7e:cb:c3:c9:cc:e9:8e:1b:0b:a7:ce:28:d5:01:
61:5b:9e:78:f0:da:f0:d7:14:59:39:32:ce:d4:23:2c:82:d3:
88:28:a1:cc:67:63:1e:ca:85:78:4e:ad:84:7d:12:4d:ee:10:
68:61:4f:fc:46:26:5b:b0:79:a4:04:65:5e:53:37:4a:3e:b8:
fc:ad:34:af:63:3f:4a:e1:c6:77:c6:d1:58:d4:3f:d5:7e:99:
b9:19:a5:71:c8:4e:74:c8:b2:b5:d2:6a:62:09:a5:40:da:82:
a4:ee:5c:63:af:c3:89:22:d9:ec:ce:56:4a:72:0e:73:db:3e:
4b:f5:b5:fa:34:e5:3f:36:40:8d:70:71:eb:85:35:7f:e5:09:
f5:35:fa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:02 2025 by rpki-client