Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier: 2btNzsiAiEY63/hWnyZkEFuEJUENPCUzDBYnRqsNtKU=
Subject key identifier: 01:FF:C5:D8:D3:07:AE:AE:3A:DA:F5:88:52:26:0C:DF:B1:7E:ED:60
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 019657CB5981D31191CEBDD5853A9E7B262C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number: 1213
Signing time: Mon 21 Apr 2025 10:01:06 +0000
Manifest this update: Mon 21 Apr 2025 10:01:06 +0000
Manifest next update: Tue 22 Apr 2025 10:01:06 +0000
Files and hashes: 1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: iXVhYywqQR8EGtHfiKQT8SnkbuaWUrUhY8WvVKEO+zg=)
2: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (hash: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:59:81:d3:11:91:ce:bd:d5:85:3a:9e:7b:26:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: Apr 21 10:01:06 2025 GMT
Not After : Apr 22 10:01:06 2025 GMT
Subject: CN=01ffc5d8d307aeae3adaf58852260cdfb17eed60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:17:5f:70:74:fa:e6:f7:b6:50:b6:98:5d:
0c:e1:5c:74:5c:0a:7b:cc:e7:d5:e1:16:ff:34:3b:
90:7f:e8:c1:2e:22:d9:a2:72:61:3a:52:45:63:23:
4d:d0:18:09:81:0a:8c:17:31:73:71:66:c7:cb:a0:
2d:2d:36:f1:cf:de:64:6e:9e:df:16:80:ac:62:3e:
86:ef:5d:f1:00:a3:78:20:7c:13:38:00:6a:a8:bc:
cb:0f:fd:3e:41:5b:9b:c4:25:d8:10:c1:32:9a:ed:
46:36:c1:a1:1d:54:2c:b3:b9:c1:85:64:d6:92:3e:
b7:9c:aa:c6:41:ea:85:3f:03:a9:01:fd:b5:be:fb:
93:4b:6f:d7:b4:67:58:df:84:29:10:35:3b:cd:b0:
aa:73:8c:9c:d1:9c:ad:3c:5e:92:36:d8:7a:7a:74:
3d:49:bd:42:cd:3f:22:d8:1c:e3:c9:8c:2d:1d:b4:
23:27:3b:ca:5d:35:df:48:51:da:6b:42:79:c5:e9:
04:b4:25:f2:c9:88:51:b2:f7:47:85:6d:63:09:b6:
7c:85:97:4a:cb:ae:d0:71:b5:3c:40:96:d2:9b:38:
84:62:c0:03:df:d9:26:86:4a:6c:4a:0f:92:3f:1b:
27:9d:e9:b8:e8:be:90:a7:f3:43:fb:f5:ad:fa:8d:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FF:C5:D8:D3:07:AE:AE:3A:DA:F5:88:52:26:0C:DF:B1:7E:ED:60
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6d:42:4a:6b:ed:09:2d:4e:d5:cc:44:2e:a7:e3:0b:b1:58:
1e:55:e2:b2:16:ee:dd:95:84:83:df:b7:f6:88:46:99:f4:68:
f0:f2:24:0c:1b:9c:ae:62:b0:5b:e6:ad:5b:8b:b4:fc:e2:52:
a5:ff:e9:63:c1:6a:ad:90:dc:31:f9:9e:d2:34:a8:c2:cb:21:
08:81:79:11:7b:f5:80:cf:85:8c:a4:9e:c6:e6:91:5c:b5:06:
40:3b:6a:2e:7f:ac:23:50:64:df:28:74:8f:2d:f5:7e:bb:9a:
84:1a:6b:3c:6a:2d:08:9c:12:a7:b2:58:90:d9:59:40:f9:bb:
84:3f:e9:ed:a1:3f:bc:15:04:64:bc:0e:eb:8c:41:59:4d:7b:
cf:76:4b:2c:77:18:0d:60:87:d5:8a:41:1f:01:8f:8f:b2:73:
1f:33:7e:4e:07:05:dc:44:16:6d:52:75:99:08:bf:5e:76:7c:
ce:fb:78:41:ba:fd:ac:9e:49:ca:a2:87:a9:8f:c8:73:72:54:
6d:2d:e1:e4:21:b6:97:62:bf:53:46:ea:82:a7:b7:03:3e:7b:
f7:e6:18:af:ce:fd:79:44:76:50:10:4d:43:3a:1f:ce:c4:99:
7c:85:4c:e6:f4:72:35:6c:29:b3:d5:ce:9a:37:80:da:d1:5b:
89:72:e7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:04 2025 by rpki-client