Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
File: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json)
Hash identifier: GGRFHtAQ3z3OmBtm/c0Ava3c/sPO0Jdbbyy94Nca9DI=
Subject key identifier: B9:37:5B:30:AB:08:55:73:F4:C8:E1:A5:F3:96:E9:D4:A8:59:AD:04
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial: 01965D5FAC8F368ADF5384B65FE1407C8E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
Manifest number: 141E
Signing time: Tue 22 Apr 2025 12:01:13 +0000
Manifest this update: Tue 22 Apr 2025 12:01:13 +0000
Manifest next update: Wed 23 Apr 2025 12:01:13 +0000
Files and hashes: 1: CJUlJDy-56wu6zeQ3niPJdV4COg.roa (hash: L4zbh11FM5FRXP4RaQH2Hk+P+CwUeKC3KbUfcsAdfU4=)
2: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: +JlrUXKKibzoagXkybN3NJJKmp3iBU5TdaKe0Uhs9ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:ac:8f:36:8a:df:53:84:b6:5f:e1:40:7c:8e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Validity
Not Before: Apr 22 12:01:13 2025 GMT
Not After : Apr 23 12:01:13 2025 GMT
Subject: CN=b9375b30ab085573f4c8e1a5f396e9d4a859ad04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:fa:13:20:2a:fc:18:6f:7c:fc:5f:c8:ca:
a0:0d:4d:25:48:72:e2:c6:bc:9b:9e:d5:97:51:76:
ee:35:d1:de:35:7a:1d:a5:26:13:d6:9f:b4:d0:6b:
66:c6:50:37:fe:2d:97:20:bf:99:03:5e:1d:0c:54:
b5:d0:13:ca:10:6f:30:53:e8:d1:e2:26:c9:00:cf:
48:5b:8b:68:ca:f3:7a:2b:f7:6c:6b:b1:ab:e6:71:
09:f8:79:55:c4:72:ae:ef:e2:67:fd:05:6a:96:7d:
a9:1c:fd:a8:dc:b5:63:0f:7d:84:20:41:fe:e1:ce:
a2:74:45:0e:d7:15:02:24:d8:7e:6e:57:95:f5:29:
3e:ca:b4:dc:1a:98:02:f9:bf:f4:a3:f3:a6:1c:53:
d4:57:78:f9:32:b8:45:73:46:fe:a1:da:21:ed:eb:
64:7f:d3:df:6e:fe:41:aa:26:32:6d:9e:5e:7a:ec:
b0:7e:69:48:3c:2e:91:83:a3:93:3f:d5:25:f5:36:
df:cc:e1:23:d9:52:18:d5:82:c4:5b:e3:7a:cf:fa:
c5:c6:ea:bf:55:a3:bc:ab:9c:30:3c:29:25:a5:a5:
be:80:c9:37:3f:1d:58:c3:1a:f7:df:95:de:ed:c5:
09:ab:43:47:71:f3:a1:a4:5d:00:23:db:ee:69:f9:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:5B:30:AB:08:55:73:F4:C8:E1:A5:F3:96:E9:D4:A8:59:AD:04
X509v3 Authority Key Identifier:
keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5e:43:d4:f6:00:2b:48:af:ef:f6:57:fd:d3:7f:6a:ef:8c:
d8:65:35:7d:99:3d:5e:44:41:6a:bc:cb:82:5f:29:63:b8:50:
97:5d:58:01:4e:27:8e:fe:bd:c4:d7:a9:b4:ac:72:d2:d1:ff:
6d:53:8f:21:b5:ab:93:b7:6c:57:76:45:a3:4e:5b:75:86:25:
a5:51:82:eb:60:69:f3:f1:80:e2:ea:63:a8:5a:3e:f2:38:88:
48:d9:af:bf:a0:50:95:3d:12:48:39:35:e1:e0:64:e0:36:16:
eb:8f:81:18:d1:6e:b0:05:9e:41:70:37:1d:f1:27:53:2e:62:
41:d1:ab:b9:95:2f:4f:19:fd:11:3d:7f:5a:02:30:39:cd:76:
68:63:e0:b2:5c:51:b7:fb:38:c1:5f:e4:fb:d6:c3:9d:00:cb:
cf:82:17:06:eb:ce:bb:50:d7:f0:ac:ba:fc:fb:17:24:a2:af:
5b:3d:62:b1:6c:95:01:27:b9:7c:15:45:dc:7c:e3:d3:42:d1:
a1:a5:ff:25:4f:a4:02:0e:0f:9b:f2:06:0e:98:14:e2:09:37:
cc:29:51:ad:91:38:7a:bf:14:d3:3d:4d:2a:21:e8:41:b3:2e:
12:13:01:cc:98:83:fd:73:06:6d:f6:8e:ac:02:02:fd:b6:60:
aa:e5:84:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:00:55 2025 by rpki-client