Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
File: fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json)
Hash identifier: Cc3Jjmz5Bn+DCF56QwcJlUILHbptcCx9YMyw57NSyjU=
Subject key identifier: 39:8C:28:36:14:90:1E:BB:FB:12:5B:15:88:0D:B4:5C:2F:3E:D1:78
Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
Certificate issuer: /CN=7e904bd71d6fe74a67168fd913e828722755b494
Certificate serial: 019612EA6FF5858398518B1F401AACBD5185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
Manifest number: 05A3
Signing time: Tue 08 Apr 2025 01:01:15 +0000
Manifest this update: Tue 08 Apr 2025 01:01:15 +0000
Manifest next update: Wed 09 Apr 2025 01:01:15 +0000
Files and hashes: 1: _hcAKZ9Rlwo19weMs6Swq188ePE.roa (hash: Y66JbaTRqDcxPjnoFMPZ0bWBf5qCwdTDkeUZq42NBUE=)
2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: 5C4scb19gexrKmDh53D5o3gsZC8OObm9nxm4zBxggVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:ea:6f:f5:85:83:98:51:8b:1f:40:1a:ac:bd:51:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494
Validity
Not Before: Apr 8 01:01:15 2025 GMT
Not After : Apr 9 01:01:15 2025 GMT
Subject: CN=398c283614901ebbfb125b15880db45c2f3ed178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:ff:ff:9d:b8:b2:ef:c2:67:40:09:c5:25:
0d:4f:fa:37:d4:8b:b8:b7:a3:ab:47:d5:42:b9:e9:
17:c5:23:ed:c0:16:c6:64:ae:51:a7:dc:4a:84:74:
51:84:9a:51:27:eb:79:95:eb:45:ee:a1:87:ec:77:
f1:df:2e:e0:a6:35:7a:cc:06:8d:36:ad:a6:09:42:
a8:a2:e2:7d:9a:75:15:51:a9:30:ac:7c:db:8e:b8:
14:c4:3a:c2:04:17:3c:c1:c9:c2:35:35:03:d8:2f:
3c:38:df:c0:09:9a:a7:49:ad:c5:ce:2c:87:81:71:
9c:fc:98:46:7c:d1:53:96:4d:b6:19:18:92:b4:3d:
5f:c4:26:0b:5c:cd:c4:b9:de:0d:ce:aa:89:21:ae:
f6:ac:ed:de:ca:e8:a2:2f:b7:28:63:de:24:ac:1a:
bd:fe:ed:06:42:c1:99:c9:f3:78:bd:cd:d6:57:24:
73:ce:b2:12:fb:9f:67:30:2b:c4:5b:fb:d6:c3:2d:
2b:a3:8d:54:66:3b:a3:65:fd:c5:b8:c3:81:46:ae:
aa:18:f0:79:0d:ed:b8:8a:b1:eb:49:87:d6:ff:ef:
f0:16:b3:fc:c8:a5:da:6b:08:d1:e4:40:7a:2e:5f:
70:cf:4e:4c:7c:2a:6d:32:f0:bf:73:b1:19:af:2c:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8C:28:36:14:90:1E:BB:FB:12:5B:15:88:0D:B4:5C:2F:3E:D1:78
X509v3 Authority Key Identifier:
keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:89:2d:87:4d:6f:8d:85:85:95:af:8a:77:81:4a:1e:b7:e4:
aa:88:f3:74:d3:a3:58:37:26:b3:e1:2e:b7:0e:56:0f:72:79:
d9:32:83:f1:17:16:45:c3:8f:f1:47:73:08:eb:0f:87:e0:00:
a4:90:ba:a0:09:9b:5d:5f:48:fe:38:68:89:6b:39:4c:5a:01:
21:0e:af:86:3c:2e:e2:95:17:24:c3:38:0b:17:f4:c2:b1:cd:
98:20:42:81:d5:13:dc:24:87:28:2c:56:b4:cf:26:50:26:e0:
21:7c:76:0d:01:83:f4:4c:41:1c:37:7b:74:9d:9f:26:07:e0:
c5:09:94:df:72:08:4b:a6:97:63:2a:04:a0:b5:e3:04:02:67:
fe:5f:00:18:f5:03:cf:09:9f:2f:a2:cc:a7:9a:d4:f2:fb:07:
cb:a1:e6:94:40:6d:07:c0:3c:dd:f5:12:f1:60:ce:8f:80:ab:
c8:ae:4a:4a:ba:e5:34:4e:c3:30:60:3d:9e:29:77:1b:c7:dc:
ec:92:6d:ef:4a:73:35:bc:18:24:80:88:8d:e2:6d:d3:83:d1:
dd:a4:50:16:1e:cd:fd:da:56:1f:63:18:64:2f:02:4b:80:69:
c9:52:40:5d:9c:0a:b7:2b:81:64:fa:46:91:ba:81:df:ad:17:
5f:6f:1b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:13:53 2025 by rpki-client