Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: ph7F9YatJELlO23FmmcwuXmWm85A0Riya9GfOWQy66Q=
Subject key identifier: 7C:A6:CB:BD:A2:8E:75:60:20:AA:33:53:07:D0:67:C0:95:52:FA:26
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 0196542501387CF29661EFBB76A47EB5CD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 17:00:33 +0000
Manifest this update: Sun 20 Apr 2025 17:00:33 +0000
Manifest next update: Mon 21 Apr 2025 17:00:33 +0000
Files and hashes: 1: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: eI3VX0KBE2AXsRQ4tdth8c+VIXIho6RFTt6+SAtU+5A=)
2: ThZzWFH5INkQ7ymiA_IBq-KPEM4.roa (hash: dM5mDKUs0Ppdg4qZBmK0UY+RheCcm2hY4o7VfDpWvQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:01:38:7c:f2:96:61:ef:bb:76:a4:7e:b5:cd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Apr 20 17:00:33 2025 GMT
Not After : Apr 21 17:00:33 2025 GMT
Subject: CN=7ca6cbbda28e756020aa335307d067c09552fa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:60:7a:f5:9c:2e:7b:cf:d5:f4:f2:f9:f2:
9a:75:3b:d7:31:ba:40:0f:bc:59:97:34:43:ae:dc:
71:e5:9d:0b:70:a1:26:1e:74:ce:23:c7:e1:71:9a:
54:09:b9:8f:ba:c0:27:c2:08:ef:b7:2a:24:7b:ee:
1b:f1:ac:04:6f:b6:28:70:1f:d7:72:43:e6:63:19:
c3:43:09:35:56:9e:d6:c0:bf:d9:ce:9e:43:ff:db:
65:0f:e2:ce:e2:0e:4a:4f:41:60:7b:57:9f:93:3a:
8b:6c:2a:28:2c:49:c5:f5:e3:4b:84:40:1e:45:21:
f0:86:98:d5:24:43:cd:2f:a7:f6:45:b8:db:7b:71:
b8:da:9a:3f:16:4f:78:dd:28:55:09:0c:58:cd:a3:
4d:ce:c1:64:6f:81:51:b5:28:a6:65:2e:8c:71:81:
16:83:49:98:5e:25:4f:86:ad:cd:78:85:0d:1f:ff:
81:3b:77:0d:7e:a6:53:49:bf:48:94:c8:f3:54:f6:
25:79:3e:d3:3d:8d:e9:6f:3d:9b:a4:f0:b7:8a:76:
8d:8e:2b:76:e5:3b:bb:f5:55:3d:11:c5:eb:95:2a:
d9:fd:ea:ca:89:52:8c:60:ae:c7:ff:10:93:54:d3:
ac:49:c2:9a:e2:e2:da:ad:84:01:f2:67:40:1e:27:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A6:CB:BD:A2:8E:75:60:20:AA:33:53:07:D0:67:C0:95:52:FA:26
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:88:25:0f:f8:b0:ee:40:08:5d:a1:95:13:2c:12:8a:70:aa:
33:de:04:ba:1c:f8:60:7e:7c:a1:02:6e:d4:0e:8d:20:e3:51:
e6:92:2d:a2:a9:b3:89:19:d9:60:d9:05:0e:9a:43:95:f0:59:
fa:f8:75:63:c5:5f:04:99:e5:91:5a:5e:72:8f:91:72:e3:ef:
bf:70:fd:b3:29:5f:23:17:5e:b9:8b:29:6f:3f:05:25:3f:9f:
12:9b:d5:5d:16:41:c1:91:ba:87:3f:c9:30:80:68:28:d8:0a:
79:d9:0b:5a:bb:60:c4:b8:2b:32:1c:37:d0:fb:e3:5f:a3:fe:
45:10:c0:f5:be:a9:a5:a9:d6:d4:b9:24:13:d2:2f:a0:e3:c0:
6e:da:99:f2:1c:77:f8:f7:e9:1a:21:52:cd:0b:18:66:a4:07:
7b:ea:05:53:b9:6f:33:42:a9:1d:a6:76:a9:fc:4f:f9:2f:04:
c1:ef:dc:b5:93:43:d7:ac:70:d1:99:1f:a7:c7:56:d4:7d:0e:
03:75:4d:cd:20:79:65:2f:de:dd:0e:7f:af:e6:98:b3:8f:8b:
75:7f:0d:1b:b7:b9:fe:01:6b:16:eb:4e:9c:ce:3c:81:2e:53:
42:3e:df:c6:71:6f:6f:65:59:8f:07:21:2d:7e:ff:8f:0a:f8:
90:bc:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:47:18 2025 by rpki-client