Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
File: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json)
Hash identifier: 7YQsenSwpq2DVRaFH2TaDKomaAzICVADQ/HVSRPt1O4=
Subject key identifier: CA:4F:C2:F4:4E:B5:F0:CB:2B:CF:8B:D0:A6:02:53:9B:8D:61:2B:CD
Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Certificate issuer: /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Certificate serial: 019655DC950B5AA7B831A9B64C0BEC93DD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
Manifest number: 0359
Signing time: Mon 21 Apr 2025 01:00:41 +0000
Manifest this update: Mon 21 Apr 2025 01:00:41 +0000
Manifest next update: Tue 22 Apr 2025 01:00:41 +0000
Files and hashes: 1: 1-irVsmvhgC9shKeonnyDEPMDuh0.roa (hash: 1FiwJeXR31pl2bxgdy1T8oVV/E4LsfaNte1AvGr9OZg=)
2: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: Te/CjZGKVBaIv3XoadPda+M1vf5hozjQHMOmlBphabU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:95:0b:5a:a7:b8:31:a9:b6:4c:0b:ec:93:dd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Validity
Not Before: Apr 21 01:00:41 2025 GMT
Not After : Apr 22 01:00:41 2025 GMT
Subject: CN=ca4fc2f44eb5f0cb2bcf8bd0a602539b8d612bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:78:cb:4d:ee:27:7d:6f:8e:fb:cd:0e:29:
72:bf:8a:5f:7b:40:ea:e0:c8:50:4e:dc:d4:de:c5:
f2:96:e3:bb:7d:67:cf:9b:88:fc:86:1a:21:e6:6b:
8d:41:80:f5:10:09:93:15:01:47:79:d2:3d:ed:cd:
88:24:66:e7:84:99:a1:26:48:41:a3:ba:d1:ae:ab:
67:6a:ae:81:87:e0:9b:97:1d:94:5e:84:dc:82:7e:
0a:df:33:9a:3c:b4:5f:a7:c7:26:27:c2:7a:87:49:
bc:49:1c:23:71:e7:2e:c1:2d:db:e7:85:08:0c:42:
4b:30:22:04:b4:36:3d:20:60:63:56:dd:ae:67:d7:
21:55:6a:e5:df:ba:ea:fe:ed:c5:c7:5b:b2:51:ed:
f8:f7:48:9f:1c:a2:78:fe:a2:04:77:7f:52:df:64:
e3:e6:7a:8c:15:ff:52:17:2c:b5:8f:40:e3:bf:fd:
59:d6:b7:11:66:53:ef:2b:69:d3:fd:27:9c:8f:8f:
cf:28:d8:ac:9b:ed:c0:0c:61:5a:91:e5:84:61:8f:
a7:cf:0f:3e:c4:73:a9:ed:91:ab:b4:b4:17:fc:48:
90:83:ad:c3:19:0d:c5:e6:ae:15:b3:57:bc:16:04:
83:8c:0d:77:49:e3:0a:23:b3:94:af:df:ff:da:ab:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:C2:F4:4E:B5:F0:CB:2B:CF:8B:D0:A6:02:53:9B:8D:61:2B:CD
X509v3 Authority Key Identifier:
keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:59:b8:f7:1a:e8:14:78:ae:be:53:e2:c7:52:3d:71:00:5e:
fd:ed:0e:3b:fe:08:4a:51:f4:c5:99:3e:3e:4d:66:b8:0f:b3:
36:a1:6b:0b:1f:4c:db:a5:49:e8:f1:99:98:5d:d3:b7:43:c9:
6f:1c:52:2b:15:4e:06:6d:3f:65:a4:56:1b:d5:11:e4:f2:08:
7d:50:f7:0e:2e:eb:39:fa:dd:a6:83:f2:52:dc:d0:62:86:62:
1c:a5:ea:a4:a0:93:86:64:20:48:72:45:2f:a5:36:30:e0:50:
21:1d:59:cf:f9:50:e0:8e:7b:b0:ad:10:2b:48:36:97:b3:15:
b1:e1:93:f9:63:1e:1b:33:7b:dc:46:f2:cd:72:d7:cd:69:db:
95:65:e3:67:36:39:8f:b6:8e:90:47:5b:99:83:95:65:09:c7:
fb:84:33:5a:0a:70:b4:dd:27:9d:2a:fd:f1:1d:b4:b8:16:43:
be:d4:81:12:f6:24:71:b5:dc:52:3b:d5:95:c8:93:8e:18:d4:
c8:ae:4f:96:c4:57:24:06:89:97:a8:66:66:2a:c4:ee:cf:96:
87:f2:2a:4a:9f:75:a5:fc:cc:ee:25:74:bc:34:4b:e8:55:4b:
8e:5e:4c:d6:79:5e:eb:80:52:ad:06:2c:3c:c2:0e:e5:da:5c:
e0:5c:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:52:39 2025 by rpki-client