Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: kzdcyn18SKiaS0ZZIzimr9FUmJ6++Lt+MQkSw90BkyI=
Subject key identifier: 62:E5:C1:C0:0E:D4:2B:79:46:72:8D:88:71:99:60:9F:79:0C:1A:38
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 01965A26F4D73A97E0C61A48A9795078BDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 0FC5
Signing time: Mon 21 Apr 2025 21:00:24 +0000
Manifest this update: Mon 21 Apr 2025 21:00:24 +0000
Manifest next update: Tue 22 Apr 2025 21:00:24 +0000
Files and hashes: 1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=)
2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: qoykY4jSAKSu6/I9q7aGEvk7RNt7MSZruMWjHdGtSoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:f4:d7:3a:97:e0:c6:1a:48:a9:79:50:78:bd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: Apr 21 21:00:24 2025 GMT
Not After : Apr 22 21:00:24 2025 GMT
Subject: CN=62e5c1c00ed42b7946728d887199609f790c1a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:3a:ac:89:74:41:91:95:a6:23:5e:f1:ef:
7e:60:ef:5b:a1:93:a6:db:23:f9:53:93:48:28:4c:
b9:d1:cc:16:a2:1c:37:9e:20:f9:74:fc:45:18:4a:
91:82:9f:63:9b:4a:be:a6:f7:17:db:db:40:86:77:
b3:bc:c1:5b:89:ac:d2:42:e8:f6:66:18:df:44:4d:
36:32:35:05:8c:95:ef:01:0d:63:81:71:70:02:c9:
bb:29:54:81:8e:8f:38:4d:dc:4a:99:f4:b8:ab:45:
dd:8d:1a:28:f4:22:ba:b5:09:00:f8:54:19:1d:d6:
b6:ee:84:5c:63:47:8c:21:bd:1a:70:63:c4:3a:73:
5c:18:aa:cc:5f:42:1e:49:f9:89:e8:8c:93:12:b5:
c8:84:dc:3a:02:c4:16:00:fa:54:9c:75:73:5f:9c:
36:d3:6d:02:77:0b:b6:d0:de:88:96:63:3b:87:9d:
40:c7:95:5b:29:f3:3c:7d:d7:f8:6b:6c:d3:7f:02:
fd:14:a7:23:f2:ec:90:a3:ba:33:c0:90:66:06:06:
3e:27:e9:f9:53:7d:df:9f:64:4e:7f:55:12:28:89:
41:6a:e3:13:5e:8e:df:c9:49:a7:71:72:73:7b:9b:
c9:a3:5d:ba:d1:47:a6:0b:48:ee:3e:b2:98:e8:e4:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E5:C1:C0:0E:D4:2B:79:46:72:8D:88:71:99:60:9F:79:0C:1A:38
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b1:bf:6b:b5:06:7c:8c:30:49:3f:83:07:31:40:49:7a:34:
c9:a5:60:c6:75:4e:b5:bf:ad:31:6f:0f:10:ab:b5:a0:08:95:
ee:64:90:19:e7:98:a0:58:4a:aa:fb:2d:fe:17:46:21:76:54:
2e:a3:53:25:c3:20:70:7b:f3:64:99:ee:6d:76:65:d8:96:25:
c0:81:38:99:51:d4:e1:0c:50:6f:8a:b2:1f:59:fb:1c:76:a7:
65:3b:37:10:31:76:a2:0f:0d:d8:86:a1:8d:ea:b7:00:dd:21:
a0:25:01:59:b9:7b:ec:57:d4:c4:58:79:98:bb:ba:73:7c:df:
37:58:72:a5:ae:7a:56:e1:42:a6:c1:5f:32:14:9e:c7:f0:e5:
da:9c:5d:ba:6b:a9:69:28:f6:95:8e:61:96:57:f9:47:62:3e:
38:4e:e7:34:18:fd:10:12:31:62:11:33:de:ca:f2:0c:52:ee:
9d:ce:ca:71:c6:ca:c5:dc:67:09:af:ef:fb:df:eb:9c:26:5c:
cd:0b:fc:27:80:43:19:58:ee:5d:b7:be:98:c3:c1:d8:fd:01:
89:c1:c0:72:07:58:6d:31:58:af:8a:5b:41:97:2d:64:fa:11:
7c:d9:d6:23:4e:1f:81:0e:b0:fa:17:c0:4b:bb:0f:4d:99:14:
93:c6:67:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:04:30 2025 by rpki-client