Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f718b2-1e5a-4cd7-b692-c5733519a729/1/FKAFxxNsUR5X6l5lkZoz1MAIoQc.mft
File: FKAFxxNsUR5X6l5lkZoz1MAIoQc.mft (raw, json)
Hash identifier: On25n4xsh5gwmGSCMSQhieDPc/RVhbCre/+FLvmdcoE=
Subject key identifier: F0:E2:F7:21:39:18:85:76:77:BC:B3:CA:57:43:3C:61:91:E3:69:39
Authority key identifier: 14:A0:05:C7:13:6C:51:1E:57:EA:5E:65:91:9A:33:D4:C0:08:A1:07
Certificate issuer: /CN=14a005c7136c511e57ea5e65919a33d4c008a107
Certificate serial: 01965982A476F3A837830AB4653DDE27EAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKAFxxNsUR5X6l5lkZoz1MAIoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f718b2-1e5a-4cd7-b692-c5733519a729/1/FKAFxxNsUR5X6l5lkZoz1MAIoQc.mft
Manifest number: A7
Signing time: Mon 21 Apr 2025 18:00:55 +0000
Manifest this update: Mon 21 Apr 2025 18:00:55 +0000
Manifest next update: Tue 22 Apr 2025 18:00:55 +0000
Files and hashes: 1: FKAFxxNsUR5X6l5lkZoz1MAIoQc.crl (hash: tAVfxJ8kTa2hLDazo2AqFxQTqsv2dAn9hKqbPe+qPTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f718b2-1e5a-4cd7-b692-c5733519a729/1/FKAFxxNsUR5X6l5lkZoz1MAIoQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f718b2-1e5a-4cd7-b692-c5733519a729/1/FKAFxxNsUR5X6l5lkZoz1MAIoQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKAFxxNsUR5X6l5lkZoz1MAIoQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:a4:76:f3:a8:37:83:0a:b4:65:3d:de:27:ea:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a005c7136c511e57ea5e65919a33d4c008a107
Validity
Not Before: Apr 21 18:00:55 2025 GMT
Not After : Apr 22 18:00:55 2025 GMT
Subject: CN=f0e2f7213918857677bcb3ca57433c6191e36939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:a2:b8:a3:01:57:1b:3a:9a:18:65:93:f1:
4c:a6:29:a3:89:76:21:bc:fd:72:04:10:eb:3f:e1:
14:ed:42:b6:64:12:53:de:b8:4a:07:31:aa:d5:19:
8d:81:53:04:4c:f0:76:a9:d9:79:64:78:d4:fd:6a:
f1:d2:1a:2d:1e:55:28:96:77:44:c3:7d:30:52:4f:
a9:67:13:fc:9c:ac:f2:f4:ff:09:6e:69:62:ab:61:
16:68:1f:6b:47:af:45:04:f3:71:e6:1d:84:85:ea:
e4:19:e8:84:b9:de:8a:84:a7:5b:46:e2:03:70:8a:
81:1e:2c:71:90:f2:2c:8a:93:42:b8:e8:f2:f6:fa:
9f:b3:44:3a:c9:8e:57:b3:bf:65:37:3b:8e:7d:e4:
4b:68:6a:91:d7:8f:45:0c:9e:8c:70:9e:f8:e4:11:
9c:1c:39:b9:3b:b9:95:e9:b2:6d:cd:19:fd:1c:49:
be:70:04:08:13:90:b3:8a:ba:10:77:b2:45:e1:bf:
ad:9f:fa:9b:4d:b7:37:4c:c3:32:b3:43:8a:66:2d:
06:bd:61:bb:16:ad:0c:70:81:93:21:a0:50:f8:cf:
b4:60:a6:03:9f:ef:2c:ed:f9:23:3c:8a:41:c1:6e:
06:ce:b1:b3:e5:de:d6:79:3a:98:1d:8f:b9:fc:e7:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E2:F7:21:39:18:85:76:77:BC:B3:CA:57:43:3C:61:91:E3:69:39
X509v3 Authority Key Identifier:
keyid:14:A0:05:C7:13:6C:51:1E:57:EA:5E:65:91:9A:33:D4:C0:08:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKAFxxNsUR5X6l5lkZoz1MAIoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f718b2-1e5a-4cd7-b692-c5733519a729/1/FKAFxxNsUR5X6l5lkZoz1MAIoQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f718b2-1e5a-4cd7-b692-c5733519a729/1/FKAFxxNsUR5X6l5lkZoz1MAIoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:78:ad:9e:ba:d2:3e:7e:5e:03:57:4c:8e:68:6c:bb:cd:cb:
6e:9e:3c:2e:a3:2d:20:98:8d:d2:f4:50:b0:f7:7d:4f:f0:37:
9a:e9:b2:d8:be:2c:de:cb:27:83:76:db:29:61:c5:15:32:40:
37:f7:9d:07:d2:a1:19:eb:7b:fb:36:c0:24:ae:73:5b:58:9d:
6b:bc:4f:e5:b2:3b:c8:2e:e5:a6:41:b2:0c:77:3e:fe:c0:aa:
b4:f1:7c:54:24:87:63:86:72:ef:7e:f3:2d:80:13:34:e0:7c:
e5:9d:3a:ee:10:9c:d2:79:14:63:36:5b:cf:0a:18:bb:72:59:
83:f8:68:8f:9e:de:6e:56:13:27:c4:b3:6e:b3:36:90:ae:59:
b9:c2:06:24:25:fc:0b:60:78:b3:01:26:2b:54:a6:c8:75:33:
f5:13:e6:0c:11:c5:2b:8e:8d:da:2e:e7:e0:02:d8:73:79:9d:
5c:4e:09:92:e8:64:b3:32:b1:4f:55:c5:38:84:7c:fe:84:d6:
bb:df:58:be:dd:10:29:a1:d4:2a:8c:82:0a:3e:33:14:72:53:
92:5d:ff:21:8c:0b:e3:2d:20:36:4d:86:c1:f3:94:e5:99:1c:
f9:b0:3b:33:67:e3:cd:6b:9e:f3:e3:e0:f2:3f:47:e8:4a:58:
bd:f0:70:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:52 2025 by rpki-client