Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
File: FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft (raw, json)
Hash identifier: SvXs0X18TGQamskGi+0+tpchvwMeV4NO03+p7BXbAys=
Subject key identifier: C0:E4:25:E6:24:57:89:0E:04:48:7B:B8:33:A4:F3:4E:65:23:CC:90
Authority key identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
Certificate issuer: /CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Certificate serial: 01964C6BFAAED579253CF250BF9C05579009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
Manifest number: 02A8
Signing time: Sat 19 Apr 2025 05:01:06 +0000
Manifest this update: Sat 19 Apr 2025 05:01:06 +0000
Manifest next update: Sun 20 Apr 2025 05:01:06 +0000
Files and hashes: 1: FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl (hash: WHumCB8jRLqjPCRqWk95cRLtebYD+2EF4HOLZKL1RMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:fa:ae:d5:79:25:3c:f2:50:bf:9c:05:57:90:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Validity
Not Before: Apr 19 05:01:06 2025 GMT
Not After : Apr 20 05:01:06 2025 GMT
Subject: CN=c0e425e62457890e04487bb833a4f34e6523cc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:fa:8c:b7:bb:2a:27:e1:7f:2a:93:f3:f2:
e0:4b:3b:f4:f1:9a:5c:46:b9:f9:4e:27:b9:e3:ea:
e4:04:2c:3d:bc:53:4c:39:8d:0e:a4:ed:fa:2d:25:
bd:bf:c6:e9:1e:c3:cc:8e:d6:ad:7f:8f:d5:49:6a:
4c:05:77:94:15:8f:3a:f8:f2:4d:a7:8b:5b:df:ec:
69:a8:8b:af:4a:b4:bf:5a:58:43:e4:be:ab:95:97:
35:a1:31:ba:e3:c1:26:50:7d:00:48:b3:8b:99:d3:
49:41:b8:09:e9:4f:33:06:4a:aa:f6:68:d3:5c:52:
a6:c5:52:c0:ea:52:6b:7a:73:e2:01:12:6a:2e:84:
72:10:81:de:e2:57:99:ec:7f:d0:49:04:30:45:c6:
9f:2d:1f:37:f3:11:c3:e0:8b:50:9c:d2:42:e0:d7:
9d:11:f5:fc:c4:5b:1a:31:2b:22:6d:19:0e:bb:d4:
cd:7a:25:92:e0:2d:d4:9b:67:16:9d:ea:4d:8f:e9:
ee:ff:ee:a4:42:cb:a5:25:28:be:6b:dd:4c:1c:c6:
4d:4c:b6:13:e4:98:c4:ee:59:5b:43:39:8b:b4:9c:
2b:5a:c0:73:aa:ff:9c:bc:22:87:9a:6c:47:74:50:
78:ad:c7:d1:ba:21:b6:47:69:ec:d1:34:d4:34:9f:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E4:25:E6:24:57:89:0E:04:48:7B:B8:33:A4:F3:4E:65:23:CC:90
X509v3 Authority Key Identifier:
keyid:16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4a:f4:e2:df:66:7b:78:62:08:a2:ae:08:3a:5e:6c:5c:35:
19:dd:cb:9e:0a:35:ac:e7:d3:70:56:7d:e5:bd:54:16:3d:c0:
23:81:63:ca:62:08:0f:99:ba:69:1a:81:12:14:41:c9:9b:ef:
8f:a9:20:5a:e8:58:74:96:20:d2:0b:c5:e2:ee:1e:3e:34:a0:
06:62:74:21:c9:1d:a5:bc:57:22:10:2e:7f:4f:33:20:ba:43:
b7:ea:41:30:19:38:61:a2:27:8d:b8:b5:ba:05:82:39:f0:93:
10:06:89:ad:30:5e:57:bb:24:c3:13:d2:3f:58:b5:0e:1d:b6:
b7:bd:12:a9:54:22:29:8b:ef:18:8d:a6:12:26:0e:f0:6f:d5:
8e:2b:20:83:bf:2b:7b:a8:f1:85:39:c4:a2:ad:7e:50:05:30:
7c:71:be:fd:d2:f9:f1:07:f3:fe:ea:fa:aa:0e:f0:4b:cd:66:
2d:47:ed:6d:9a:6d:7e:cd:24:d4:b2:b3:46:a8:07:50:45:ed:
d7:77:52:aa:95:ca:8a:39:30:5c:c6:c0:aa:2c:86:4a:76:4a:
c4:7a:9b:3b:0a:ef:97:b4:8b:35:ed:b2:89:13:b4:89:2d:e5:
6b:2d:0b:57:47:26:5e:94:29:9a:1c:01:45:bb:8f:f2:34:be:
dc:37:3c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:23:03 2025 by rpki-client