Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
File: FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft (raw, json)
Hash identifier: 0dmamZ/rm/uoFnv6HtW5HcECN6JnaWJyD5AO5S80d/c=
Subject key identifier: 18:0E:CA:53:07:3E:11:5D:9A:8D:A9:D8:B0:D7:CF:8C:8F:4C:E1:07
Authority key identifier: 14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
Certificate issuer: /CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Certificate serial: 019655A58865144D3BD1413FF71B04B47E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
Manifest number: 0333
Signing time: Mon 21 Apr 2025 00:00:33 +0000
Manifest this update: Mon 21 Apr 2025 00:00:33 +0000
Manifest next update: Tue 22 Apr 2025 00:00:33 +0000
Files and hashes: 1: 5wZ-uBzQ29mM_QfzDccMNqqdNYo.roa (hash: 2S+nSZvpWE37VjSR3BnNzUoM6C8tVAdRbE/bGKNExEc=)
2: FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl (hash: tPo4Lw+MxwOYR6nMk/UwJV5cGiiVi5Y7TTNvRXzq2mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:88:65:14:4d:3b:d1:41:3f:f7:1b:04:b4:7e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Validity
Not Before: Apr 21 00:00:33 2025 GMT
Not After : Apr 22 00:00:33 2025 GMT
Subject: CN=180eca53073e115d9a8da9d8b0d7cf8c8f4ce107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:dd:5b:1b:f1:a4:ce:81:d0:55:89:01:5e:
bf:65:3b:39:72:71:59:d4:6e:f9:95:33:8e:26:4b:
44:c6:a7:41:03:87:9c:30:25:b7:7d:c1:e4:0a:15:
6d:4d:25:26:4c:df:fd:70:56:b3:58:89:17:ad:87:
f8:d5:ef:c7:b3:62:54:50:80:81:5c:c6:33:b2:5d:
06:dc:4d:d9:99:17:60:05:87:b0:e4:1b:43:15:c6:
6f:67:c5:60:25:75:61:2e:dd:6c:17:a9:eb:38:f3:
2e:97:c8:d3:eb:e7:cb:14:d2:eb:72:f3:a8:a7:61:
72:3f:cd:f7:b9:2c:4d:dd:7a:a0:b4:3b:23:81:6c:
56:2d:c0:ad:8e:1e:05:97:95:9a:f0:8c:3c:54:c7:
d6:aa:da:7a:d0:5e:14:14:1b:4f:bc:5a:64:1a:ff:
d3:6e:76:cd:78:26:91:30:5a:8a:f9:33:43:fd:fd:
27:f4:be:4c:4d:bb:30:3e:c3:5c:99:a0:9e:3f:27:
44:6e:4f:d1:e3:b0:98:d9:37:aa:7e:65:9e:80:d2:
9d:5e:97:fe:e8:a7:33:6a:95:9f:e7:a2:3a:33:88:
0a:f0:c0:77:30:a1:03:f1:16:9f:dd:db:76:9c:93:
74:3d:ef:2f:73:a7:61:a5:db:ed:7c:a0:0b:1c:85:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0E:CA:53:07:3E:11:5D:9A:8D:A9:D8:B0:D7:CF:8C:8F:4C:E1:07
X509v3 Authority Key Identifier:
keyid:14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e9:82:c5:08:cc:dc:b2:06:d2:11:2a:c2:56:16:06:f7:30:
f4:1e:74:be:48:4d:52:8e:f4:fd:a7:50:8b:e1:88:2e:b5:4c:
17:72:ab:c1:a6:13:05:74:ba:0c:c0:d4:ed:83:33:40:1e:7d:
a3:58:29:0e:22:5e:a5:1b:78:e8:b2:f3:6b:fb:66:3f:c3:8c:
7b:2f:d0:d6:1c:c1:16:e1:d7:f7:91:82:65:7a:b0:0f:ef:51:
3a:95:5b:7a:5b:b4:0f:2a:af:9d:1c:cb:7d:7e:47:33:2f:5e:
90:5e:f4:bf:2e:0d:ed:16:4e:b2:ab:ae:bf:e3:d5:de:a2:bf:
e9:cd:85:97:e6:d1:57:b3:32:3b:31:c8:4c:ba:da:aa:b6:0e:
8c:ce:4a:fa:df:b9:35:06:d3:65:23:d1:b3:60:85:46:55:01:
20:35:f2:27:24:17:92:32:3a:dc:9b:dd:f5:cb:75:1c:dc:ad:
66:5f:60:32:12:73:ed:56:3a:24:d0:b0:ce:3d:0c:c9:f8:63:
a1:f9:eb:3f:ec:6a:11:54:84:dd:2a:b8:09:1e:4d:f2:0e:2a:
72:cb:27:6a:2c:ab:e6:91:14:28:a5:60:52:e7:10:9b:96:19:
28:82:6e:f6:7f:13:9a:a5:fb:00:98:02:2e:4c:56:89:4c:46:
e6:fc:08:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:23:31 2025 by rpki-client