Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
File: fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft (raw, json)
Hash identifier: qoT2FhL0xRaQx7qZo8RmhVBurhYgxQIiIxW3/m0NtIs=
Subject key identifier: F9:A3:E8:E1:A1:45:42:32:29:60:AE:C6:9A:C8:CD:63:40:0C:D4:01
Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
Certificate issuer: /CN=7ddf809131ee56531939d05f607271bdf01d19b5
Certificate serial: 0196549348FEEE2329B7DD376C7EC5A541D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 19:01:00 +0000
Manifest this update: Sun 20 Apr 2025 19:01:00 +0000
Manifest next update: Mon 21 Apr 2025 19:01:00 +0000
Files and hashes: 1: 71iuHhnjyMau6dRuVZxIZ-aHD6o.roa (hash: 6pikJCy9Nh7pkhX7m11NEA9DArPLhaL64o6XpR/q7jo=)
2: fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl (hash: Oek3NwTtq58MWsSZbb94d7VEnrgKQ/a941G2Iu3rCW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:48:fe:ee:23:29:b7:dd:37:6c:7e:c5:a5:41:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5
Validity
Not Before: Apr 20 19:01:00 2025 GMT
Not After : Apr 21 19:01:00 2025 GMT
Subject: CN=f9a3e8e1a14542322960aec69ac8cd63400cd401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:d7:44:d0:b4:a6:8c:a5:6e:8f:c0:c3:2c:
62:48:a4:29:a5:87:dc:25:24:fd:3e:98:c6:29:c2:
69:4d:e8:23:39:8b:b7:4f:d7:3b:4d:9b:46:a9:96:
a7:30:f3:7a:43:b7:4b:82:b7:80:63:f8:d4:a3:92:
ad:32:f2:7f:a5:be:23:84:52:86:08:be:c9:d7:ee:
28:96:3b:cd:db:6d:67:8c:21:c3:f2:4b:0f:7e:36:
53:66:a6:ec:22:19:f3:f6:65:14:6f:5a:ab:66:71:
61:fc:50:4a:ef:b5:17:e6:0b:67:bf:cc:ef:d2:c4:
3a:9d:e4:0b:44:4a:d6:da:fe:22:8c:50:18:86:be:
c6:cc:ce:7a:85:e2:41:71:1a:f4:cf:9b:15:f4:fa:
78:02:32:69:cc:8e:42:c2:a7:ad:ad:86:3e:90:43:
0e:ae:02:0d:cd:07:19:da:eb:a1:f2:0e:a4:17:59:
6a:51:d3:93:1c:be:77:7a:53:b2:87:eb:68:f0:84:
92:7e:a9:f4:26:c5:37:94:71:2e:ce:39:87:39:71:
30:e2:63:2a:9f:49:a7:cb:a5:97:51:4c:66:d8:1f:
9c:b4:00:33:6b:fe:b5:53:c1:04:b5:58:7f:1b:53:
00:76:83:56:b0:94:92:ca:25:ad:af:2c:c7:f1:63:
a5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A3:E8:E1:A1:45:42:32:29:60:AE:C6:9A:C8:CD:63:40:0C:D4:01
X509v3 Authority Key Identifier:
keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:8b:66:0d:78:76:d1:b4:27:a4:ac:c1:b7:f9:26:7a:38:1b:
03:9d:54:59:89:43:a2:1e:d8:9f:09:12:ff:9e:2c:7e:79:29:
3e:e7:bc:c5:a9:87:37:47:e0:4c:ad:7f:10:2e:d8:a7:85:85:
30:96:73:d7:af:de:1c:fa:c7:1b:5e:08:81:98:05:cf:2f:d0:
48:a2:84:e2:f6:0a:bb:0a:a3:5b:2c:29:b2:79:71:0d:4d:8a:
65:22:2e:8e:1c:5e:c9:63:2c:d2:25:7c:de:ec:6c:9f:bd:6b:
d7:86:f6:28:ce:de:a1:44:0d:de:b7:f1:4d:b1:99:da:87:84:
1f:f8:2a:94:21:30:12:bc:72:31:22:ba:2b:98:7f:a0:ab:95:
0d:83:1a:32:c0:07:67:10:90:54:7e:04:f7:8e:3f:99:84:67:
f6:94:40:20:7b:fd:94:cd:9a:ee:f1:8c:8d:01:db:e9:62:b1:
61:31:4c:d5:c1:df:2f:11:02:26:12:67:28:df:44:8c:dc:a2:
b6:ec:2a:3e:13:31:1e:08:ce:37:97:e5:3a:e9:cc:f2:00:e9:
b8:92:06:3d:29:71:86:ee:5c:c2:70:93:19:f7:cb:05:11:6e:
12:c5:a7:59:51:2c:7a:0e:3e:c1:66:4a:53:78:1d:f7:73:a5:
f7:8e:33:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:08 2025 by rpki-client