Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: KRItbJsP0dP1HUFlPaw9pZA/q43mheJab5zLGk/1Pf8=
Subject key identifier: 3C:BE:B1:C1:B7:88:BC:EC:AB:45:EA:FD:6F:2D:ED:11:84:51:73:12
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 019654C9F35557D3A681AAD183720CA0AC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 061D
Signing time: Sun 20 Apr 2025 20:00:43 +0000
Manifest this update: Sun 20 Apr 2025 20:00:43 +0000
Manifest next update: Mon 21 Apr 2025 20:00:43 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: LG+pv9ZlgZEMMMy+ja6vOFALcP4c9/OOsRvOlaPoYYQ=)
2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:f3:55:57:d3:a6:81:aa:d1:83:72:0c:a0:ac:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Apr 20 20:00:43 2025 GMT
Not After : Apr 21 20:00:43 2025 GMT
Subject: CN=3cbeb1c1b788bcecab45eafd6f2ded1184517312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:90:93:3d:86:7a:62:b5:86:79:73:c5:e5:
89:e6:da:53:89:2d:e9:f1:50:14:da:81:d2:82:7b:
16:2c:6c:64:b6:cb:07:5d:4f:26:e4:82:97:76:e9:
f3:5b:cc:91:9b:36:4f:8f:88:17:00:d0:df:d6:63:
2e:16:b5:b7:d0:ef:fa:c0:dd:0f:73:a9:05:d4:55:
2d:af:6c:3b:be:b4:b1:8a:6e:91:f1:40:99:f7:10:
49:98:16:cc:7c:ef:bd:b4:f6:be:a0:21:be:bf:f9:
7d:c4:82:d6:78:a6:ea:26:20:88:a5:62:5a:58:fe:
0a:7e:f7:e8:8a:4e:2d:b4:68:0c:29:37:d7:a8:48:
56:52:13:17:88:d7:06:fa:22:ae:37:46:10:a7:24:
6e:d7:b7:16:8b:63:c6:fd:6e:6e:cf:ce:a1:b4:bb:
6a:53:d4:9f:d3:23:cd:f3:38:a9:a1:7f:50:eb:68:
97:db:b7:a0:09:76:cb:6f:0e:9c:c4:b3:a7:55:b5:
93:1c:f4:7f:3e:50:a7:a2:fc:bb:f9:56:48:58:4f:
da:0e:a8:25:25:5d:84:57:fb:4c:fb:88:32:8b:15:
cf:0e:4e:4b:04:ab:28:38:eb:ef:5a:c6:f0:0d:77:
9f:17:04:8e:1a:59:fa:5e:09:d9:f9:2b:54:a6:81:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BE:B1:C1:B7:88:BC:EC:AB:45:EA:FD:6F:2D:ED:11:84:51:73:12
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b4:66:f8:e5:a9:63:3b:f6:2f:56:e3:30:fb:b3:72:b1:03:
90:22:38:b8:b1:bb:d0:79:78:30:fb:75:61:97:b7:e5:f4:b3:
35:a7:07:51:2e:d0:08:f7:d9:2a:a3:c0:83:ab:78:bb:bf:01:
d1:a5:26:c6:23:58:cf:fe:85:f8:82:11:05:a7:92:c5:c6:13:
8e:d5:03:0a:33:01:e4:eb:eb:21:49:15:69:27:8b:50:b4:c4:
a2:dc:5c:9b:10:e9:c2:cf:9a:e9:d4:57:65:21:a6:23:7d:09:
a3:6e:54:a8:72:66:ae:21:e6:e1:3f:cf:33:cc:f4:b0:00:a7:
1f:17:c5:59:f7:20:09:57:a2:f6:21:20:4f:ec:76:3f:29:fc:
16:07:8a:b3:3e:3b:14:48:3e:51:9c:3a:7e:d2:f4:b1:e2:b8:
50:1c:17:93:31:9e:1a:43:fc:98:40:e4:0a:d6:26:b3:6a:e5:
91:f9:ba:b6:27:3b:1f:5b:34:db:b2:9b:a2:1d:80:e9:5a:ba:
b0:4e:52:14:a7:1e:98:01:c2:2c:21:27:1f:53:0b:99:c3:71:
3d:ea:cf:97:6f:16:65:92:64:8b:fb:a1:be:18:b6:88:d2:84:
c9:13:56:ae:a5:11:98:1e:38:73:2f:5d:a6:b1:58:9d:4a:40:
c2:83:77:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:28:33 2025 by rpki-client