Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
File: FvFFcn00rmYHphUwEoPu69XWKRw.mft (raw, json)
Hash identifier: bJvjRCPJ6rAmqqdgzUC5yBDNqVWFSwcSX7WXkfC/q08=
Subject key identifier: 4A:E1:69:83:6B:BD:A2:58:D9:3B:9C:D7:7E:1D:32:F7:FD:14:F6:11
Authority key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
Certificate issuer: /CN=16f145727d34ae6607a615301283eeebd5d6291c
Certificate serial: 019643D63B12DF0A8A065D5500D09FD7A893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
Manifest number: 1225
Signing time: Thu 17 Apr 2025 13:00:35 +0000
Manifest this update: Thu 17 Apr 2025 13:00:35 +0000
Manifest next update: Fri 18 Apr 2025 13:00:35 +0000
Files and hashes: 1: B7T3sZebBoQYg5x0RYsPBj23iEo.roa (hash: O9yZ4KZ+ahHkW7NK8lCiaskHOdR7GD8prEJOvXc4vRI=)
2: FvFFcn00rmYHphUwEoPu69XWKRw.crl (hash: nRy7AdCoZNUSe1nm4FIP8WUb9Iq4kUbkMEuIj053KXw=)
3: swm48vI840zUfl2DaxMs8hbeLoo.roa (hash: JjFou/0kBbJgWy4DCqB6G2CRT7ZKW8RECYymrqJxYxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:3b:12:df:0a:8a:06:5d:55:00:d0:9f:d7:a8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f145727d34ae6607a615301283eeebd5d6291c
Validity
Not Before: Apr 17 13:00:35 2025 GMT
Not After : Apr 18 13:00:35 2025 GMT
Subject: CN=4ae169836bbda258d93b9cd77e1d32f7fd14f611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:32:aa:8b:dd:e0:e4:fa:71:ee:3b:05:bd:
50:5f:70:34:f0:e5:63:37:9e:13:7a:e9:89:d5:29:
e7:5e:a7:ed:84:4f:3a:38:0e:6b:28:4c:5e:56:08:
48:46:61:01:e4:fb:2a:df:bc:b9:47:51:c6:9c:06:
17:d9:9b:1b:71:75:99:18:da:58:c5:cf:73:12:79:
ca:ee:b4:29:af:50:39:e6:7e:44:00:46:73:f8:22:
b0:88:76:62:04:26:68:ec:91:0e:70:fa:d2:50:37:
5f:1e:4c:c2:7a:6f:c8:26:02:cd:14:9e:ea:c0:af:
13:c1:3a:d0:30:be:f6:fc:02:75:28:5e:91:36:a0:
78:28:8b:cf:01:12:de:5b:ce:36:50:5d:b5:21:64:
a1:5d:aa:a6:78:a4:dc:bd:17:41:6a:d9:08:09:3b:
bc:88:fb:9f:b2:2e:92:2e:64:31:fa:e9:f4:04:18:
b0:e0:a8:c7:c3:a1:a8:77:e9:f4:72:16:76:c0:7b:
cb:ad:89:f1:86:3d:11:40:e5:c4:d1:99:da:51:85:
28:4e:86:38:dc:2f:1e:ba:ef:72:6b:38:c2:00:2f:
06:89:23:f5:1d:e6:d4:29:d6:b7:03:6e:0d:77:8a:
41:63:60:fb:53:9e:aa:c7:da:de:d2:53:7d:08:ca:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E1:69:83:6B:BD:A2:58:D9:3B:9C:D7:7E:1D:32:F7:FD:14:F6:11
X509v3 Authority Key Identifier:
keyid:16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7c:e8:ef:d1:b3:ba:cd:f0:fa:81:2f:50:3c:e7:24:05:b9:
62:3a:af:9e:26:ba:fc:a2:46:27:88:02:f2:15:31:ea:d2:ad:
af:08:e7:35:c3:93:89:0f:a8:2c:d7:82:7b:53:02:f8:1a:a4:
28:ac:4f:b2:c2:6f:ae:e8:b2:44:77:7f:b4:51:6d:19:ca:4c:
ad:d9:72:2b:e6:6d:bf:5f:5c:e0:82:1d:d0:2d:ef:d6:f2:84:
8d:e7:48:f1:f1:f5:e5:70:47:93:9e:bf:03:b4:92:9c:7b:29:
a3:b5:b7:5d:17:e9:ee:e3:bc:f2:d2:53:19:b1:ab:a5:f3:2b:
6e:03:a7:a3:4a:7a:4b:88:4e:34:1d:70:59:00:57:f1:f2:4b:
56:75:9b:0f:27:66:67:78:ac:bd:e8:37:14:cd:75:90:17:0c:
54:df:76:c1:6b:72:b2:ea:b3:01:88:1a:8d:be:d0:1c:0f:b5:
f4:83:ee:b5:67:4c:f3:b1:e7:6a:50:2b:a0:90:88:2b:6d:72:
19:64:d0:e0:00:67:a0:4e:3c:55:d3:78:ed:47:cd:71:a2:0b:
b5:3a:8f:d3:ee:fd:b6:44:ea:51:b8:80:ce:d1:81:0a:e7:73:
9b:2c:14:eb:c1:3e:b6:55:79:74:ae:c0:60:29:42:82:be:18:
35:52:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:51:44 2025 by rpki-client