Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier: Eui8l2i9aYOTo2+qgyLg+GdOruQYdjLrFB1Sth+bvQc=
Subject key identifier: 57:4B:2B:0D:42:BD:FC:7D:71:53:D9:BA:10:29:94:24:7A:57:A3:9E
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 01964F6D935C36C2A68A4DEA4A2DE59288FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 19:01:43 +0000
Manifest this update: Sat 19 Apr 2025 19:01:43 +0000
Manifest next update: Sun 20 Apr 2025 19:01:43 +0000
Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: nciYZBl+tkgWPXe/A/gnf4wzT9hjB4fETcxXJPizrOs=)
2: rEnYgfgJaCjn_qIROc2RziotFd8.roa (hash: tyTMLNN1BSIUG9pwd6OlkaqCcb+yNG9RgWzpF+pWE60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:93:5c:36:c2:a6:8a:4d:ea:4a:2d:e5:92:88:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Apr 19 19:01:43 2025 GMT
Not After : Apr 20 19:01:43 2025 GMT
Subject: CN=574b2b0d42bdfc7d7153d9ba102994247a57a39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:50:bb:66:c3:95:7d:ff:a7:b1:f5:3f:2e:
2e:36:05:6e:35:9c:0d:9e:ad:f3:ad:e1:14:ea:b0:
9f:42:44:e8:cd:cd:22:79:83:9e:b5:f9:6f:45:13:
30:29:a1:f9:4e:e4:a5:ca:ad:80:01:5c:c1:6f:a0:
74:35:c8:3f:3b:b7:ed:c4:cd:49:10:bf:53:17:08:
d2:35:46:b4:35:d2:f9:34:87:fd:2b:c6:0f:bb:cf:
3d:9c:f5:4b:b6:0d:65:c6:52:2c:ec:be:16:af:db:
7a:aa:92:67:88:12:de:96:fd:98:36:db:ef:c0:93:
22:cf:1f:91:28:6d:eb:21:ae:fe:2c:a5:0b:06:94:
b4:b0:d6:7e:52:3b:20:a7:50:a3:4d:72:4d:81:74:
7b:62:14:bc:c3:59:ff:3b:ab:80:e7:24:0b:37:1b:
de:1f:a9:d1:19:2b:d9:04:31:46:79:ca:6a:9d:27:
30:35:91:e2:30:7e:0f:dc:98:b2:df:28:4e:c8:96:
a5:05:42:0b:8c:55:97:ea:1b:7b:3f:f3:18:de:4d:
14:81:a1:31:b8:93:a0:92:6f:c2:a6:1f:78:6b:2c:
69:04:5e:84:07:15:5e:6b:b3:36:28:92:3c:39:a6:
4a:e9:2f:26:be:2b:38:95:5e:1f:3b:3d:63:e3:8b:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4B:2B:0D:42:BD:FC:7D:71:53:D9:BA:10:29:94:24:7A:57:A3:9E
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4b:94:10:18:ea:65:b0:2b:7f:0c:9d:c3:6b:0e:a0:05:40:
70:24:10:b3:bc:07:d5:0d:60:63:94:ec:4f:55:f2:a6:1a:a2:
e8:cd:15:90:30:02:86:a3:3e:e7:bc:e8:2e:ec:eb:b9:13:ef:
c8:56:b1:ed:cf:58:9b:50:4b:c3:35:16:b9:bd:96:45:06:b1:
aa:79:03:0c:34:e0:7b:de:39:70:82:31:e8:1a:e7:26:32:07:
8d:4d:94:2d:86:81:6a:2a:43:6a:24:e5:63:c9:75:2f:d7:9b:
02:68:ee:7e:8b:29:0b:a3:e4:53:b9:ac:7e:1e:b7:6d:f7:1b:
c4:06:a1:0a:2d:1d:6f:52:cb:fe:34:86:ca:67:b1:1d:0b:ef:
7f:10:6e:8c:57:60:5f:13:02:33:7e:98:d9:34:44:58:5a:d1:
7a:29:d1:2c:53:75:9b:84:a0:2c:03:f8:e0:61:25:6a:6d:bf:
f1:56:d0:a0:bb:2b:bc:e2:0b:e1:23:aa:ed:8e:9a:a3:61:38:
5b:e5:ac:a7:5c:99:b9:a6:55:c9:7b:ba:a0:8b:87:91:eb:24:
b3:21:88:a0:d0:5d:98:1a:d4:4f:f9:8b:3b:ee:a0:4a:7e:f7:
39:ec:59:5b:ee:1f:99:99:8b:53:13:ca:ce:a1:83:a9:4f:36:
c5:dc:06:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:36:33 2025 by rpki-client