Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: WY4LI+oEQOfnB/JkaZd6JalxnKmtarIObf6avbP2De0=
Subject key identifier: D7:EC:90:03:6E:F2:94:39:60:BD:48:90:8F:B8:4F:8C:52:FA:57:CD
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 0195903D83A8C7C4EA42E7882EA3091FE276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0BFB
Signing time: Thu 13 Mar 2025 16:01:45 +0000
Manifest this update: Thu 13 Mar 2025 16:01:45 +0000
Manifest next update: Fri 14 Mar 2025 16:01:45 +0000
Files and hashes: 1: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: 0/tz2gxDrdXiuffcOzU2NpF8zVq0/4Q8KdUVtX5loxk=)
2: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (hash: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=)
3: ouo267dSlLznMI9vKQqz-AZYNWg.roa (hash: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:83:a8:c7:c4:ea:42:e7:88:2e:a3:09:1f:e2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Mar 13 16:01:45 2025 GMT
Not After : Mar 14 16:01:45 2025 GMT
Subject: CN=d7ec90036ef2943960bd48908fb84f8c52fa57cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:c4:aa:42:64:3d:19:48:9d:04:17:4d:a7:
17:d4:c7:d7:4a:fc:bc:2f:8c:73:b0:37:d2:17:d1:
ab:cd:1b:a7:23:64:aa:59:8c:8e:30:13:9b:a6:92:
04:0e:5e:df:86:d4:9e:b1:0d:81:01:d3:d4:63:7b:
9f:c9:3c:f8:3c:85:4b:af:21:2f:2c:29:a0:1a:e0:
e0:dd:bb:08:e5:fe:64:37:db:7c:d7:62:62:33:e6:
a3:34:f3:27:5b:22:63:36:3f:7c:81:7d:c0:01:07:
2e:e6:ce:8e:42:db:86:0b:01:38:cd:ba:35:0f:37:
57:21:c2:1f:10:84:73:11:a2:47:3e:bb:ee:6f:27:
1d:f4:e5:c8:d9:15:f2:b3:51:f9:67:02:ec:79:3a:
9a:bb:78:c2:8a:f0:d9:ba:84:ca:70:3b:f2:45:b1:
0b:4d:ff:a7:be:62:ce:f5:1b:7c:55:8d:c0:b1:b7:
7b:60:96:d2:f2:bb:b4:47:b8:f4:24:d2:89:6d:c7:
f4:df:24:53:24:ef:65:2c:e0:09:8a:2b:6f:8c:6a:
87:59:99:68:0e:da:37:0e:83:2a:33:f8:9c:00:c4:
8e:4c:70:d7:b3:2e:b3:44:d9:0a:77:6a:11:a6:43:
f2:bb:bd:2d:6c:d1:19:6f:d8:13:94:63:c1:8f:a5:
92:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:90:03:6E:F2:94:39:60:BD:48:90:8F:B8:4F:8C:52:FA:57:CD
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:45:4a:66:01:34:57:99:c1:d7:4e:6a:b8:a5:98:5d:69:03:
79:b4:02:e7:01:63:ba:05:23:7e:2f:17:b3:78:d1:2e:9b:e1:
1a:26:07:43:cf:63:4d:99:22:73:62:ef:b5:6e:60:58:b4:91:
7a:b1:92:db:b9:1f:23:2a:54:83:da:5b:f0:cb:12:df:27:22:
6e:26:03:d7:f9:26:13:27:bc:4c:a6:44:30:3f:93:00:cf:30:
4b:32:8d:34:b6:29:39:89:0b:40:5a:39:8e:fb:db:f4:de:9b:
19:11:4d:5e:b3:fb:c6:5e:17:5b:9e:ee:7a:d3:0e:93:9c:41:
34:8f:a1:a1:32:fd:e2:b8:6a:08:1b:a4:c7:6a:d3:94:17:a5:
fa:75:27:94:d8:48:5c:3b:ac:93:3f:24:30:46:bb:4f:49:ec:
d6:c6:cb:dc:a0:77:79:c6:3b:52:ac:d3:97:c1:d8:9c:38:e3:
6e:51:ac:c5:8a:da:69:4d:65:35:5d:25:a6:4e:07:39:c6:6a:
df:1e:25:4a:f3:7d:88:2c:25:b1:55:32:69:d3:5c:87:76:6c:
cc:0b:95:c1:24:03:86:b2:46:9a:fe:45:63:7d:69:40:ba:4e:
d0:6c:23:fe:4f:16:14:15:a6:f0:ee:31:4b:b8:78:4a:9f:81:
10:68:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:50:08 2025 by rpki-client