Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: 57quNXXDQ9gk0ka2yHkhn/ZmgJl176i6dcS5j9732Gs=
Subject key identifier: 9C:1E:61:0F:95:F1:2B:4D:ED:52:1C:2B:FE:63:92:BE:52:48:21:BC
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 0196440D4FA7D2EE1BF7B5088F6343212AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 1434
Signing time: Thu 17 Apr 2025 14:00:45 +0000
Manifest this update: Thu 17 Apr 2025 14:00:45 +0000
Manifest next update: Fri 18 Apr 2025 14:00:45 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: xbwqOPoFocaJqfWICQxeF86p7h6PE5ULuy1cojsDfyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:4f:a7:d2:ee:1b:f7:b5:08:8f:63:43:21:2a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Apr 17 14:00:45 2025 GMT
Not After : Apr 18 14:00:45 2025 GMT
Subject: CN=9c1e610f95f12b4ded521c2bfe6392be524821bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:dc:8f:f4:d4:ba:c9:a4:4c:89:8a:97:17:
36:f7:c2:3d:67:1f:61:08:df:90:45:e1:d1:7c:7e:
c9:61:1e:af:01:c0:af:ea:db:94:dd:3f:50:48:07:
4e:b4:78:87:55:43:04:9c:0a:08:92:48:88:fd:cf:
b9:77:6c:47:fe:06:ab:07:a4:1b:c6:62:52:c4:2d:
19:f0:35:e0:8d:a6:75:4e:42:7b:09:9a:8e:eb:49:
ba:30:39:8f:a8:98:d2:f2:ee:79:4b:18:57:de:e3:
47:69:02:17:bb:e2:c8:c3:9a:4b:52:de:d5:ec:5b:
85:ae:78:71:ec:b4:82:8f:5d:26:67:e2:e3:2c:42:
d4:43:d7:ad:06:4f:f3:75:5b:1f:c9:be:16:1f:d0:
a4:6a:b1:ca:f2:b4:70:11:de:36:08:31:63:c6:db:
9c:fc:c2:a6:59:4a:7a:46:91:44:d0:f5:9f:d6:f8:
5c:d3:41:99:23:25:0a:95:aa:53:6a:0b:03:63:1d:
78:10:98:2f:20:3c:13:6e:62:04:f8:f8:d6:99:eb:
51:e6:f8:43:d0:28:1b:c9:70:82:60:b5:72:ce:67:
7d:1d:8c:e4:a8:20:10:b0:91:78:38:01:83:55:23:
cf:c9:51:3f:9a:96:86:4b:56:6d:f3:c3:4e:fe:24:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1E:61:0F:95:F1:2B:4D:ED:52:1C:2B:FE:63:92:BE:52:48:21:BC
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a3:f6:20:e4:c0:fb:74:fc:b4:d6:90:16:71:e6:74:96:b0:
cb:59:08:8a:cf:a4:c4:ef:d8:27:0b:23:27:d1:ec:7e:28:c0:
a1:2e:0b:4a:9d:c1:e3:54:4c:40:f7:11:d8:67:b2:c9:14:61:
c1:c9:2a:dd:88:5c:cf:04:b4:62:4e:0c:88:35:b2:ba:a1:4c:
bb:6b:48:49:bd:0a:92:d4:63:26:33:e7:d5:79:5c:e5:b0:9b:
e8:14:a2:b6:ce:e1:2d:d2:54:b8:83:54:db:82:1f:d6:16:b9:
03:76:b5:3d:96:6f:bf:4b:ee:a9:23:be:b7:78:09:5c:59:d4:
4a:3d:f8:6f:5e:c7:9e:91:ed:d8:17:3c:18:9b:f4:06:11:09:
47:0a:fc:50:1d:6b:94:e6:df:02:4c:9b:e4:e3:9f:b0:27:12:
24:db:94:64:93:27:03:4b:c1:5e:ef:bd:bf:e3:b8:fa:49:01:
84:2d:0d:de:4e:2c:ba:db:27:78:75:08:a5:6f:70:20:74:a4:
30:aa:df:17:b0:4f:94:f7:47:dc:8f:3c:2f:25:53:2a:f1:94:
ca:77:d1:d4:27:7e:65:cd:a8:e8:92:e8:ac:8d:01:a4:d4:b6:
df:d1:1a:d6:b3:b5:cb:72:a6:d5:8a:34:d6:ba:f4:5f:f2:a3:
09:3b:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:33 2025 by rpki-client