Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: SHZq4MTk3zzWFAj83GAjcG/aIaw94raiq5XtZkI5tDI=
Subject key identifier: 4C:CC:21:5B:B2:D4:F4:4B:65:30:E9:EA:02:70:22:75:B8:DF:3D:D7
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 019654CA06446CE2E20D6ABEAC7286E60EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 078C
Signing time: Sun 20 Apr 2025 20:00:48 +0000
Manifest this update: Sun 20 Apr 2025 20:00:48 +0000
Manifest next update: Mon 21 Apr 2025 20:00:48 +0000
Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: kT/8xjbJQlZB/hJpiT/1pAjs6X3oEDiYQfs3Gjr/4TA=)
2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:ca:06:44:6c:e2:e2:0d:6a:be:ac:72:86:e6:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Apr 20 20:00:48 2025 GMT
Not After : Apr 21 20:00:48 2025 GMT
Subject: CN=4ccc215bb2d4f44b6530e9ea02702275b8df3dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:fa:f5:67:d1:c3:04:16:f0:8f:6c:72:34:
12:74:5f:96:77:e6:af:0b:26:8a:bb:51:d1:57:a7:
cf:bd:5d:9a:15:ae:92:86:04:3c:67:4f:6d:b2:a4:
2b:04:aa:63:e4:af:1b:ca:8b:9a:2e:64:fa:80:ed:
80:6a:ac:63:bf:82:d8:70:20:43:b3:7d:7d:71:ff:
94:5d:db:ca:32:8d:c9:16:34:1c:ca:08:67:69:d5:
ef:a9:e6:08:40:12:f2:c8:0f:0b:ff:e7:09:2d:c8:
a0:dc:b9:1d:09:14:ba:55:da:9b:28:5e:59:d5:de:
f4:ed:6a:e3:e3:a0:f7:37:65:e4:18:0c:fb:f4:b5:
ee:8b:43:83:0d:ed:a4:be:d1:7d:18:66:e2:72:d8:
84:12:c2:4d:f7:b0:65:d5:90:6a:a1:e5:a3:35:c9:
76:0b:0f:1a:0a:e1:fe:4d:7e:e8:4a:d2:f7:6c:38:
d8:a5:bd:28:85:b5:6c:8a:e9:c6:bf:26:97:46:7d:
d1:ae:81:49:d9:fb:c4:51:5a:cc:bc:23:70:e9:bb:
b3:7a:a5:a2:6a:32:fa:ea:26:23:b5:68:7d:3e:12:
b3:c6:61:b9:35:7a:7f:d2:d0:28:05:35:06:0f:83:
75:9b:93:48:86:df:f0:f4:7f:e2:be:24:15:d1:99:
b6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CC:21:5B:B2:D4:F4:4B:65:30:E9:EA:02:70:22:75:B8:DF:3D:D7
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2a:43:10:38:db:8e:24:d5:13:9e:30:4c:d1:37:23:d9:59:
20:4e:64:7d:c8:e9:12:18:c2:55:bd:7b:85:e8:8b:4f:06:c3:
b3:59:12:12:6a:41:cb:08:39:49:b9:7c:b7:0b:c2:02:a4:b7:
96:47:9a:ec:1c:a8:ec:eb:e5:76:b3:db:db:7b:55:29:7d:84:
06:54:80:92:3c:82:d5:61:64:91:3f:8d:e4:dc:9c:5a:d1:6e:
ba:22:69:54:e0:fd:40:c7:31:fc:3e:a6:96:75:97:25:5b:6b:
06:eb:c2:7d:66:9a:bb:ff:c1:b3:ca:dd:38:2b:82:b9:63:00:
63:83:d2:7f:5e:a5:b8:45:00:d3:a3:d5:7e:bb:3f:68:19:67:
eb:8d:d8:27:b2:0e:30:3f:d9:73:25:e1:5f:47:90:a7:f5:b1:
54:da:e3:da:29:4f:f7:fa:3d:b0:76:17:71:06:2d:57:aa:01:
df:cb:b3:9c:e2:ec:e5:36:90:8c:41:b0:59:ec:fd:51:91:11:
71:12:84:01:b5:5a:28:ab:f8:db:c6:2d:9a:a9:b9:c0:57:77:
ae:5b:cb:a4:cb:d4:f2:c3:2a:8c:23:44:ac:6a:1d:13:26:d5:
d8:b3:d0:4e:4d:96:1a:a3:f5:f3:98:75:74:0a:93:ed:8e:d9:
90:ec:50:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:34:10 2025 by rpki-client