Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
File: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft (raw, json)
Hash identifier: VGQkGuiIfACzAF8pGSGUezdbqg9wpBmYXSyeT52ut0Q=
Subject key identifier: 2F:D3:4F:B9:46:C6:18:0D:B9:AE:71:6A:73:79:68:BE:19:46:1B:25
Authority key identifier: F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
Certificate issuer: /CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Certificate serial: 019651FFB08804FF5F093EE0FE059D3C282D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
Manifest number: 062B
Signing time: Sun 20 Apr 2025 07:00:33 +0000
Manifest this update: Sun 20 Apr 2025 07:00:33 +0000
Manifest next update: Mon 21 Apr 2025 07:00:33 +0000
Files and hashes: 1: 1fzx311S5jcwOa4F8HMO1WGGMRs.roa (hash: Nf7uyvKCbxyvq+ckjdshr/ayknm9CnDDcdCg9xx36FM=)
2: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl (hash: ZX2mZevEhTvA5W1qNDhS5KAMPCEf8zcKKYXBDJ+5D4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:b0:88:04:ff:5f:09:3e:e0:fe:05:9d:3c:28:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Validity
Not Before: Apr 20 07:00:33 2025 GMT
Not After : Apr 21 07:00:33 2025 GMT
Subject: CN=2fd34fb946c6180db9ae716a737968be19461b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:5c:8b:56:9a:68:e4:41:ae:4e:84:22:71:
b2:e9:56:0e:e5:f2:1d:39:07:d2:2c:d7:7e:6c:fb:
b0:9a:94:2e:b7:0e:2d:9f:99:12:79:86:ce:28:93:
39:73:04:94:96:e5:78:31:31:74:21:6b:79:ca:c7:
1f:f0:51:f7:4b:83:01:66:9b:28:a6:cb:28:1d:29:
5f:ef:60:f4:7f:8d:f2:c0:d0:83:b0:81:db:28:eb:
4b:fc:87:8c:17:b9:6b:33:2b:46:b4:91:02:d9:6d:
b5:e3:78:e8:b3:ac:f8:00:2f:50:73:16:cc:a2:f7:
ac:95:e2:e4:d2:c2:45:3a:82:13:5b:2e:0c:5e:35:
13:a6:07:1e:3c:29:77:16:10:56:f9:a8:d0:6f:4c:
39:98:7a:85:e6:ed:9c:6b:23:23:b5:1c:b6:5d:8e:
43:d6:ad:3d:1a:f9:5d:e1:4b:c6:05:2c:0b:ee:b6:
0f:b0:03:af:14:86:b0:74:78:6d:85:df:79:54:25:
94:5e:59:b9:4e:95:6c:43:4a:3c:47:33:14:e2:b9:
9a:d2:a8:80:9b:49:77:fd:f9:4d:bb:ca:8e:4b:9c:
17:21:28:89:31:70:7b:ac:7c:f6:18:f9:c9:ee:6f:
00:16:2b:47:31:38:81:55:50:ce:d3:e0:22:c1:4d:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D3:4F:B9:46:C6:18:0D:B9:AE:71:6A:73:79:68:BE:19:46:1B:25
X509v3 Authority Key Identifier:
keyid:F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a1:12:19:0e:74:dc:ab:da:e4:42:18:4d:eb:c6:cf:33:f8:
9f:f4:f1:3e:84:1c:f2:79:38:9c:41:08:51:69:c9:2a:bf:a1:
0e:44:a9:f3:8c:89:92:1a:fb:40:13:8f:e9:34:6b:41:e5:ef:
ae:46:c0:17:5c:df:9f:4f:01:b9:cc:da:13:d9:53:d4:aa:9b:
a6:c0:43:c2:2e:f5:69:47:1c:ce:5b:87:08:c7:50:81:96:c0:
ee:ac:50:4a:be:c6:b5:27:ed:df:5c:93:64:a8:cf:6a:26:8b:
4e:c0:c5:86:99:c8:19:79:6a:31:85:90:39:dd:e9:4e:84:20:
1e:93:5a:e4:bd:e3:76:e4:f6:5d:96:c4:75:e7:c1:bb:2b:bf:
72:4a:09:ca:fb:17:91:64:1c:13:d2:ef:31:de:65:bf:2d:4c:
1f:80:18:f8:01:e8:d9:f2:27:6e:fd:65:fe:38:73:07:01:32:
5c:15:2e:c7:b6:f5:2b:15:3d:a6:55:47:6a:6b:a9:db:dc:de:
06:9c:f4:a6:ad:81:d2:5a:76:e9:cb:74:09:ed:14:0d:2b:bc:
0d:98:39:0b:6e:45:09:4b:a7:05:3f:d1:83:60:c5:94:07:47:
6f:be:29:7c:4e:f0:13:06:fc:c9:96:aa:2e:96:8c:70:4d:26:
99:dd:f6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:40:43 2025 by rpki-client