Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File: FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier: rjGEcwuJZ17srDIZs2gbbGZYDID18q0JiOC8hObtFUc=
Subject key identifier: 1A:69:7C:93:E3:16:6A:A5:01:F8:93:97:E1:41:D8:FF:02:E0:65:07
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial: 019651C86D2C06414BA0E4059BF394C4247C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number: 0E7A
Signing time: Sun 20 Apr 2025 06:00:11 +0000
Manifest this update: Sun 20 Apr 2025 06:00:11 +0000
Manifest next update: Mon 21 Apr 2025 06:00:11 +0000
Files and hashes: 1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: 4AwYD4oQ6qMZ2NwqFY8mzA+IkZ5AGlvtiWb5rwgavhg=)
2: sdQpr9vBWbo2oFyAIJwywqV94V0.roa (hash: q2Hm5+yXKjxuN/cBMa4LO9usoHIS/gexRqRStEbsYf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:6d:2c:06:41:4b:a0:e4:05:9b:f3:94:c4:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Validity
Not Before: Apr 20 06:00:11 2025 GMT
Not After : Apr 21 06:00:11 2025 GMT
Subject: CN=1a697c93e3166aa501f89397e141d8ff02e06507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cb:3c:76:d9:6e:7e:b9:46:cd:bc:56:39:18:
bf:5e:be:52:23:71:64:09:e9:ba:06:0f:7b:2b:d3:
b3:8b:13:aa:7a:27:95:f4:ee:8a:32:9a:67:04:13:
fe:3e:db:a1:01:ef:82:c6:d2:2b:f4:25:d5:52:0f:
f4:aa:68:7a:fb:a5:ff:92:df:9d:77:16:0d:42:e7:
af:45:b7:37:71:53:7a:7c:1d:c6:93:d5:78:37:1e:
6f:7a:77:5a:57:b3:e9:d5:6a:4d:b2:b0:92:a9:11:
d3:8c:9b:8f:51:9c:90:df:f5:d8:d0:1f:7c:3d:b8:
cd:9b:50:27:1e:a2:ac:64:19:6d:24:2a:81:e8:42:
84:57:38:36:86:45:95:21:55:e2:af:2d:41:d1:02:
94:da:71:27:ad:86:48:24:80:23:45:cf:ec:e3:a0:
f5:47:bb:a5:b6:09:61:11:cc:a1:ae:77:f5:2b:3a:
2a:29:f1:0f:d4:e7:94:b7:4f:fc:53:26:b0:c8:f6:
77:1a:80:86:4a:06:f3:60:db:3c:d4:72:f0:db:5e:
16:83:29:c9:ba:d5:1a:38:47:f4:af:eb:af:ab:e9:
31:cd:07:1c:09:f2:8b:56:b9:ce:3d:ed:53:8a:6d:
59:60:57:84:4c:da:43:b5:17:ae:1c:58:6f:cb:ef:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:7C:93:E3:16:6A:A5:01:F8:93:97:E1:41:D8:FF:02:E0:65:07
X509v3 Authority Key Identifier:
keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:26:2d:2a:ef:00:c9:c0:42:65:2d:86:fc:d6:94:64:cc:a4:
a5:70:1e:0c:5d:82:a5:1b:a4:10:2f:39:5f:44:5e:9d:09:ef:
a9:29:92:c8:56:c3:85:3d:9c:d8:e6:98:b4:20:f1:ea:29:ed:
15:39:f6:29:52:d2:f7:15:9f:b6:6a:69:14:6d:a8:8f:00:77:
2c:69:11:6c:e8:18:e3:45:26:e2:c7:54:b1:25:4d:16:77:e6:
6c:1e:e1:6f:58:f3:81:e6:a3:f0:92:b5:37:74:54:bc:0d:4b:
f2:a9:4c:db:76:e1:41:f4:d4:e7:3c:ee:81:8c:a6:91:a5:17:
5e:5f:83:2b:6f:1e:f3:9e:8f:91:fd:c0:ca:96:5f:cf:94:7c:
97:aa:3d:35:bd:1d:e6:e9:44:13:d1:b4:bc:90:43:db:a7:88:
23:82:17:f2:9e:81:3b:2a:b4:74:50:d9:ff:b5:33:56:68:64:
7d:69:00:d6:e4:f4:8c:7f:6a:8d:8e:18:41:d7:06:54:37:9b:
93:40:b2:88:31:1f:3c:66:24:b5:14:e5:0f:c4:96:82:b4:13:
a6:49:a7:1d:2d:b9:b1:9a:a4:ad:04:fc:39:29:c7:bd:45:cd:
29:a3:cd:dd:03:b6:90:02:78:d4:60:d8:e0:cf:27:47:93:e5:
5e:9e:49:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:39 2025 by rpki-client