Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File: FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier: rskzVy8b4EyxcJu/wm8l35CqV+ZdQhW3BRWBCtSARgs=
Subject key identifier: 78:C3:73:3F:1D:B5:D7:03:75:D2:EB:C6:0A:E6:B9:BC:2B:78:05:3A
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 01958B843B457839446EB2A981DC924E2E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number: 149C
Signing time: Wed 12 Mar 2025 18:00:53 +0000
Manifest this update: Wed 12 Mar 2025 18:00:53 +0000
Manifest next update: Thu 13 Mar 2025 18:00:53 +0000
Files and hashes: 1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: r0bDhthA77AYurwqClLnzCv9Ebb1I0qzzhpKexib8ec=)
2: kc-ZCrpFtG9x51LpF4W3iw7kDzs.roa (hash: aN11v2IUXg+LXUfyuCNuVklkgeIw5ckCn/DmdMCJWXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:3b:45:78:39:44:6e:b2:a9:81:dc:92:4e:2e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Mar 12 18:00:53 2025 GMT
Not After : Mar 13 18:00:53 2025 GMT
Subject: CN=78c3733f1db5d70375d2ebc60ae6b9bc2b78053a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:98:ad:7a:79:e4:00:3a:84:e7:b0:10:58:
97:de:a7:4a:9e:55:27:01:a2:6b:8d:5a:1d:91:c8:
4c:af:2d:bb:1f:5d:68:14:7e:0c:67:44:e2:e8:cd:
fb:a5:b5:39:ab:36:9f:df:4d:ee:ee:08:ef:51:3b:
45:f9:80:2e:51:5c:9a:80:dc:a2:a1:29:78:d7:ee:
71:ec:4b:0e:17:a4:55:0b:8a:f1:9c:47:6d:a2:f1:
ce:5f:1a:15:f6:50:10:b6:85:d6:3b:58:68:d7:43:
54:bd:d3:9e:0b:b5:d3:75:35:eb:7a:80:55:cd:bf:
fc:6f:f0:83:19:fd:46:d9:c6:0f:26:24:3a:1c:02:
6d:b1:9d:92:a9:26:a4:7c:a5:2e:a7:20:c5:00:0a:
32:3b:ba:e7:9c:9b:7b:5d:05:e4:2b:6f:3b:d4:5e:
6d:07:e1:7e:62:c7:78:51:f0:c0:bd:ea:c1:10:f7:
9f:b6:b0:8f:88:cd:ea:c2:a3:d7:fb:7b:b7:16:03:
29:85:98:09:f9:a1:46:3a:fc:e0:7d:cc:38:a2:04:
8b:7e:90:e3:df:6c:d6:15:31:4b:93:5c:11:8b:e8:
5b:41:71:48:f5:c6:7f:96:0a:db:d5:05:bf:4c:3b:
4c:05:d6:aa:b8:ad:50:e9:b9:0c:b7:b2:db:18:34:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C3:73:3F:1D:B5:D7:03:75:D2:EB:C6:0A:E6:B9:BC:2B:78:05:3A
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cd:fb:67:bb:6c:fc:41:77:32:2e:95:f3:00:32:2f:4d:33:
32:50:d4:de:92:fd:28:1e:15:6a:6a:9b:95:34:bd:72:8d:6f:
e5:94:6a:5c:41:52:31:1e:8d:56:99:f5:b6:94:f3:6e:6c:1d:
aa:03:3c:52:21:13:45:5d:ae:47:dc:6c:b2:bd:1d:55:85:e7:
13:09:4e:89:8f:1a:dd:57:91:2e:c6:7a:f1:b6:bf:61:3f:1d:
a0:63:63:bf:45:43:5c:58:57:f6:6c:46:e8:73:c9:aa:a3:3c:
d8:b7:4e:f0:44:d0:45:75:dd:19:cf:c6:a0:71:ae:f7:8c:36:
42:09:5c:e0:e2:e9:57:84:11:82:3e:63:6f:2a:85:cf:c6:c8:
48:79:5b:0f:f4:17:bc:08:8f:5a:81:a0:cf:fe:b7:e8:8c:a7:
91:a8:59:ca:ff:cc:1c:e8:ff:90:09:af:87:d6:fb:fc:60:7b:
73:06:42:28:eb:88:92:ca:3f:2c:e5:67:1c:6a:da:d2:5c:cf:
29:fb:39:cd:2b:37:1e:f9:f8:d9:4c:02:ea:83:4f:0e:90:8d:
00:ae:ba:61:59:eb:fb:40:96:95:7b:96:22:02:97:0a:c9:ce:
be:e6:85:02:9a:67:1a:9a:1e:b5:3c:36:44:a0:ef:77:0a:a3:
29:1f:03:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:26 2025 by rpki-client