Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
File: FPt8Mzas1BidP6xjmigNmwAg8pg.mft (raw, json)
Hash identifier: DYYJD6VbGBP0XQ+TFSLlj7sS57Rxs0AfjgwHvAz1Q7E=
Subject key identifier: C2:5B:84:2A:00:0E:96:59:10:20:05:4B:7A:D7:A4:74:1E:62:FD:AE
Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Certificate serial: 01964D104ED1119E156127DBEC8AE5FF5639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
Manifest number: 143E
Signing time: Sat 19 Apr 2025 08:00:36 +0000
Manifest this update: Sat 19 Apr 2025 08:00:36 +0000
Manifest next update: Sun 20 Apr 2025 08:00:36 +0000
Files and hashes: 1: FPt8Mzas1BidP6xjmigNmwAg8pg.crl (hash: NOidCMquKAH+xt/9/4BqmYVM6G7RzRJ9hFlafKQvGMw=)
2: Jan-36Lo7cls_qlYXAYwCHL-IM0.roa (hash: 9QKHqIJMi/8WyyfdqnXT2xQCCgDbraKMeYqVzfnxL6A=)
3: rrdEpfsB8Gg5zdzJ-FXk4BiB3TE.roa (hash: 4ZmwtT19+5Iz0mku0LqIMr+TT72kqcPqLFHR2qlNxGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:4e:d1:11:9e:15:61:27:db:ec:8a:e5:ff:56:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Validity
Not Before: Apr 19 08:00:36 2025 GMT
Not After : Apr 20 08:00:36 2025 GMT
Subject: CN=c25b842a000e96591020054b7ad7a4741e62fdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:04:60:e5:c4:41:89:42:ae:50:34:9a:95:
6d:79:d1:6e:7f:46:a8:f8:d7:dc:93:c4:d6:e4:56:
6d:96:b8:ee:3a:62:34:b0:8e:19:59:5b:af:56:37:
d2:51:51:dc:55:26:d5:76:33:16:1e:1a:c4:91:cc:
b8:4e:fa:f9:13:99:a7:0d:ef:0f:bc:6a:15:76:5e:
42:f7:43:a8:ad:20:13:fc:32:98:2c:1c:c4:8d:02:
67:0e:3e:17:0e:dd:70:35:6b:64:a2:90:90:ff:d4:
4c:07:72:ed:34:d3:77:1d:5f:9b:1b:bb:d8:14:7a:
ff:ae:9d:47:20:89:72:29:9e:e2:67:c6:9c:d1:5c:
fb:0c:76:9d:07:03:b5:cc:29:7a:5d:4c:25:c9:b2:
60:67:4c:83:60:de:25:56:7f:ff:81:0b:78:99:b5:
fa:04:dc:0f:22:4d:f3:b2:36:58:9e:3a:8f:9d:5a:
95:73:98:d8:33:59:29:19:5f:a3:26:ba:e5:ed:c8:
1c:76:ce:fa:83:d3:1b:0e:d2:2e:f6:d5:76:26:9c:
28:f5:65:c1:e6:39:4c:5f:96:16:05:b8:4e:a5:09:
c1:2e:15:e6:e0:c2:52:09:45:c6:64:3f:eb:62:03:
98:8a:b5:b8:52:b7:0c:5f:83:09:2c:b1:07:a9:27:
54:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5B:84:2A:00:0E:96:59:10:20:05:4B:7A:D7:A4:74:1E:62:FD:AE
X509v3 Authority Key Identifier:
keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:53:d5:96:b4:0f:c3:58:be:57:af:96:d7:02:ad:48:f8:5d:
25:ce:0f:77:d9:3b:3b:9f:35:e0:c3:ef:e0:82:43:3b:53:e4:
4f:72:44:ac:9d:7b:7e:5c:9a:be:d5:ab:c0:5c:ea:f3:46:45:
7b:b3:f0:54:0d:e6:75:8e:58:71:61:80:3a:bf:27:5a:df:f5:
a2:a4:c0:28:d7:6a:d2:e2:43:2e:19:20:11:43:7c:bc:f8:3f:
37:b7:64:e8:b6:5c:63:e3:85:ee:a5:f3:26:ed:7e:ec:56:2e:
13:ab:f0:31:f0:4f:5a:3a:f3:5e:62:d2:9d:b7:3c:6c:c4:48:
fa:c0:5a:71:88:53:6e:c1:95:9b:fc:4f:64:57:ac:fe:e8:3f:
02:82:de:28:f6:a4:37:46:d3:b9:9a:1c:53:ee:f3:95:9c:db:
d8:c0:a1:c7:79:85:33:d6:b4:7f:87:80:16:46:fc:c8:21:13:
a0:44:5c:81:81:36:ac:68:48:b2:2f:2f:ec:19:c4:9a:ac:04:
ce:eb:16:5c:cd:34:ae:19:c3:56:08:31:3c:75:fa:92:ad:a3:
10:b2:68:1d:a0:aa:d0:51:36:74:5c:b8:c9:a0:7b:ba:f5:80:
f3:a8:63:d8:1e:ae:5f:11:3f:26:ce:e8:64:55:6c:db:8f:31:
6f:81:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:44:12 2025 by rpki-client