Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
File: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json)
Hash identifier: MmJO4DHKVEKjgfoaV2TOHDQzcgU7ot3ah1X3bFpZZ3Y=
Subject key identifier: D4:F3:4A:62:F5:4E:5A:40:11:90:2E:C4:CF:28:89:C0:43:89:46:4C
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial: 01958EBCDBE73C49B388962939312CB404E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
Manifest number: 13B3
Signing time: Thu 13 Mar 2025 09:01:36 +0000
Manifest this update: Thu 13 Mar 2025 09:01:36 +0000
Manifest next update: Fri 14 Mar 2025 09:01:36 +0000
Files and hashes: 1: CJUlJDy-56wu6zeQ3niPJdV4COg.roa (hash: L4zbh11FM5FRXP4RaQH2Hk+P+CwUeKC3KbUfcsAdfU4=)
2: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: qOfBrWOGVYoSJD6ByxUPtcmxb+76t9LnhOdQq16TTxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bc:db:e7:3c:49:b3:88:96:29:39:31:2c:b4:04:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Validity
Not Before: Mar 13 09:01:36 2025 GMT
Not After : Mar 14 09:01:36 2025 GMT
Subject: CN=d4f34a62f54e5a4011902ec4cf2889c04389464c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:64:97:df:24:b9:90:c6:ac:ac:bf:c6:44:
f1:91:92:66:b8:b0:16:12:63:1a:7b:be:cc:c5:34:
04:09:4d:25:18:aa:7d:96:9e:68:b4:01:78:db:b8:
f1:85:97:d8:47:68:21:ad:b9:a8:cc:76:0c:9f:aa:
e0:d3:b3:ca:16:ac:86:d5:e8:3a:89:c3:da:55:57:
99:1d:7c:69:7c:cb:e4:0f:d0:62:f1:50:9a:bb:0d:
a1:43:99:f5:b5:53:82:9b:54:92:9a:12:8d:34:13:
93:4c:5c:ac:cb:65:31:0e:c2:0c:79:38:3c:ff:06:
e2:61:34:0b:ba:43:f8:94:d8:34:39:15:7b:82:ca:
df:8a:a2:74:34:c6:f6:61:df:c8:24:05:d8:91:67:
2c:a3:be:84:f8:65:bd:da:97:18:3e:e3:c1:c1:24:
68:00:44:c6:58:a3:c5:8b:77:85:2b:87:f1:b7:bc:
cf:e9:b6:c7:a8:06:29:ac:61:4e:1a:18:7c:ee:57:
8d:15:6c:20:f2:1f:25:4f:48:c4:a8:21:75:b9:51:
3a:55:94:b0:27:a7:ea:59:3a:29:7b:ee:69:f0:a9:
aa:13:2c:8f:c1:54:be:d7:9c:70:49:ab:7b:8e:5b:
80:bc:87:22:64:6c:1b:05:8b:80:32:4a:2a:89:86:
be:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F3:4A:62:F5:4E:5A:40:11:90:2E:C4:CF:28:89:C0:43:89:46:4C
X509v3 Authority Key Identifier:
keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:89:8d:9e:4e:c9:a1:4d:cc:60:e5:e7:dd:c2:25:e3:20:3b:
e4:64:68:d7:66:94:3e:a0:20:20:c5:4f:d5:61:a5:df:bc:ed:
f6:34:15:6c:6a:e3:06:8a:ed:78:ae:1c:b8:9e:7e:4b:24:6e:
58:ef:70:63:9a:6e:b6:fb:46:28:9e:a6:ad:01:77:b9:0b:d3:
04:21:60:ff:1d:15:c2:11:d0:0a:fd:16:68:31:9d:fe:e2:8b:
2d:0f:cf:b9:72:d0:ad:82:fa:52:87:32:b2:2d:b7:8e:90:0a:
dd:5e:ca:69:4c:87:a3:3e:d7:9a:d4:b3:6a:60:ac:90:b3:72:
2a:3f:4e:f4:37:81:ef:cf:73:00:e6:5f:0d:d8:2d:2b:2b:46:
9b:7e:10:4e:17:d9:c4:94:53:94:d1:56:ab:34:c4:ae:30:6b:
fd:55:cb:e9:30:52:6c:fa:e2:b3:ea:83:d6:be:46:24:7a:87:
28:c2:07:c4:4b:c2:06:32:77:d8:8e:8f:c7:bc:e1:ae:14:0b:
49:aa:36:0f:9b:c6:d0:0a:91:f2:01:c3:13:55:ca:30:49:0a:
10:11:34:96:fa:82:78:f4:0f:f1:3f:83:78:10:06:ff:73:a8:
c0:3b:e2:68:0b:ce:59:95:ec:b9:20:d1:03:f1:7d:6f:60:40:
53:d9:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:00 2025 by rpki-client