Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier: cz+k+YSa6iOZS1LWGdGG9mZHxdPe/OeucxHra+4K2S8=
Subject key identifier: 5C:06:C5:DF:8B:0E:38:AA:D8:E7:4A:62:0E:70:2F:71:06:70:67:7F
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial: 01961020185F075E2AB8667D3C82C8407CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number: 0FE0
Signing time: Mon 07 Apr 2025 12:01:00 +0000
Manifest this update: Mon 07 Apr 2025 12:01:00 +0000
Manifest next update: Tue 08 Apr 2025 12:01:00 +0000
Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: dJaMQWSkgHpyFMh6ot9MGBYclIls4RGCOc5c444R0Rw=)
2: HD1uPet-iIu7hW_120IFu9su76s.roa (hash: vFNL8ghAlqPTrA8jGEs+I7hRSyNODsDNbh5CwQDUvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:20:18:5f:07:5e:2a:b8:66:7d:3c:82:c8:40:7c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Validity
Not Before: Apr 7 12:01:00 2025 GMT
Not After : Apr 8 12:01:00 2025 GMT
Subject: CN=5c06c5df8b0e38aad8e74a620e702f710670677f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:e1:f0:6e:d7:f9:55:ee:62:69:c5:30:89:
ea:19:60:e6:ad:90:78:d5:f0:41:b4:d4:2b:0a:ad:
d7:68:fd:22:53:0d:ce:43:03:f9:0c:ff:cd:58:50:
01:f6:ac:57:47:e3:26:89:ac:6a:58:42:41:46:d2:
91:85:d4:dd:00:81:c8:00:17:f7:4d:55:2d:5b:5e:
6a:f7:d9:d8:a8:73:25:b2:5e:0a:25:d4:92:ec:fb:
af:d1:5e:75:59:95:35:6a:87:ce:ac:21:cb:4e:d1:
97:01:1c:9a:ba:cf:9c:6a:84:ad:f5:13:84:37:d7:
63:06:16:e1:94:13:53:89:23:83:a2:10:a5:02:fa:
3b:5e:36:0a:60:bf:52:37:4d:a2:59:ea:36:bc:2f:
d5:49:62:67:d8:ce:c3:be:7b:ce:69:28:3f:fc:05:
b3:8a:f2:bc:db:1c:4d:f7:9b:d2:33:e0:bc:84:f4:
c6:1c:9e:b4:04:03:35:f9:ac:63:43:9a:ae:12:9d:
7f:2a:13:aa:29:21:ab:22:f4:67:72:12:4c:6b:7c:
c5:1c:b5:55:a5:0b:f6:64:7f:8a:cd:82:90:68:d4:
7b:2d:32:a4:de:7b:4e:b4:91:0d:a1:81:57:91:28:
cb:09:26:aa:a4:bf:9d:a8:9e:cf:11:c5:d5:90:d0:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:06:C5:DF:8B:0E:38:AA:D8:E7:4A:62:0E:70:2F:71:06:70:67:7F
X509v3 Authority Key Identifier:
keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ca:de:e2:34:72:c0:f6:fd:de:29:fc:8d:c6:20:5f:ef:ca:
83:92:81:96:b7:cb:5a:3e:9b:3a:9a:b2:31:ac:0f:a4:42:89:
2f:b1:a6:69:9c:13:4b:8b:dd:64:51:67:84:e7:0a:76:29:12:
bc:3b:2c:33:7d:c6:5b:01:ec:46:e1:7f:7b:5e:d0:c0:7e:0f:
89:43:ab:4f:d5:63:0a:1d:3e:e8:39:b9:94:02:ee:24:1d:8e:
90:69:3b:ea:52:84:7f:1a:7c:ce:30:b0:7c:d9:4a:b4:84:94:
1b:9e:32:98:8c:58:2d:a5:53:3f:39:8e:50:fe:1e:aa:f6:c5:
23:37:38:be:38:eb:3b:d3:90:a4:31:a4:ab:33:b9:83:e0:52:
22:40:49:ec:68:a8:bf:18:0d:b3:5c:87:2f:cf:44:0b:84:42:
4a:63:4f:b0:f0:a9:40:e1:8d:ca:99:fb:bb:9a:12:9b:62:67:
24:8a:c1:61:e9:b1:00:24:8a:1e:5d:da:55:b8:07:c3:05:4c:
a5:4b:ec:95:23:ed:cd:7c:6a:0d:aa:78:33:5f:32:0d:99:df:
c7:e3:4a:59:32:d1:39:b7:57:56:50:ae:2f:38:29:f5:6d:df:
82:9c:9d:55:9d:72:18:11:8c:00:d8:f2:89:a2:cd:a1:77:19:
68:c5:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:08 2025 by rpki-client