Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File: FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier: SDh3jxs8ieZa5pTcmk6ON+pKOcYg2x6oUwx6CTcUkNI=
Subject key identifier: 6F:43:F6:FF:51:0E:6D:5B:89:DD:25:85:1C:98:F0:3B:7D:1B:98:26
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer: /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial: 01964CA26B61C9CD79B0D021A6D3BEC70294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number: 0D6D
Signing time: Sat 19 Apr 2025 06:00:34 +0000
Manifest this update: Sat 19 Apr 2025 06:00:34 +0000
Manifest next update: Sun 20 Apr 2025 06:00:34 +0000
Files and hashes: 1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: x3AGpGHtth541EnIq4ybwlSRjHOj8+ncb9rUfDgicJA=)
2: f0fm_m6mqyncGFPg2zPkibsoBcI.roa (hash: R5AqcJr/crlHYVpexq/9b2IVn+Dod1jCAKFqkiICDJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:6b:61:c9:cd:79:b0:d0:21:a6:d3:be:c7:02:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Validity
Not Before: Apr 19 06:00:34 2025 GMT
Not After : Apr 20 06:00:34 2025 GMT
Subject: CN=6f43f6ff510e6d5b89dd25851c98f03b7d1b9826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:27:32:6b:d4:be:68:07:9d:c2:e6:b2:80:24:
df:59:a8:9c:a8:72:3e:77:e4:7a:b5:e4:fb:cc:6b:
b1:8c:c9:da:dd:2f:a4:3a:36:55:f2:ba:4a:c0:ea:
74:87:5b:2e:fc:50:81:67:95:7d:bd:ad:e1:02:b3:
55:65:5a:40:d5:db:c9:f8:39:78:8a:3a:09:ca:b9:
7d:b3:e8:90:b3:b0:14:2e:76:63:32:06:63:f4:61:
c6:c3:74:ad:76:6a:af:ea:5c:50:b7:00:09:78:93:
4f:3e:40:97:35:2c:8f:a1:2c:0a:fc:dc:8a:49:8e:
ab:7c:47:83:cf:9c:ed:7d:19:30:ca:0a:12:2e:06:
9e:34:71:fb:4e:ab:6f:16:94:cc:23:58:25:92:0d:
8b:71:aa:b4:a2:4f:dd:df:e2:7b:50:8b:5f:f7:d2:
31:f7:b0:1d:c6:64:39:05:b8:71:55:7e:07:13:e7:
96:fb:06:d7:92:27:20:52:9e:d0:e6:7c:9d:71:b1:
e6:8b:f5:8a:72:60:c3:eb:5e:1d:64:b8:6d:f5:c7:
3d:2e:c4:47:d8:8b:34:10:22:8d:0a:f3:81:7d:4e:
2a:4b:ee:50:02:f4:70:7b:fb:9e:8c:23:32:65:f1:
31:cf:5d:54:07:e4:7d:62:48:c6:ad:7f:4f:59:5c:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:43:F6:FF:51:0E:6D:5B:89:DD:25:85:1C:98:F0:3B:7D:1B:98:26
X509v3 Authority Key Identifier:
keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c9:ec:46:6e:c8:61:c6:52:75:35:fc:c4:46:42:ba:d1:57:
1f:3b:08:88:e1:8b:b7:08:a3:e1:f8:35:8d:e2:08:44:dd:e8:
62:d2:05:80:42:e1:57:8a:9c:bd:38:95:da:03:be:ba:db:0f:
78:14:f7:82:e1:28:a5:45:ac:ca:72:86:ce:fe:95:f6:3d:b5:
ea:8b:41:9b:ee:09:55:d1:1d:b1:0b:af:fe:9f:f8:48:c2:a0:
a5:93:d6:2a:5a:ed:e2:5b:3d:64:50:56:d0:08:f9:52:bf:fd:
4c:64:8c:b4:78:4c:16:b7:50:c9:24:69:24:5b:9e:90:96:96:
26:b3:13:9d:d1:85:a9:68:fb:41:11:1d:79:f3:77:a3:ee:39:
b3:4f:4c:b4:32:8c:e4:f7:80:0b:2a:7a:04:47:e1:06:43:cf:
23:74:22:ef:41:25:f8:23:d7:7e:b0:05:6b:26:3d:67:b8:84:
65:0f:8c:02:0f:ed:ef:56:a6:52:b0:4b:6e:80:44:12:80:e0:
40:cc:7e:8a:33:a7:2b:e0:90:17:4c:8f:7a:df:cc:43:bb:9f:
46:a6:d2:08:74:dd:2d:61:28:9f:63:b6:9d:a1:a1:ff:d3:82:
6f:c2:cb:0d:cc:ca:2f:a4:f2:28:c6:c0:7e:8d:dc:65:99:29:
02:70:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:20:20 2025 by rpki-client