Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
File: Fas-cvc0DahW6T1i7o0CPx18juc.mft (raw, json)
Hash identifier: /3q8pv21ybq5+EMWPu6tKGCzKv9d/Mzxq0aE7+oO50k=
Subject key identifier: CB:E2:BF:0C:3B:46:B8:E3:CB:5A:A5:71:37:2F:5C:A2:A5:24:2D:08
Authority key identifier: 15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
Certificate issuer: /CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Certificate serial: 0196545BC244E91324A3797A3DDF8B8D134E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
Manifest number: 0A43
Signing time: Sun 20 Apr 2025 18:00:21 +0000
Manifest this update: Sun 20 Apr 2025 18:00:21 +0000
Manifest next update: Mon 21 Apr 2025 18:00:21 +0000
Files and hashes: 1: 7JWKgvAHAa8B28vXNz3LbsvM1_0.roa (hash: aiThNQ8MveF/powu4k+TgcUEIjwVdj4V/Vhk6YBFQDA=)
2: Fas-cvc0DahW6T1i7o0CPx18juc.crl (hash: Ank1g3NVZ/4bEBl2EwtRY71L4M7x1IwKVySeVRZ1A9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:c2:44:e9:13:24:a3:79:7a:3d:df:8b:8d:13:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Validity
Not Before: Apr 20 18:00:21 2025 GMT
Not After : Apr 21 18:00:21 2025 GMT
Subject: CN=cbe2bf0c3b46b8e3cb5aa571372f5ca2a5242d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:ec:8a:22:b6:27:bc:a3:d2:07:dd:14:6e:
6d:35:3d:06:df:40:2e:26:1c:2b:5b:15:33:97:58:
02:90:4f:6e:9c:bb:30:e7:90:9a:e0:16:54:98:44:
9a:4e:03:b4:99:f8:bd:9f:3f:6d:28:fe:87:9e:15:
06:ee:c3:3b:d6:18:cb:dd:8e:1b:87:3a:42:78:07:
60:39:5e:ae:3c:b3:ed:20:3e:b5:b8:fd:ca:6f:cf:
fa:c4:5a:d3:cc:1b:3a:f2:4b:6f:27:21:ff:f3:ec:
d8:41:26:ab:d1:c4:1d:5b:f0:64:ac:8b:3b:14:86:
19:af:a6:5a:a8:5f:1f:04:f5:46:07:94:77:11:59:
88:47:59:77:e3:de:a5:1a:aa:4b:8b:72:78:d2:7c:
3f:e9:11:5e:60:f7:27:2d:2b:3a:6d:7b:85:2a:21:
50:da:30:90:15:7e:7c:1b:15:2a:82:b1:e7:a3:4b:
d5:22:f8:2b:46:a7:26:68:56:13:cc:6f:11:6d:22:
8d:a7:50:d5:d1:57:9a:99:a8:c7:e1:64:83:a7:87:
12:ac:96:61:62:0c:fb:15:e1:6a:fe:77:5d:fd:15:
21:ae:31:e5:70:61:07:dd:82:91:6d:10:02:55:ac:
90:fa:83:16:5a:94:eb:af:3a:22:03:cb:08:21:6c:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E2:BF:0C:3B:46:B8:E3:CB:5A:A5:71:37:2F:5C:A2:A5:24:2D:08
X509v3 Authority Key Identifier:
keyid:15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fa:d7:be:1f:47:72:fa:4c:ab:f7:40:31:98:c3:cb:e3:a1:
aa:db:75:85:14:50:5a:d5:3a:65:4d:ef:c4:cd:b7:77:8a:d5:
bd:cf:1c:5d:0e:b3:f1:16:fc:77:30:fd:f2:8b:bb:b2:09:d9:
aa:ab:e7:11:e0:e9:7a:6f:88:ed:f8:a9:3b:28:36:67:5c:1e:
23:4c:00:42:ba:8f:5a:e6:17:0c:10:12:21:9e:0d:d0:1e:d8:
74:8c:09:e7:7a:f0:9e:23:15:fa:2c:af:d9:62:b7:a6:dc:09:
9d:5d:03:6b:d8:85:a6:59:55:ca:ba:95:7a:32:02:6d:75:14:
81:f9:c0:04:81:87:79:66:f1:3b:1a:f1:09:94:51:9e:c2:3a:
f6:00:75:3c:e4:37:70:8b:c1:22:6f:36:ca:1a:82:fc:96:9e:
3e:2d:2b:41:43:1c:6f:12:9f:37:2e:f3:6f:5b:b7:48:7d:6c:
21:71:e4:06:8c:d0:fa:09:35:19:60:97:08:b4:37:e4:e5:d7:
a6:77:77:70:b8:6c:9b:46:43:70:d2:ca:c7:b7:49:74:b1:9e:
09:32:ab:56:3f:e6:80:fb:22:c5:8b:73:86:e5:fb:ba:a8:45:
8a:af:b5:bf:62:db:25:b4:09:da:3a:64:a0:45:34:8f:6a:1e:
e7:9d:39:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:45 2025 by rpki-client