Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier: C5sHbHeSVU6Ib0BkQJzDnZB21+qC95FyIrn5NuSiKuA=
Subject key identifier: 2E:2E:51:86:C4:2E:D2:18:77:80:1B:C1:06:0E:EE:3F:E2:CC:65:0D
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 019643D6B99F4D382CCA8E7EC2BD18E22E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number: 0E6A
Signing time: Thu 17 Apr 2025 13:01:07 +0000
Manifest this update: Thu 17 Apr 2025 13:01:07 +0000
Manifest next update: Fri 18 Apr 2025 13:01:07 +0000
Files and hashes: 1: EcUvIL1_Dl5amyDKnInMArIAHbc.roa (hash: nxHqW1T9MD+4BzwDEHiX10/m9t40K+dREd46a8WoUuw=)
2: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: KMN1o0/5wRJsBzGy5LH18Md/o4y2e1kEMoKvqcTxl5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:b9:9f:4d:38:2c:ca:8e:7e:c2:bd:18:e2:2e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Apr 17 13:01:07 2025 GMT
Not After : Apr 18 13:01:07 2025 GMT
Subject: CN=2e2e5186c42ed21877801bc1060eee3fe2cc650d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:5b:ad:b1:92:ff:42:86:69:bb:26:76:79:
37:75:e4:81:40:da:db:f4:83:d7:07:a6:41:12:82:
61:7c:9e:f4:9c:c6:cb:71:52:c6:0b:21:2c:6f:0e:
02:5c:cb:74:41:f8:d4:fe:1a:8a:29:f7:5c:b3:b8:
b7:7f:68:a1:b4:99:a7:15:f1:5f:94:8d:e0:de:e7:
a9:eb:da:76:99:8e:cb:9a:f5:15:67:93:f3:21:86:
54:06:e4:3c:59:fe:7c:46:e1:e8:90:63:a8:de:ed:
c5:81:e7:e1:bc:89:49:5b:13:2e:bc:99:65:2b:8c:
60:28:e0:2c:76:da:c3:63:f9:7e:2c:c1:5b:77:46:
12:d5:7f:6a:16:e1:50:35:0f:b2:4c:82:4f:5a:9b:
17:9a:f3:f0:b8:7b:96:98:6e:85:ed:ea:42:1e:62:
39:e6:e2:05:a1:48:3c:25:86:d4:b2:a5:1b:2a:35:
68:e6:39:59:58:b0:da:3e:7c:c4:fe:94:d8:ef:af:
53:f9:3f:b6:0d:06:5d:6d:01:65:fa:5c:6d:bf:e6:
49:49:b7:d0:53:56:b0:e8:99:85:d9:64:5e:95:3e:
c1:fc:3f:07:40:d7:ba:f8:7f:0d:75:fd:58:e4:8f:
04:92:c0:ce:1b:e5:b6:0f:db:4c:e3:25:88:84:c7:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2E:51:86:C4:2E:D2:18:77:80:1B:C1:06:0E:EE:3F:E2:CC:65:0D
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bc:16:b7:44:50:c1:43:bc:4d:e9:e5:51:db:d7:fd:98:70:
af:cf:26:2c:43:70:f9:f6:af:bb:fb:fa:8d:e4:02:f0:43:66:
b4:57:9e:48:67:55:c3:a9:94:d4:5f:71:2a:da:a6:2d:6e:35:
33:19:c0:48:7d:19:14:9b:18:21:d9:2e:71:2e:a4:5d:06:a3:
1c:10:71:b6:ad:db:7f:64:82:5a:fa:fe:e0:b2:e2:3a:0c:5f:
19:9f:83:2b:38:2e:dc:79:ef:9e:48:6b:b6:ef:d3:ae:ed:d1:
7e:50:3b:ba:ae:ee:40:ae:9c:63:f5:11:f8:1b:7a:42:f6:87:
72:8f:d2:65:b8:64:6b:cf:b3:48:55:c8:ee:53:62:76:ba:6e:
16:3a:bb:d7:6e:3f:d1:09:23:60:f4:f4:22:92:bc:de:d1:17:
07:59:8e:e9:21:f3:3b:9b:19:9a:33:12:c5:8e:11:d4:89:d7:
66:ea:5b:ad:3b:a3:c0:16:96:44:9a:09:5d:1f:9b:b6:3e:c6:
23:ec:53:b5:bb:6b:8f:8a:3a:ef:2a:db:3e:e9:81:40:3a:b7:
03:81:2f:95:99:00:3c:2b:c3:47:fe:35:e6:fe:43:2a:e0:8c:
ba:55:bd:1c:7a:55:b1:2d:c7:db:55:5a:4b:05:43:32:ea:1f:
bc:c4:30:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:01:50 2025 by rpki-client