Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.mft
File: FKYzWehOAMD54qID6tJ4GibZBOY.mft (raw, json)
Hash identifier: MGmgOyeW9pT7lIj/n6g74YZ/Byut9yo3rZ7b1+ZYWho=
Subject key identifier: EF:3D:34:71:80:82:AF:6F:5D:E2:A2:F5:8F:35:B4:38:91:A1:BA:18
Authority key identifier: 14:A6:33:59:E8:4E:00:C0:F9:E2:A2:03:EA:D2:78:1A:26:D9:04:E6
Certificate issuer: /CN=14a63359e84e00c0f9e2a203ead2781a26d904e6
Certificate serial: 01958B4DED332BB6097F19753F339FB9DB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKYzWehOAMD54qID6tJ4GibZBOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.mft
Manifest number: 0853
Signing time: Wed 12 Mar 2025 17:01:34 +0000
Manifest this update: Wed 12 Mar 2025 17:01:34 +0000
Manifest next update: Thu 13 Mar 2025 17:01:34 +0000
Files and hashes: 1: FKYzWehOAMD54qID6tJ4GibZBOY.crl (hash: QVrHRxOYMUykaMstb+hBOAbM54M7lp/dOs4NnZxi8+Q=)
2: _6aoVlBUwlPIw613OqnPUhF6Stw.roa (hash: cWQaozMHwttAsgSmgf91geachnA2gCeK71KFOrFjrOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKYzWehOAMD54qID6tJ4GibZBOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:ed:33:2b:b6:09:7f:19:75:3f:33:9f:b9:db:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a63359e84e00c0f9e2a203ead2781a26d904e6
Validity
Not Before: Mar 12 17:01:34 2025 GMT
Not After : Mar 13 17:01:34 2025 GMT
Subject: CN=ef3d34718082af6f5de2a2f58f35b43891a1ba18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:bf:21:42:43:98:59:20:2a:81:75:8b:02:
91:c5:cd:d0:08:72:4b:0f:9c:76:61:20:04:ae:ec:
82:32:1e:90:eb:99:7a:fa:fd:c4:bb:91:b2:db:f7:
04:85:88:d7:37:e5:e0:45:85:f3:b6:2f:d3:fc:63:
d6:d2:ca:85:33:7b:87:fd:e0:11:e7:5d:41:12:d2:
a6:8e:fb:1c:98:ee:41:9f:2d:34:d3:0c:50:94:33:
43:7a:68:45:fe:9c:ec:01:1b:c4:94:49:d3:d2:6e:
9c:b9:38:41:9f:da:4c:f1:0d:54:ae:de:92:37:2b:
5d:f4:19:4b:c3:15:2c:bb:5b:a7:41:a7:dd:4c:3b:
23:82:18:9c:94:93:48:58:08:fd:5e:18:cc:07:d8:
1d:84:c1:86:95:9f:3f:54:4e:71:e0:c4:04:66:65:
5b:56:69:a9:5f:be:ff:df:4b:2b:16:3d:cf:a4:ea:
8f:57:02:5b:e3:bb:98:72:7c:26:88:7d:75:7d:d5:
d7:20:11:5a:1d:64:3c:bd:db:96:de:5f:b1:df:ea:
83:4d:79:a6:88:5d:4f:84:4d:f5:71:06:f4:f9:f2:
b1:08:9b:05:bf:34:a1:cb:8a:0d:23:eb:85:a3:aa:
c7:05:9c:f6:c8:28:64:26:52:13:4d:f9:0b:2c:4c:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3D:34:71:80:82:AF:6F:5D:E2:A2:F5:8F:35:B4:38:91:A1:BA:18
X509v3 Authority Key Identifier:
keyid:14:A6:33:59:E8:4E:00:C0:F9:E2:A2:03:EA:D2:78:1A:26:D9:04:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKYzWehOAMD54qID6tJ4GibZBOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:47:65:4e:ad:63:09:1d:16:2c:57:e2:ee:81:13:36:9f:33:
3e:6f:e0:56:c2:29:17:10:fe:88:de:33:bc:38:cd:08:17:c0:
2b:69:0e:86:19:08:f0:5c:c0:d7:4f:18:bf:22:f0:5e:b6:47:
b4:7b:d8:08:57:6d:72:ac:32:60:89:cd:fa:ff:15:5b:08:66:
11:39:1e:15:9a:e2:a4:76:be:1a:8a:64:06:ef:ae:0f:b5:9d:
85:56:69:f9:03:c5:38:32:7c:f1:57:d6:c3:f3:ef:59:82:eb:
63:86:5c:9d:ba:5b:a7:34:a8:fc:4c:78:07:18:1c:d2:9f:e0:
4a:11:41:24:4c:25:40:4b:27:ff:da:c0:65:9e:94:64:97:ec:
75:29:af:ab:ee:a1:16:f1:1b:c4:36:30:17:4e:d3:06:9f:bf:
47:c7:1f:e2:e5:21:6a:69:4a:6d:0c:dc:ba:12:5a:41:3d:cb:
73:ad:98:ba:86:64:d2:f6:cf:93:06:6e:64:64:4a:4d:32:ea:
71:63:56:9f:db:f8:64:97:fd:eb:05:47:39:dd:f1:1c:65:0c:
77:a6:56:dd:11:ae:8a:7a:e7:3a:df:aa:48:74:e6:82:98:3f:
b6:c7:6c:21:a1:77:ea:22:37:a7:a2:e4:27:c7:21:bb:f3:c4:
b6:ea:2a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:14 2025 by rpki-client