Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
File: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft (raw, json)
Hash identifier: lzXMRm3c8yq4+/kJfBBE3tWf6IqbZWdFhQlfThJY64M=
Subject key identifier: 61:D5:1D:E7:07:4F:D8:70:1F:EE:3B:06:B3:D7:BF:CA:C6:A2:91:9B
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Certificate issuer: /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial: 01964CD99114266CC0D69E0F526DCD73E98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
Manifest number: 07C8
Signing time: Sat 19 Apr 2025 07:00:48 +0000
Manifest this update: Sat 19 Apr 2025 07:00:48 +0000
Manifest next update: Sun 20 Apr 2025 07:00:48 +0000
Files and hashes: 1: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl (hash: aeFNM8GIOEyeHxQ84PGK8CWugnWgvcVlAeGLz57ijHs=)
2: GscfecpegOFfpMoknfniRAYQkAM.roa (hash: 8hLbX2dDbgbmzy+G6jKdhfkk83QzDCU0+sWTTicGlYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:91:14:26:6c:c0:d6:9e:0f:52:6d:cd:73:e9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
Validity
Not Before: Apr 19 07:00:48 2025 GMT
Not After : Apr 20 07:00:48 2025 GMT
Subject: CN=61d51de7074fd8701fee3b06b3d7bfcac6a2919b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e9:a2:a5:ef:0f:81:15:80:24:12:72:d2:d6:
d8:3e:e0:c9:5e:58:3b:c4:41:3e:6a:05:ff:cc:cb:
70:b6:5e:a3:3b:93:23:56:b7:7b:6d:86:c2:1f:ad:
c2:c3:cf:2c:0e:d6:78:09:1f:4c:ad:87:22:2c:00:
7c:41:86:19:c0:47:31:b8:27:83:a2:0d:3c:30:3c:
4e:ed:35:24:7f:15:24:0d:7e:ea:b8:b0:00:5f:b1:
c5:fd:86:6d:04:14:df:0f:d1:0e:7e:6d:f6:af:50:
04:39:76:c0:5a:de:21:a1:cf:7d:71:ab:c7:4f:bb:
00:29:5d:58:5f:a0:02:cd:44:7a:c6:7c:6c:8d:45:
31:2e:bc:25:be:80:6b:87:f6:65:af:92:2b:b5:86:
28:75:f9:e1:60:14:ea:51:0c:28:45:95:7c:83:69:
f3:c5:5b:e3:79:72:31:e4:12:61:58:d6:a6:72:8d:
e2:43:2e:61:ea:61:98:e2:58:47:cf:94:2e:13:1e:
3e:3c:7f:3d:58:66:0d:0d:79:14:23:07:38:3d:c0:
fa:2f:61:79:04:e8:b5:0a:d5:e8:6f:0a:c3:85:49:
29:e0:c5:90:be:4d:f3:77:f8:2a:0e:bb:71:b3:8f:
cf:11:90:22:d2:cf:52:87:56:a3:ed:2a:de:e7:cf:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D5:1D:E7:07:4F:D8:70:1F:EE:3B:06:B3:D7:BF:CA:C6:A2:91:9B
X509v3 Authority Key Identifier:
keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:86:0b:be:16:48:1b:3f:ed:b6:13:59:75:31:98:54:22:60:
c7:aa:cb:e0:e8:2d:7b:b9:17:84:f1:cc:d9:a4:56:ee:b6:62:
d4:24:95:23:18:e6:c5:bf:a0:d6:4d:d9:dd:9b:58:3b:34:a3:
56:cd:de:a5:1f:d2:20:da:a9:97:7a:8a:3b:c2:e3:5f:42:91:
72:32:a4:23:dc:bd:fc:bc:5b:9d:e1:93:21:a1:9e:b6:ca:42:
b9:a9:ad:a4:08:21:0a:31:87:99:c3:a5:66:ed:14:70:d5:26:
9f:82:e5:71:72:3e:31:b8:21:5f:b3:02:f4:b7:51:30:38:a7:
f5:21:39:4f:eb:72:bb:38:03:15:92:01:81:36:58:01:c6:ba:
4f:30:08:fc:6e:54:f7:81:9d:6a:c4:c6:a8:c1:88:02:60:76:
fe:e7:1d:ff:78:97:02:04:32:94:71:db:c5:c3:5c:8a:e4:a8:
1a:7e:14:36:23:b5:da:2c:b8:f5:14:3c:c6:d2:d0:da:27:85:
3e:5c:40:b5:e8:2c:4d:db:87:1f:a2:65:6e:27:09:97:8f:3a:
36:fa:b9:e8:c5:ba:b1:c9:db:0a:df:db:4b:13:36:7d:50:d6:
19:57:75:2e:79:2b:9f:64:98:2e:39:65:cf:45:b1:1f:58:79:
8f:96:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:14:01 2025 by rpki-client