Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
File: FpNzegFGnJUBHWlzklZZFgRdOiA.mft (raw, json)
Hash identifier: 4FskhzOvztcmj6a2LRAd3mIUoI541uqezouBlXbdUVA=
Subject key identifier: B8:01:A8:A9:D1:A7:54:CB:FF:BD:6B:C3:26:22:DB:90:8A:92:38:99
Authority key identifier: 16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
Certificate issuer: /CN=1693737a01469c95011d697392565916045d3a20
Certificate serial: 01965FF26B0481BE024F9E5BE504BFE5DE94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
Manifest number: 01E9
Signing time: Wed 23 Apr 2025 00:00:44 +0000
Manifest this update: Wed 23 Apr 2025 00:00:44 +0000
Manifest next update: Thu 24 Apr 2025 00:00:44 +0000
Files and hashes: 1: FpNzegFGnJUBHWlzklZZFgRdOiA.crl (hash: T04Km4r5OZax8fs0UXngm5TKG+uNPefSUbB2Ol5A1ZE=)
2: mgFhpVWpKKOAS9kS1Whb-f8EjPw.roa (hash: b1ojmUR/j/a0k5umyT93sSV7c2lVJTgs9RA7eYuyM+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:f2:6b:04:81:be:02:4f:9e:5b:e5:04:bf:e5:de:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1693737a01469c95011d697392565916045d3a20
Validity
Not Before: Apr 23 00:00:44 2025 GMT
Not After : Apr 24 00:00:44 2025 GMT
Subject: CN=b801a8a9d1a754cbffbd6bc32622db908a923899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:20:d7:30:a6:b2:5e:16:f0:97:0d:a0:53:
7b:ac:47:60:2b:97:74:34:ff:6a:fb:b2:9c:8d:7e:
7d:80:b0:1c:48:91:1b:1a:9d:b2:37:65:1f:b1:54:
06:58:cb:1a:37:97:c7:40:79:af:d8:40:d2:f0:95:
53:c8:75:61:31:d4:41:b5:e6:3a:b8:1f:4f:29:77:
79:6b:7e:8a:ff:d6:76:bf:f4:a9:0c:d7:e9:3d:44:
59:1d:de:16:7b:1f:a5:22:4b:2a:a3:04:d2:a5:c7:
63:b4:f3:2d:a3:13:29:a1:49:34:65:d5:0f:02:d2:
fd:64:8c:58:53:77:fe:09:e4:64:0e:23:8d:f4:c6:
c8:97:38:17:45:98:59:85:35:b1:b9:86:af:e9:8f:
66:ba:c2:f1:43:2f:10:1d:72:f3:ab:ac:f4:b6:e9:
95:36:aa:9b:c9:29:b8:92:94:f8:67:34:ac:1d:89:
b7:e1:24:e9:44:d1:ca:89:76:4f:4a:68:77:0e:28:
de:2e:dd:28:93:b7:f5:9f:a0:8f:96:45:f8:6b:1f:
97:33:8b:1a:f8:c1:e7:bb:fb:c2:13:a2:19:8b:74:
be:b7:15:8f:18:f1:93:9c:7d:8a:28:7f:0a:77:95:
b3:da:06:fe:57:18:fb:02:29:6f:a8:27:83:e6:ab:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:01:A8:A9:D1:A7:54:CB:FF:BD:6B:C3:26:22:DB:90:8A:92:38:99
X509v3 Authority Key Identifier:
keyid:16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0a:c7:56:4a:3c:0e:28:9e:56:df:56:2d:0d:f5:ed:68:43:
6f:e8:09:0e:9a:74:38:54:df:6c:b5:19:0b:ee:13:52:61:3d:
e2:a4:d4:61:72:59:c0:62:56:59:9d:e8:0f:5a:86:82:0b:04:
1c:b9:2e:02:bb:ea:86:c0:e8:e6:f4:dc:b7:d4:22:66:f0:97:
1c:5c:43:85:99:04:aa:2f:18:ce:d7:9c:46:0f:1c:d6:73:d8:
1b:e5:98:61:1d:d5:f0:c5:75:11:76:fb:ca:8d:b5:bf:7a:7d:
93:4c:97:8d:7f:29:0c:0b:b8:6c:75:e3:17:66:93:c1:e8:dc:
4a:a1:32:25:3c:13:c0:2b:0f:8e:38:5b:5a:ef:9f:bc:5d:1b:
72:8a:a3:ed:c5:cf:7f:98:d8:84:e0:a3:ee:ba:ca:e1:1a:db:
8d:07:b5:e2:08:99:d6:7d:a8:3d:13:0f:df:b6:c6:6c:52:33:
ff:c7:76:c8:78:14:58:c8:99:35:52:8d:17:52:44:4c:fe:1c:
3d:e1:dc:d9:78:44:c1:e8:8a:72:75:66:e5:09:3c:09:b1:7f:
27:f0:ec:a3:04:5f:c4:e3:63:64:24:f2:85:8d:c3:38:70:80:
67:b3:89:27:c1:1c:f5:2b:c6:c0:48:a8:27:5c:77:24:cd:af:
2f:7f:4d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:37:01 2025 by rpki-client