Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
File: FXHxV8OlvVz_XRpH1BlkiifjWps.mft (raw, json)
Hash identifier: dL9SorVlV/nMKmH1J8OvdeuuyhlSAZC553kbH2hvD/Q=
Subject key identifier: 40:74:F5:D8:81:BF:A2:E7:DA:2D:AB:11:9B:7D:9D:21:7B:10:46:22
Authority key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
Certificate issuer: /CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Certificate serial: 01964CA298898951FCF4ED96D38CE792E046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
Manifest number: 140A
Signing time: Sat 19 Apr 2025 06:00:46 +0000
Manifest this update: Sat 19 Apr 2025 06:00:46 +0000
Manifest next update: Sun 20 Apr 2025 06:00:46 +0000
Files and hashes: 1: FXHxV8OlvVz_XRpH1BlkiifjWps.crl (hash: dtATCbrA+OGYQTrJXMQ5d9xtxoMMbzD4zvBbvI0VPmw=)
2: SbwwM1J0cW50ffjT8dS57JOEZaY.roa (hash: KDW7Xd6V5dGu/swRg1Y5NG1n0fbHWB4uQ3FumDxnAtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:98:89:89:51:fc:f4:ed:96:d3:8c:e7:92:e0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Validity
Not Before: Apr 19 06:00:46 2025 GMT
Not After : Apr 20 06:00:46 2025 GMT
Subject: CN=4074f5d881bfa2e7da2dab119b7d9d217b104622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:22:0a:8c:b3:59:34:2a:f0:db:fc:7c:63:
b7:ef:30:1c:d2:68:a1:0e:cf:3b:e5:b5:59:d0:66:
05:d8:d8:bf:7d:6e:1b:8b:d5:f9:1a:d3:6c:b0:44:
d0:31:c2:29:85:2d:97:66:6f:f3:68:93:d3:85:37:
63:54:2f:09:74:de:4f:0d:73:4f:d5:b6:ed:7b:e3:
20:13:5c:0d:82:d5:60:16:fa:87:eb:d1:d1:15:5b:
31:ff:25:c1:a4:8e:e1:03:1d:a9:f2:76:82:77:4d:
ee:a0:11:35:ba:4c:53:8f:6e:5e:28:86:32:fb:45:
a6:8a:d1:d8:33:b1:16:0a:f0:ac:c2:17:0c:cc:cd:
4f:a8:a8:14:d4:fe:9f:a2:2c:85:b9:ef:7a:10:f8:
5b:97:d8:15:d5:48:c7:d0:45:7b:9d:db:ca:d3:ac:
43:79:a4:7d:d9:ae:b3:9b:ff:63:6c:a5:48:9f:50:
44:2a:01:12:fc:a6:ef:8f:bc:14:b7:8a:2c:6f:f6:
33:9c:eb:87:ea:87:cd:20:fc:8e:5e:eb:77:a9:b7:
ac:81:b6:85:44:7d:38:c6:1b:4c:58:91:6b:4d:00:
c0:75:2e:c3:93:ce:9d:f5:72:1e:a3:fd:0b:df:f5:
b3:ae:96:cc:d7:5d:e6:aa:2a:a2:a7:3d:f4:d7:90:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:74:F5:D8:81:BF:A2:E7:DA:2D:AB:11:9B:7D:9D:21:7B:10:46:22
X509v3 Authority Key Identifier:
keyid:15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ed:8d:2d:fb:de:03:85:35:ae:08:ce:94:c5:c7:c7:b4:d5:
b0:7a:a1:66:68:fd:0a:44:bb:83:a2:d4:42:e9:48:12:11:03:
31:0e:d9:ae:cc:a0:3a:1e:1e:c8:7d:c1:16:47:d7:31:4b:08:
d7:b0:79:3f:31:51:48:cc:a3:a7:ea:0d:31:1b:59:8f:51:aa:
4b:c1:2c:4f:ac:68:02:3f:29:ae:83:d1:c3:de:9f:8b:f4:67:
e6:ed:0f:e7:8d:0b:90:10:89:fe:73:38:4d:04:90:b4:95:ef:
7e:15:48:30:35:73:b7:4f:57:79:fc:4c:ac:db:3f:8f:db:b8:
29:fb:f3:b9:a9:68:69:0f:0b:9f:6e:69:65:31:e4:a7:e2:93:
af:9b:1e:f5:3e:4c:5c:bd:cb:24:60:17:cb:f4:82:86:a4:b4:
86:ef:2b:8e:24:a2:94:e9:3d:0f:36:c0:e5:70:63:04:e8:b3:
7d:ef:5a:82:3c:d2:ae:7d:b6:b3:5c:16:9e:35:7f:35:c0:05:
f4:6a:b8:34:1f:be:5e:a2:04:75:72:56:b0:5e:e2:69:86:81:
01:78:38:d8:2c:aa:a6:d5:7b:08:8b:01:69:85:59:e8:85:be:
60:c8:71:f4:9e:b4:3d:bc:f0:0e:a1:7e:a6:a5:44:da:d4:22:
1d:0d:8d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:47 2025 by rpki-client