Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
File: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json)
Hash identifier: XGdOXVxDYtdG1dYS9P0UIKkbSgqjg2txqYOq91TN1HE=
Subject key identifier: B5:56:6E:ED:4C:B0:43:73:5E:19:7D:4A:C8:0A:A6:AA:D9:13:4D:8E
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial: 01963EE6E23A7B05739BD30BCDC290BDD928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
Manifest number: 14FA
Signing time: Wed 16 Apr 2025 14:00:40 +0000
Manifest this update: Wed 16 Apr 2025 14:00:40 +0000
Manifest next update: Thu 17 Apr 2025 14:00:40 +0000
Files and hashes: 1: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: I5HRnKKRANmBBjYrTYnD0DxmuPYGS0BIxSJnTaT3vSs=)
2: JFz1OMtyYE0bdrPpAzWAHxoNfr0.roa (hash: GCMi3F+baVVPvUwQFwt0LCTFyVV4lIfA34WPsvrvO6A=)
3: RnPjQu1TRB6OusL4aMQpC4JKqmI.roa (hash: fzeYA/Ogqc2irWhfM/UbWuBPWyUJiutWTEcNUX+4+LU=)
4: Ut6Isd3FyfcwFqXffcOSTj20big.roa (hash: 6WWf7LzHGfNpFV/UMH6n5UZ2IDbI9b8RYTztg7MMT9k=)
5: YrBEbKYcRihrrXhf5rGMn4NnWP8.roa (hash: 0EjDwiQerEsJrNpiAV/U41dtG8QfC+EEgtF9mTKQLqE=)
6: oVdkjWCoO6UKiUnCLGAAHjBO9ms.roa (hash: 60Qb8QX+Ft+JLMQ7m3ymUwisPXVeh0oMfLPMdsaJtK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:e2:3a:7b:05:73:9b:d3:0b:cd:c2:90:bd:d9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Validity
Not Before: Apr 16 14:00:40 2025 GMT
Not After : Apr 17 14:00:40 2025 GMT
Subject: CN=b5566eed4cb043735e197d4ac80aa6aad9134d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:53:f5:49:59:91:bb:df:50:5a:f4:8d:c6:
18:9b:44:42:4d:5c:5f:89:ab:db:ea:e1:9d:25:31:
0d:b0:b3:5f:71:52:4a:c5:5c:1b:40:e5:66:03:0f:
30:14:f8:8d:59:36:c6:35:e1:5e:93:bd:22:b6:73:
fe:fe:31:1d:36:89:81:01:02:fd:77:fd:c2:ef:77:
02:8b:11:01:7e:ce:a6:86:01:15:24:7c:5e:d7:46:
3a:85:01:68:e4:9d:a9:fe:84:eb:4d:ed:8b:ce:f6:
12:0a:52:3d:59:9c:26:c0:b6:68:fa:2b:16:09:4d:
01:cd:b6:32:fb:7d:18:64:d9:d4:99:27:73:e7:cb:
82:46:b3:27:09:49:b9:3f:de:37:d4:f0:30:42:e4:
6d:4c:b5:d6:6a:17:a0:70:91:52:aa:27:05:42:da:
5f:72:d2:05:8e:7d:b2:5a:1f:0c:f6:67:25:91:60:
d3:6c:97:a3:15:23:a3:83:73:b4:74:7a:ca:70:1e:
00:10:02:8a:2e:ff:01:64:b0:3c:63:3b:2e:50:4c:
b5:6f:57:44:2e:e5:34:8d:b9:0c:84:9b:8f:b1:ca:
9f:08:5e:0f:23:9f:00:6b:8e:10:1f:cf:a8:4f:f8:
3c:ac:a0:ee:ba:aa:62:65:6a:15:f2:40:ef:b4:db:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:56:6E:ED:4C:B0:43:73:5E:19:7D:4A:C8:0A:A6:AA:D9:13:4D:8E
X509v3 Authority Key Identifier:
keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:30:dc:b9:e2:dd:33:b4:64:c2:bf:f6:eb:45:ab:51:6b:15:
3f:c0:f4:8c:a0:d4:76:92:01:c7:d4:2a:de:b1:8e:36:aa:c2:
08:b9:93:71:b6:82:3d:62:29:8a:7b:26:1c:fa:9b:54:2d:3d:
bb:40:f8:e7:71:01:dd:14:32:5c:02:1a:c2:2b:99:6d:b2:ed:
fd:fc:31:ec:7a:5f:5b:4f:ff:f1:20:9c:39:05:54:4e:b1:da:
21:89:9c:e1:2f:e0:f9:5c:e0:c9:09:a5:d4:ef:97:f9:75:e7:
e6:44:e0:5d:8e:dc:b3:4a:fe:9f:e7:ec:90:a6:04:bc:94:4b:
6e:7f:47:b1:db:b9:f2:cb:87:21:6b:dc:8f:5e:f8:26:aa:a1:
0f:07:73:4e:4c:2b:fe:4a:38:11:64:2f:7d:75:61:9e:cc:f2:
8f:66:2a:95:e4:1b:40:3e:31:4b:70:d8:f1:63:54:37:07:4f:
32:bf:11:3e:7d:5c:59:a5:c8:34:60:b1:88:f0:10:72:c5:1d:
ee:c8:00:47:56:d5:b3:47:37:35:9e:b7:03:0e:a9:fc:e0:47:
f3:c0:19:8b:1c:74:20:60:0d:5a:42:bf:02:f8:b4:68:ad:d5:
e4:32:8a:4d:0a:01:54:b0:6b:e8:12:9a:2f:a2:2e:45:4d:c3:
3f:9e:7f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:28:57 2025 by rpki-client