Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: g1emIA/GIdnYMHo517fpjUyv8xmva8z1C7+X8tmvog8=
Subject key identifier: 97:F2:76:60:1F:51:B1:A4:E3:B8:B2:C2:9C:84:A4:61:D1:69:AD:48
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 01960BD5BFFBA9E0FD5CC40DF7DA59CB208B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 14DC
Signing time: Sun 06 Apr 2025 16:01:19 +0000
Manifest this update: Sun 06 Apr 2025 16:01:19 +0000
Manifest next update: Mon 07 Apr 2025 16:01:19 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: UPqhNm2ScO+9JiwpLM/0lCqKVoifT5Tqc/r8E+MKbRA=)
2: tuMifPTkCbCL7ajrwo0EzPnXWPw.roa (hash: jC33EY0cA4p2GJTzlFhrTlf/kii333WPsx2l9xMoLj4=)
3: xrGACS-1hAxmap4Rb-Oc9S070js.roa (hash: mptaEeEJPbcTmStEp7RBmFaS5iUHgb9cGp/H5Fm+PGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:d5:bf:fb:a9:e0:fd:5c:c4:0d:f7:da:59:cb:20:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Apr 6 16:01:19 2025 GMT
Not After : Apr 7 16:01:19 2025 GMT
Subject: CN=97f276601f51b1a4e3b8b2c29c84a461d169ad48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:12:0b:b9:e2:34:10:3f:57:c5:4e:6d:95:
34:47:08:8c:eb:75:3d:00:d3:3b:63:5c:5e:43:1a:
06:7b:b9:49:15:c0:16:d8:f3:ce:ac:b8:bb:7f:16:
60:32:4f:11:fe:f3:a5:61:2d:1d:ea:bf:16:0e:92:
d3:a8:c6:65:64:7d:ee:df:fe:df:54:74:e4:bb:1c:
06:49:8f:a2:03:6c:33:da:a8:38:f7:c3:3f:2b:05:
44:9d:24:7d:99:74:2e:8b:a7:1b:dd:4d:56:47:75:
a7:c4:f0:d7:76:0c:ec:45:05:93:55:a1:17:e3:2a:
51:7d:74:14:d0:07:e9:b5:e0:98:02:1d:ec:90:1e:
26:d1:26:8f:fa:f1:a2:d9:af:fa:af:dd:78:39:93:
e5:51:a5:b2:33:ba:f6:93:12:5b:36:56:49:3e:56:
9d:82:91:88:e0:56:e4:7e:ea:58:a9:62:d4:ae:6e:
2c:3c:47:be:ac:91:0a:b7:e2:e8:a3:d5:73:66:d7:
33:c5:f4:d4:fa:61:d3:91:5b:d9:41:0b:8f:12:33:
c6:40:a7:54:b2:07:61:22:b1:8e:83:5f:3e:e3:4c:
b0:ec:4f:22:a0:75:ff:6b:48:6b:09:de:80:27:75:
d8:a6:0b:bb:9c:45:4b:32:a0:d2:7b:04:aa:26:45:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F2:76:60:1F:51:B1:A4:E3:B8:B2:C2:9C:84:A4:61:D1:69:AD:48
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c5:68:02:d3:6c:d1:6e:ea:6a:32:b8:63:5b:ba:df:39:40:
b4:6d:1e:53:53:2a:33:f1:f9:d1:cc:f8:f7:20:62:63:35:ea:
6d:69:92:b7:e3:c3:6f:04:e1:52:3f:3e:c4:61:7c:1f:a5:1b:
f2:ad:a3:31:8d:ef:96:c9:46:ab:50:26:f8:4f:42:da:75:4f:
5d:98:ae:1d:3c:27:ea:aa:80:3e:07:66:f0:56:55:32:6c:72:
4f:96:70:c8:0a:9f:66:0a:89:b7:31:df:44:be:9e:5b:0c:3f:
4b:b4:58:37:ce:a6:39:3a:f7:32:d3:5a:1d:98:44:b3:ed:6b:
ba:64:7a:e3:81:a6:7a:8a:f4:a8:cf:00:26:e8:1a:92:80:7b:
6f:7b:ff:e2:b5:d6:4b:71:79:76:13:ac:ce:84:56:ba:8a:5f:
eb:2b:fa:20:4a:88:96:4f:c5:bd:5d:c1:dc:9e:ea:31:ac:87:
30:41:fd:03:67:40:26:9d:41:7b:5c:12:5d:0d:86:23:e3:b6:
42:b3:b3:9b:09:15:7c:52:c5:2a:5a:12:f2:10:43:3d:d1:9f:
9d:9e:9c:79:d3:d9:58:01:04:b0:f1:b2:82:28:f4:84:58:7b:
91:59:29:b0:08:70:0b:cf:76:1a:64:48:ef:a7:37:c3:3a:88:
ed:7f:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:54:14 2025 by rpki-client