Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
File: FAThjoYWcF7A8pDlfKgpqC9flsI.mft (raw, json)
Hash identifier: xmcQ8a/3RRW/TUuUCiqj0eIo7Y/20iwqr+/djUp1NWQ=
Subject key identifier: 3B:64:53:3A:3B:CF:1D:AE:C5:08:32:8F:BB:F1:C3:FD:C7:4D:9F:25
Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
Certificate issuer: /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Certificate serial: 019658A6C0BBF4446058AFA743F7B8C46806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 14:00:45 +0000
Manifest this update: Mon 21 Apr 2025 14:00:45 +0000
Manifest next update: Tue 22 Apr 2025 14:00:45 +0000
Files and hashes: 1: FAThjoYWcF7A8pDlfKgpqC9flsI.crl (hash: H9qv3N8q37LbjX5GuhIA5gipRE2rhgCWdFbKRxjHKM0=)
2: U4oKE7CRqXAM5lKfColIg9RJWt0.roa (hash: d+LbRIvfnzNgLwyQ+KM7aAsPai29dP8OhpmqewNJXLo=)
3: tsrNBESAlUjzygDHgS7gEuqfQn0.roa (hash: 6Jn0pVJqrN6B9jn7fLfe3kxST0CupCM2snjZV9wb1no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:c0:bb:f4:44:60:58:af:a7:43:f7:b8:c4:68:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Validity
Not Before: Apr 21 14:00:45 2025 GMT
Not After : Apr 22 14:00:45 2025 GMT
Subject: CN=3b64533a3bcf1daec508328fbbf1c3fdc74d9f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:41:4a:1b:9b:2a:1b:b8:66:13:34:ea:4a:f3:
28:c7:e3:0f:a4:01:ed:99:9b:2f:e0:d0:82:aa:84:
5d:12:58:48:8b:2d:91:83:32:b1:d3:57:92:ef:7b:
16:f9:76:21:1c:95:d8:d7:81:de:6d:6a:fd:5b:9f:
c1:88:5c:4f:04:0a:c2:f8:7a:5c:f1:52:a2:7b:d0:
68:62:6f:7d:b7:c2:11:2b:b9:cd:31:46:54:75:9d:
42:d1:6f:e4:22:73:28:83:22:2b:37:8d:4c:13:c6:
60:e9:de:a4:59:3f:9a:f7:ad:81:88:e0:b1:8a:2b:
99:4d:12:fb:c0:40:27:89:5e:ab:b2:89:6b:4b:97:
c9:a3:20:91:04:06:c3:79:44:dd:c5:49:66:1e:b7:
21:fd:08:1b:f5:d4:ac:69:23:23:46:d5:56:bc:64:
d0:ff:f6:e0:2e:d2:45:c6:d3:eb:ed:db:ae:04:b0:
c7:89:99:73:d5:e7:c8:c2:2d:21:f4:c3:c0:8c:1e:
bd:3b:b9:b9:dc:ea:d7:09:be:90:68:13:e1:f5:0a:
02:ec:6e:f1:03:65:7a:28:fc:95:5a:c5:45:4d:97:
67:c4:e2:cb:7f:fe:0d:16:de:21:6d:8e:12:3f:38:
a3:fd:dd:70:84:13:39:0e:77:9c:7f:04:c4:aa:8d:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:53:3A:3B:CF:1D:AE:C5:08:32:8F:BB:F1:C3:FD:C7:4D:9F:25
X509v3 Authority Key Identifier:
keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ef:bc:2d:65:95:e4:ad:c0:a0:88:b8:f4:d8:dc:ae:8e:92:
b3:55:ac:80:67:f7:6a:f9:07:ba:d4:76:57:7e:63:24:74:e4:
ad:ac:f6:23:7d:45:7d:e6:6e:67:3b:33:0e:91:2a:87:eb:ae:
cb:74:52:a1:4f:7e:6d:4e:9d:5f:2e:95:a9:78:a5:2a:3e:5d:
05:d4:d5:bd:d3:e2:62:d1:54:eb:d4:d9:5c:cc:06:d1:97:aa:
62:45:5e:c1:fe:bd:66:e6:e3:3e:1d:57:de:1a:50:dd:ef:c1:
3c:84:44:0c:0a:c2:d3:b1:51:98:29:6f:d7:82:8a:b6:a7:dd:
67:f4:42:59:4f:9b:00:0c:6b:63:84:a7:01:d7:a7:3f:2c:1d:
0d:fd:2c:12:80:5d:58:08:5a:ff:b5:ee:74:27:76:8e:83:e3:
e7:0e:8d:e0:9a:41:5d:c5:27:cc:7e:e1:7d:57:31:3a:ba:26:
6a:73:9e:3d:cc:90:ce:48:8d:63:94:7d:d7:a3:2b:65:34:ad:
bc:74:54:b3:02:3d:50:37:3e:63:f1:0a:fd:1d:b1:5a:c1:84:
66:19:2c:0e:41:21:18:e6:6b:82:3d:2e:6b:b1:da:5c:93:48:
36:ea:46:48:97:3f:d8:26:b4:8a:74:79:bf:9f:ce:2b:5c:c1:
36:a1:22:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:55 2025 by rpki-client