Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
File: FqThByM1EnDNjJzGSwlkiOZOIw4.mft (raw, json)
Hash identifier: VFbz0mxNs6NRe2A+9tV2cQ5mXXrCeglS8twr29YulxY=
Subject key identifier: D0:FE:C0:2F:6F:97:BD:12:91:AB:91:7E:DA:2E:D6:79:A9:1D:9C:93
Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
Certificate issuer: /CN=16a4e10723351270cd8c9cc64b096488e64e230e
Certificate serial: 0196108E679B1691E9DF67FB918E2A056C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
Manifest number: 064B
Signing time: Mon 07 Apr 2025 14:01:29 +0000
Manifest this update: Mon 07 Apr 2025 14:01:29 +0000
Manifest next update: Tue 08 Apr 2025 14:01:29 +0000
Files and hashes: 1: FqThByM1EnDNjJzGSwlkiOZOIw4.crl (hash: BUJLAfHHncS0XjmBUP18tZz2sQwgZFp8Xqg5ExKYJsg=)
2: LHS-1GPmf3JlxOhkC8EvvEXsIio.roa (hash: qJmDzf2hiWRAwgR4H4d0P3HUtRpMHlkEr8kbVnNHB5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:67:9b:16:91:e9:df:67:fb:91:8e:2a:05:6c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e
Validity
Not Before: Apr 7 14:01:29 2025 GMT
Not After : Apr 8 14:01:29 2025 GMT
Subject: CN=d0fec02f6f97bd1291ab917eda2ed679a91d9c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:8c:9f:88:f5:59:a3:60:e5:f8:68:af:3c:
d0:90:a9:36:46:b8:48:a8:d6:bc:b4:bf:86:52:f4:
af:74:29:8a:e7:73:88:29:50:3e:53:4b:d4:bb:cf:
77:7b:c0:14:df:76:97:2a:33:52:5f:3f:53:0d:76:
40:89:9e:0e:46:bd:62:87:49:b5:a1:9a:8e:c9:74:
98:cf:84:d7:98:ac:a2:d7:e3:93:b0:5b:4f:d8:91:
26:89:b0:4d:10:d7:61:b6:a6:da:0a:9e:4d:53:0d:
76:69:d1:83:be:80:b1:43:af:c2:8e:5f:ad:e7:22:
67:25:c4:ee:70:79:5c:d6:dd:4f:41:25:36:8d:ea:
5a:37:73:65:01:da:c4:3b:12:85:53:9d:95:b7:d2:
49:18:67:bc:b0:a9:b8:8c:1b:bb:cf:86:4c:42:76:
ec:65:af:88:a2:a4:e3:15:16:66:f2:df:cc:d1:e9:
ca:b4:aa:81:30:d5:d4:91:d5:25:84:12:24:bb:84:
ca:e2:56:04:2a:ba:cd:82:18:e5:4e:39:88:d3:ce:
3e:65:56:a0:7e:8f:a5:07:15:5c:12:b3:d1:a2:59:
39:41:0b:45:ee:8d:90:34:65:2f:17:f2:41:83:5b:
71:00:d7:87:1c:56:47:ea:4c:00:dd:eb:12:60:c4:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FE:C0:2F:6F:97:BD:12:91:AB:91:7E:DA:2E:D6:79:A9:1D:9C:93
X509v3 Authority Key Identifier:
keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1e:fc:9d:c0:f3:64:7c:5d:be:5f:8e:60:b9:02:f6:18:7a:
50:86:d6:6f:60:07:e0:6b:e7:bf:2f:66:0a:19:ff:62:c5:1b:
38:74:6a:0f:f2:f4:86:b9:63:8e:8c:cc:b8:45:24:79:07:a1:
8f:ca:dd:88:02:ce:69:82:c4:c0:84:3b:c9:0e:dd:fe:3b:8c:
0f:a1:4d:31:f4:35:95:16:8f:9f:be:f8:59:cb:1f:56:16:06:
e8:04:58:6d:cb:fd:a6:b2:e0:dc:2e:2e:fd:81:e5:7a:58:66:
16:72:3e:0b:ab:9c:be:6b:4a:fd:74:39:a5:bc:c1:c4:e1:4a:
83:35:db:7d:24:cc:8a:17:1d:99:ee:59:be:f7:1a:d6:08:08:
91:e6:40:42:52:49:15:74:7a:3c:34:ca:f2:b3:ed:00:74:00:
8f:d6:fd:86:e3:23:e6:3f:48:f2:32:1c:14:15:7d:c9:fb:6e:
34:aa:85:ca:cc:68:51:a3:90:e1:2c:b5:76:c7:09:26:d8:b9:
ec:4d:f1:6f:29:2d:9a:fe:8e:de:75:33:45:10:aa:72:c2:83:
06:94:f7:11:35:1c:ef:f1:82:6b:da:20:f2:5c:68:0d:13:4d:
4b:7a:9f:b7:11:01:47:8d:3a:b2:58:77:85:13:fd:b1:70:12:
a5:a3:7b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:09 2025 by rpki-client