Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: sRmcaUcafmvYBRqdFXUla/P5VVL1h0vr+eaTNjzljx0=
Subject key identifier: A0:40:CA:04:11:AB:90:C5:71:D8:36:9B:34:A3:F9:20:75:A0:37:95
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 0196206F067B38205A4E42CAB7ABFF8B2A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 1473
Signing time: Thu 10 Apr 2025 16:01:09 +0000
Manifest this update: Thu 10 Apr 2025 16:01:09 +0000
Manifest next update: Fri 11 Apr 2025 16:01:09 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: rfZsgQsIj+RxRoxJLxnwkG7e/Clj+A/8F78eKl8PD/k=)
2: Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa (hash: stdZJ0N6TnO5P8nlAhBGBijPlJ/mbcLMM3mJJx7zrV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:6f:06:7b:38:20:5a:4e:42:ca:b7:ab:ff:8b:2a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Apr 10 16:01:09 2025 GMT
Not After : Apr 11 16:01:09 2025 GMT
Subject: CN=a040ca0411ab90c571d8369b34a3f92075a03795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fd:ae:4c:b8:1b:c8:ac:d0:82:9e:85:99:48:
7f:ad:17:12:93:3e:a0:2a:47:21:05:bc:48:0c:8d:
e3:67:05:7d:8a:01:48:ac:f7:18:b3:35:e8:33:9c:
af:40:6e:bc:cf:54:15:8a:70:a1:f9:83:1d:be:68:
df:d2:39:87:cd:08:49:e3:6f:9d:b5:63:ec:bb:67:
19:9a:5c:39:b0:f4:01:c8:0c:5b:e1:07:14:fe:06:
2a:2d:10:22:4d:3d:2a:a3:05:3b:94:5c:bc:3e:61:
08:a4:8a:38:95:bf:ac:1d:62:d1:6e:25:38:6e:9c:
31:d6:11:b6:ef:85:f8:2d:f3:60:c0:2f:0e:48:37:
56:90:73:a8:32:05:4e:7d:a0:e5:b9:a6:9b:d0:f4:
31:b0:70:c3:ce:44:0f:38:1b:a3:ce:7f:9c:67:64:
71:e5:53:98:a7:b9:78:23:69:36:d8:b0:38:12:d5:
2c:47:97:da:db:8b:8d:16:57:ec:a4:b8:0f:75:31:
df:e2:28:02:42:8b:d0:3a:52:54:2b:23:19:30:b2:
08:bc:d4:e4:54:9d:6d:7e:dd:e8:f7:ca:a0:fe:34:
a2:eb:af:ff:33:78:0f:75:9f:ac:28:04:28:5e:a9:
8b:c6:29:a7:b2:b2:bd:ec:69:68:c3:cb:b6:d9:71:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:40:CA:04:11:AB:90:C5:71:D8:36:9B:34:A3:F9:20:75:A0:37:95
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:72:22:db:f7:f5:5e:a6:2c:37:8e:7a:da:61:88:f7:05:6e:
31:68:09:2f:b4:f6:ac:9c:d9:69:ee:87:c2:b7:c2:94:59:a8:
f3:74:9a:b0:d7:bf:f2:90:30:95:da:f0:41:0a:8f:2a:1d:2d:
56:90:ac:57:1f:ad:63:7d:c2:03:37:1d:4c:b8:7b:07:21:19:
f0:2f:42:e9:0a:3a:93:5b:06:92:a8:0e:c4:cb:58:22:9f:15:
f9:e8:cf:bc:a0:df:e3:86:31:92:06:b8:93:83:18:8d:a0:2f:
f6:af:59:53:d2:e8:df:cb:b8:32:8f:30:ab:7d:30:3a:c3:3f:
ca:d6:ad:82:63:af:dd:2f:05:dc:9d:98:cf:23:bf:10:7a:a6:
e9:74:99:8e:9d:b5:4d:80:ac:ea:d6:5d:cf:ed:a8:0c:6a:13:
7b:e3:3d:a1:57:52:39:7a:12:e0:10:54:b1:a3:e1:0e:44:40:
6e:d7:59:cd:16:aa:44:f0:dd:78:40:27:30:fe:14:e4:72:b5:
94:86:fa:ac:e7:bc:57:fd:75:53:a8:65:cd:a8:5e:48:71:4f:
ba:e4:08:34:d8:57:be:b2:12:cc:92:e2:88:28:51:73:ab:e0:
fc:6d:99:34:d3:45:d5:db:da:e5:4d:a2:90:18:cf:da:19:f8:
2d:e9:8c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:02:33 2025 by rpki-client