Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: eynWuF6nvC23QnP24SyEpR7+Zbu8qONIOvvYWZLgrJs=
Subject key identifier: 7A:87:B1:7A:86:59:35:71:29:A1:75:49:A3:CB:82:DA:06:11:16:FC
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 019644B246D96EFF21D792774120140D4034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 13CC
Signing time: Thu 17 Apr 2025 17:00:56 +0000
Manifest this update: Thu 17 Apr 2025 17:00:56 +0000
Manifest next update: Fri 18 Apr 2025 17:00:56 +0000
Files and hashes: 1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=)
2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: 26pHRIGdgiRBuNOyYw1BWUU4SpeSZcHps4joMvaFc8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:46:d9:6e:ff:21:d7:92:77:41:20:14:0d:40:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Apr 17 17:00:56 2025 GMT
Not After : Apr 18 17:00:56 2025 GMT
Subject: CN=7a87b17a8659357129a17549a3cb82da061116fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:8f:c7:c6:37:d1:13:a0:ff:dc:fe:bf:c6:
13:ec:1d:60:6a:16:00:c6:4a:ed:27:a6:8b:73:29:
10:c5:a3:1a:2e:35:0c:d8:be:26:47:9f:cc:b9:9b:
d3:18:06:3d:f0:4c:82:53:af:5f:3d:55:06:0c:70:
3d:48:73:33:f5:48:db:f0:1f:a0:5b:bb:0b:92:73:
1c:07:6a:9b:a0:cc:1e:d2:18:01:02:46:43:a0:0c:
0b:0e:a9:e1:5a:13:23:c3:10:84:6f:07:bd:4e:1a:
7c:73:ee:02:54:48:b6:59:82:47:3b:b0:f7:fc:11:
51:75:29:3d:40:e8:e5:f6:7d:1f:b5:ef:f9:fd:45:
e1:30:38:f7:f8:50:c0:c7:62:18:84:7f:92:56:81:
c4:79:32:a4:51:ea:f2:21:b9:cc:9f:aa:09:c5:9d:
86:e7:27:c5:a0:ea:90:68:4d:d4:64:6f:dc:91:72:
d5:90:90:af:6b:cc:9f:a8:8c:89:a1:02:5d:2a:89:
96:2c:92:5b:5c:a5:e5:2f:be:83:ca:94:c1:57:fc:
30:84:fd:80:b5:46:e2:e5:8d:67:70:15:81:a2:5b:
12:21:31:0a:d3:9f:c4:92:16:67:19:ce:cd:b1:28:
ea:6e:af:c7:71:48:da:05:18:18:8f:5f:74:e4:ac:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:87:B1:7A:86:59:35:71:29:A1:75:49:A3:CB:82:DA:06:11:16:FC
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b2:40:4b:13:db:c5:5b:ca:88:29:7a:33:4d:25:a5:00:50:
3d:88:a0:ff:68:a9:98:d2:54:90:b6:f0:b4:db:58:ba:76:e9:
13:6a:6d:e1:13:d4:f6:7a:b0:ad:ed:8a:f2:70:d0:f3:0e:6a:
00:97:8d:a1:4c:c5:41:28:89:b5:ca:37:95:e7:bd:70:ea:c0:
b0:09:66:9a:1e:7f:98:8a:76:54:7e:2a:0d:7d:da:c0:5e:8b:
34:12:5c:3d:51:ee:bb:f9:a3:39:ad:76:32:64:12:c7:b3:1d:
1a:9b:ea:a8:40:c2:2d:cc:c3:64:01:7e:c4:23:a0:7c:2e:a9:
71:ce:84:fb:77:93:26:37:94:82:10:aa:12:42:8c:87:b7:17:
9e:c3:33:28:b2:6c:f6:52:b2:b8:6c:85:c6:99:31:bd:a2:6b:
2a:9d:b6:ad:e2:84:30:88:c3:78:9a:5f:de:fe:ca:dd:63:88:
4e:19:ff:31:00:ce:fe:46:ab:94:6a:9d:f6:57:d5:2d:c5:46:
8d:b0:6b:38:56:82:18:b8:41:65:30:aa:73:8d:5c:a4:51:88:
c6:61:07:36:50:11:ba:e3:40:35:7f:11:87:50:c7:9d:79:49:
48:1e:d9:55:b0:2d:ca:af:36:47:7e:a6:9c:e7:58:58:df:3e:
14:58:9e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:34 2025 by rpki-client