Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: Qcd6mvgh4dvMXdG2NCv1sIqzeXSCAQpf0yH6f3Q6uyk=
Subject key identifier: 98:3C:26:A0:4E:64:1F:4D:CB:F1:EA:89:1E:CA:98:B0:BA:1A:70:72
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019649A1FB4367B918CBA54EFBD339855376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 09AF
Signing time: Fri 18 Apr 2025 16:01:14 +0000
Manifest this update: Fri 18 Apr 2025 16:01:14 +0000
Manifest next update: Sat 19 Apr 2025 16:01:14 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: kCmx24O/629VExtnOfwajBkERFU23r/dLqL+ve0ITKQ=)
2: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (hash: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:fb:43:67:b9:18:cb:a5:4e:fb:d3:39:85:53:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Apr 18 16:01:14 2025 GMT
Not After : Apr 19 16:01:14 2025 GMT
Subject: CN=983c26a04e641f4dcbf1ea891eca98b0ba1a7072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:21:6f:a6:9c:05:cd:e5:75:84:93:95:46:fa:
3d:da:2b:5f:a8:ae:2b:c9:57:f7:cd:8e:54:bd:a7:
4c:6c:4b:61:2a:7d:cd:15:d3:96:0a:48:e1:b2:2e:
77:39:d6:fd:4b:6c:ab:63:9e:b8:fc:f4:e7:59:df:
d8:02:86:83:4b:f7:bb:2a:53:62:20:2b:43:1c:c1:
e0:dd:fa:c1:ff:36:00:65:c7:dd:85:2b:b2:31:b5:
a8:8f:86:8c:e7:a0:90:d2:f7:16:d0:cc:6d:59:b4:
0e:38:ee:86:74:e8:04:e7:63:ac:3a:2f:f4:de:e9:
db:62:6c:cd:17:38:61:ed:e7:2b:ef:3b:6f:06:e5:
b5:f6:24:05:89:ac:2b:ed:21:43:d4:c5:43:59:91:
fc:89:34:f8:ba:89:b9:73:0e:ce:f6:56:2f:12:61:
e9:5c:bb:3b:a8:d1:85:08:8f:49:de:ff:6c:aa:ca:
a5:0c:64:81:b2:a5:9e:22:be:b9:79:bc:0e:65:90:
bc:fc:eb:13:f3:70:0d:d3:5c:d1:80:8c:99:73:80:
de:c7:40:d0:54:7d:cf:3c:41:9e:8b:bd:6b:63:63:
2d:3d:b6:44:8b:99:dd:a8:35:e7:04:f1:1e:29:8a:
ee:66:65:32:d8:f9:5d:12:1e:63:b5:f0:e2:76:b2:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3C:26:A0:4E:64:1F:4D:CB:F1:EA:89:1E:CA:98:B0:BA:1A:70:72
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5a:d5:49:6b:d3:aa:12:ae:4b:43:d5:67:61:6a:de:62:1c:
11:e8:ce:da:66:33:87:15:34:26:e5:df:9d:a2:75:e4:a4:21:
e0:20:d2:ec:2d:d2:74:c3:43:1d:f8:49:42:ff:f2:ae:9f:b0:
dc:24:98:3f:f1:d5:ac:b0:0f:33:48:38:ae:28:6a:d0:68:1e:
a0:d1:83:ba:50:6a:5b:33:00:3a:ff:2b:5e:61:fa:f7:00:2b:
ff:2e:61:3a:38:02:ac:6e:ed:1b:6e:90:19:b0:0e:b9:0a:16:
5f:82:3e:88:c4:55:3c:a1:29:2f:3a:9c:22:a9:26:47:5e:63:
41:b1:df:4f:3f:59:e3:29:b5:f0:a8:56:93:0c:5c:dc:39:7c:
c7:a6:4f:d0:a0:c1:a1:4d:83:1c:d4:4c:69:5f:2b:9c:e9:72:
0a:4e:a7:cf:32:29:9d:94:d7:8b:de:11:18:c6:5e:7e:2f:b6:
05:d4:aa:1c:5e:f2:e2:4c:d6:bc:6a:85:3f:1f:be:5a:d4:96:
29:45:4e:d2:34:d7:30:58:52:20:0a:1a:9b:f2:ce:a9:c5:bb:
4f:ef:17:b9:40:d0:59:87:0a:3e:11:80:18:4e:4b:e7:95:8d:
ca:7a:58:b5:9a:93:da:4e:7e:55:bd:28:a9:31:ce:82:52:37:
4c:20:1d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:08:51 2025 by rpki-client