Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: n9uj9ZZELY4zDh68GY0a8QwA4V5DKYdINiw70Z8ffw4=
Subject key identifier: 0F:FF:BA:D5:F8:54:B0:79:CC:63:4E:DE:69:B2:6D:37:9A:C4:04:ED
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 01964820F798507B1CFDC7A08BA78E50A081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 103C
Signing time: Fri 18 Apr 2025 09:00:42 +0000
Manifest this update: Fri 18 Apr 2025 09:00:42 +0000
Manifest next update: Sat 19 Apr 2025 09:00:42 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: xEY12feb2xQDbYcDgA1e7V508f7O4CSMSqrplPRG300=)
2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=)
3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:20:f7:98:50:7b:1c:fd:c7:a0:8b:a7:8e:50:a0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Apr 18 09:00:42 2025 GMT
Not After : Apr 19 09:00:42 2025 GMT
Subject: CN=0fffbad5f854b079cc634ede69b26d379ac404ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:a6:04:83:3c:76:19:41:ad:88:cd:37:df:
31:75:a9:82:62:b9:5a:77:38:6b:38:18:15:b7:a1:
7a:67:28:67:69:b3:e5:87:a4:26:e3:50:6a:d1:fd:
57:71:7d:dd:b1:59:73:82:ce:a9:4e:c3:13:38:61:
be:e7:2e:31:73:7b:3f:b1:ad:3c:2a:11:fa:34:96:
74:9c:75:43:15:a0:0a:de:09:7e:9e:18:12:30:5f:
4e:e5:fe:37:41:6a:7a:1d:7a:b8:86:66:89:5c:07:
fc:f4:25:89:fa:0d:9b:90:ae:d9:3c:6a:75:40:4f:
4c:80:73:8c:bd:43:d3:8b:6e:31:af:4f:19:50:5c:
a8:c3:ef:fd:e3:84:54:ab:5b:72:f4:a3:7a:92:fd:
36:73:10:34:4f:4a:04:43:63:ea:ae:8b:53:cf:6e:
8e:15:e7:81:80:2a:6a:a0:28:50:a3:a5:14:fc:e1:
0b:0d:a2:3a:d1:a2:4b:63:d9:70:a6:51:6d:c0:f5:
b6:b1:9f:49:96:aa:89:d9:e5:d2:4e:d8:da:7e:f8:
fd:21:64:c5:36:ae:01:c2:93:b8:7c:cf:ec:38:05:
ec:f2:e4:e2:27:a8:c3:f6:86:b8:61:3d:2e:d3:95:
b3:47:6f:17:5d:71:56:76:34:bf:79:e5:70:48:9e:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FF:BA:D5:F8:54:B0:79:CC:63:4E:DE:69:B2:6D:37:9A:C4:04:ED
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0e:88:74:37:35:26:e3:c5:0b:36:9d:8e:cd:fe:4b:0c:38:
e8:5d:17:17:37:bd:4e:0a:f2:7a:b3:e5:22:aa:b4:66:f5:9d:
5d:a3:19:86:3f:92:fc:23:b2:e3:be:41:14:79:f9:ea:32:22:
ff:0f:59:62:27:2a:a2:9d:e0:11:67:8c:ed:64:d3:88:c5:49:
7e:11:7c:dc:28:d0:11:5b:27:d0:e8:4c:7f:03:5d:31:c2:92:
ef:66:da:c9:29:3e:64:2d:7b:90:c5:5d:2c:e8:c7:58:ad:9e:
b3:9c:35:18:14:8d:11:13:83:a8:fa:87:8b:79:7d:7b:a9:c8:
7f:79:77:c4:63:f3:34:81:cb:dc:e7:43:04:c3:d7:79:d3:25:
09:39:93:40:5e:f5:88:fe:ce:ab:f9:c3:c3:d4:81:dc:12:6c:
18:53:16:c4:af:49:0b:80:48:42:16:57:c9:30:d3:86:1f:61:
c2:7e:68:bb:37:72:76:08:4b:d8:fb:0f:15:5a:25:6e:3a:2a:
2a:92:63:b7:5e:b3:91:80:42:00:4c:cf:8b:f6:46:af:6d:98:
d5:a6:f5:54:29:61:6a:d1:72:e8:80:1e:db:c6:11:c7:a3:41:
44:a4:9e:eb:04:8b:c7:a4:3f:44:09:0f:ac:df:d0:9e:db:3b:
79:59:bd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:01:24 2025 by rpki-client