Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: TRA+gcQteYssm7xILzKF1gwuodpsiyqRCWzozd7xv5o=
Subject key identifier: EA:CC:BA:14:51:9C:71:B9:DC:87:24:46:5A:C3:21:D3:DC:2D:99:50
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 01965191CE0C11CE58907E84D150D24277E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 043C
Signing time: Sun 20 Apr 2025 05:00:32 +0000
Manifest this update: Sun 20 Apr 2025 05:00:32 +0000
Manifest next update: Mon 21 Apr 2025 05:00:32 +0000
Files and hashes: 1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=)
2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: OZY0lZb595qQ9RQuEuHEUpIZvFliiEAs9a3fJzb03GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:ce:0c:11:ce:58:90:7e:84:d1:50:d2:42:77:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Apr 20 05:00:32 2025 GMT
Not After : Apr 21 05:00:32 2025 GMT
Subject: CN=eaccba14519c71b9dc8724465ac321d3dc2d9950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:94:fb:c2:22:ad:7e:0e:67:ff:0f:24:55:
43:ed:20:25:ff:f9:a6:68:c1:a9:4e:29:be:45:1e:
35:0c:4d:2f:40:64:72:20:82:cc:ed:1c:18:54:04:
6c:57:39:56:a8:ee:24:0c:43:ed:c9:80:0c:a0:4e:
84:89:9c:81:c9:66:25:98:2f:c7:79:83:1d:43:1a:
19:63:3f:4a:2d:2d:ce:ec:e8:5d:3d:63:a9:80:ba:
4d:1e:a4:84:1b:e8:53:96:ad:b0:cb:60:b8:06:2b:
fc:86:28:2c:0a:8b:a9:a7:e4:62:49:4d:f3:06:ec:
53:54:45:06:24:bd:c2:32:a1:11:b2:cd:18:2f:89:
57:c7:36:83:ef:1e:d2:96:fa:61:41:06:38:d3:78:
e1:e3:e6:69:ee:77:bb:13:3c:60:04:1f:90:ef:18:
2c:56:3e:61:dc:cc:4f:cb:53:03:42:ce:9c:27:26:
d8:09:33:de:97:65:8c:0e:66:d9:17:91:8b:17:8b:
f7:83:7b:ca:5f:72:94:81:e9:6b:8c:f7:c6:89:ef:
d9:ab:c7:e5:d5:de:60:ee:89:aa:36:c0:e8:b6:de:
87:f9:08:75:58:c5:17:f6:15:60:b6:45:3d:6c:fb:
49:81:ea:71:76:48:9c:95:07:d2:85:a3:d6:30:42:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CC:BA:14:51:9C:71:B9:DC:87:24:46:5A:C3:21:D3:DC:2D:99:50
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ab:88:eb:0e:f2:ff:9f:40:39:90:18:7f:ea:fb:4a:a7:51:
da:32:6d:6b:f2:67:9e:a1:3d:d4:4b:9c:a0:09:ab:df:ab:aa:
16:fa:2c:46:85:1f:47:3d:18:12:e5:f1:02:f1:67:29:2a:19:
db:d4:3c:e6:4e:98:51:09:1b:95:7d:04:66:ad:cd:e8:fb:56:
79:5d:f4:cb:71:71:bb:40:9a:4c:ca:0c:96:db:7c:3c:94:f4:
b2:05:7a:a1:6e:79:71:e2:6f:59:6d:ad:8b:54:90:43:59:4a:
fd:52:01:5e:bb:be:f1:b3:5d:cb:cc:fb:0b:dc:25:76:2e:25:
d8:6b:8f:fe:d9:7b:20:c3:ac:dc:f8:97:45:ee:6b:75:f9:e7:
16:16:89:ea:9a:a7:76:2c:6c:fb:0f:73:af:05:bd:2b:bb:75:
98:ec:9c:1e:2d:02:e2:35:73:83:db:9d:e9:b2:37:0a:2b:72:
76:d9:e9:01:b0:fe:92:a4:bf:86:83:84:37:d3:12:2b:b1:71:
d4:b6:53:78:ad:a9:1f:1c:bc:32:44:83:01:f1:1e:ae:4f:1b:
5b:01:3d:f9:4b:50:5f:5b:45:7b:ce:83:aa:f7:10:1d:b8:02:
a2:60:5a:04:0f:bd:ae:a0:ea:25:e5:92:de:d2:c9:39:bb:50:
80:16:c7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:44 2025 by rpki-client