Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
File: kF3q_qO62SSCF7FinkLP_H5JG9k.mft (raw, json)
Hash identifier: UBrNzpLW2qJQUdJW52rCs3Lq4xe5mGiHHcYN6owRMjI=
Subject key identifier: 53:51:9A:4A:70:39:32:DF:AD:49:42:6B:F2:20:12:B0:05:2E:DB:8E
Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Certificate issuer: /CN=905deafea3bad9248217b1629e42cffc7e491bd9
Certificate serial: 01964F356DC1EDC548E543D9565066D25C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 18:00:23 +0000
Manifest this update: Sat 19 Apr 2025 18:00:23 +0000
Manifest next update: Sun 20 Apr 2025 18:00:23 +0000
Files and hashes: 1: F6NVdh8A853FlObS61QBXhYoWUw.roa (hash: bTYe6HPxoy2DgVEr4roCOuCgASU45dN4RfTtGTEfBzY=)
2: kF3q_qO62SSCF7FinkLP_H5JG9k.crl (hash: VGiQDyMOSl1rxZoEw9pYW1Dv5bSLH81x5rUY0unuEu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:6d:c1:ed:c5:48:e5:43:d9:56:50:66:d2:5c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9
Validity
Not Before: Apr 19 18:00:23 2025 GMT
Not After : Apr 20 18:00:23 2025 GMT
Subject: CN=53519a4a703932dfad49426bf22012b0052edb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:d3:72:98:ad:bb:cd:54:ce:b2:60:6e:7e:
2e:76:5a:91:bc:8b:0b:04:40:c3:c1:5f:57:a5:ca:
5e:17:2d:8b:4c:b5:eb:21:13:69:0f:4a:3f:f1:7c:
38:11:b5:e2:fc:da:c4:d9:1e:c8:28:d6:c1:60:47:
c6:c2:ac:b8:11:79:63:1b:25:0c:6b:5b:df:d9:6c:
1c:02:bf:e6:94:d1:c7:7d:cd:0b:3f:6d:66:ed:e9:
39:17:28:f6:71:c8:11:e2:7c:78:0f:ea:40:f0:a5:
46:a7:a3:cd:ab:0a:fa:0f:4b:42:65:86:1e:56:c2:
68:7e:d7:b5:bb:ec:05:ff:52:db:46:bc:44:05:23:
40:4c:23:7b:7c:d5:37:84:bc:bf:f8:69:a6:05:e2:
fb:22:75:95:1a:81:a1:41:6a:e4:b4:04:27:ca:c7:
71:49:dc:eb:93:19:fc:7d:c7:89:3f:21:a4:46:c5:
c7:bd:41:2b:ac:96:31:db:ee:6c:a2:8f:53:80:8d:
ca:d3:e8:c7:d5:04:9b:5a:c7:d9:43:95:d5:cb:9a:
70:8f:76:b4:f7:d6:9f:2a:67:e1:d8:45:a8:fb:65:
7c:2f:7d:55:ae:3c:f0:85:a1:51:d2:4f:bf:73:e3:
12:c5:f8:2a:de:41:bd:6b:b5:a8:b4:65:7d:81:bb:
c3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:51:9A:4A:70:39:32:DF:AD:49:42:6B:F2:20:12:B0:05:2E:DB:8E
X509v3 Authority Key Identifier:
keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fd:ed:4c:4a:b3:2b:ec:4b:df:7a:32:8e:b6:cf:50:d4:b7:
c6:17:a6:67:8f:06:6b:83:d6:5d:b0:52:72:7b:37:2b:8f:f6:
95:5c:61:39:3a:07:45:45:38:30:29:ec:94:9e:20:27:f9:e6:
56:c6:48:eb:f2:ea:87:11:07:1f:e9:ee:b8:dc:31:a5:d4:27:
d5:1e:74:b1:20:1e:61:fa:2e:1c:9e:6e:0d:4e:99:a4:9a:bd:
27:65:bd:23:4b:9f:ae:99:a7:a8:0b:cf:58:4f:4d:1f:32:f1:
ce:9e:34:76:14:84:fe:16:a9:88:81:36:61:12:71:74:1f:2d:
a5:b3:19:9a:e8:1f:09:31:23:5b:17:30:44:8d:05:b8:07:36:
3f:3c:82:df:32:04:0c:ae:52:f6:18:91:1f:5b:87:fa:6f:bc:
cd:7a:df:92:ba:2d:7e:da:68:b5:38:59:f0:4c:0b:48:4e:56:
2a:18:68:e1:9b:12:99:9d:85:e3:31:cf:06:7d:c0:07:cb:39:
a3:66:5e:cf:06:7d:4d:34:c8:eb:f0:e9:81:ab:bd:85:df:96:
14:3b:55:82:fe:de:93:ae:a0:a4:de:17:01:2b:af:dd:ed:53:
ef:83:5a:83:6b:7e:30:96:d0:28:e3:22:05:95:58:27:29:de:
be:00:a9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:20:27 2025 by rpki-client