Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier: ThIWcto1Vr0AiGWPiFOhK5ZYRsJtl0qggevNCgeM78k=
Subject key identifier: 3D:EB:EC:FE:CB:7B:24:73:3A:D1:E7:68:35:16:A1:A8:67:45:0C:11
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 0196409E534D11C33E652F738AB54B871354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number: 11F2
Signing time: Wed 16 Apr 2025 22:00:39 +0000
Manifest this update: Wed 16 Apr 2025 22:00:39 +0000
Manifest next update: Thu 17 Apr 2025 22:00:39 +0000
Files and hashes: 1: AcPmWwo94r8m4Vj4-gToYDvTsGU.roa (hash: +evKtbSFjpYA6xBirW2To9jZahtd3cCQYx8e8YIZ/g8=)
2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: 9DVbaYOHdU/jTHXzE5F59mzXZCzSPfvgo6z/htSSZcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:53:4d:11:c3:3e:65:2f:73:8a:b5:4b:87:13:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: Apr 16 22:00:39 2025 GMT
Not After : Apr 17 22:00:39 2025 GMT
Subject: CN=3debecfecb7b24733ad1e7683516a1a867450c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:71:9b:bd:96:a6:74:a1:1d:b4:59:ce:2d:
2a:cc:f6:9e:a2:19:6a:e7:e5:23:59:cb:f6:66:71:
9a:a8:0a:82:d4:02:2b:5e:d4:67:74:bf:c5:f4:81:
8e:e5:36:38:aa:da:ee:92:41:21:08:a5:b8:31:86:
c2:b3:1f:22:ab:29:a9:ec:f8:14:4b:c8:f6:ca:ec:
8a:d7:b7:aa:1d:de:ba:cc:cc:25:05:6c:78:2f:33:
91:87:e4:ee:10:28:38:f1:f4:dd:e4:76:4c:92:8e:
3d:d5:ac:b4:64:89:43:1f:01:a9:ff:db:95:e2:30:
f7:32:f0:6b:64:18:69:87:b5:2b:8d:bf:72:c8:e4:
08:88:06:e9:ba:11:b9:e1:17:80:c7:2b:0a:8e:80:
07:fc:a7:24:6e:21:f2:ec:89:3a:19:31:3f:09:98:
1a:4b:bf:ff:b0:62:34:a8:f4:3a:d2:6b:9b:c8:bb:
15:21:f3:b8:83:94:17:80:dd:6b:69:ec:14:98:1b:
8e:23:36:03:67:48:e6:3e:12:c3:3f:40:63:41:14:
fb:08:5e:8f:fa:24:4f:f5:13:6a:5b:86:14:f0:94:
3f:2b:07:ac:53:17:f3:96:02:22:7d:82:bc:b0:f4:
e5:f0:bb:4b:97:d1:3c:82:21:b9:bf:f6:ff:a1:5d:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EB:EC:FE:CB:7B:24:73:3A:D1:E7:68:35:16:A1:A8:67:45:0C:11
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f1:58:03:79:34:cd:c0:42:ee:49:73:35:26:06:67:56:22:
a4:9a:e4:4e:06:68:ea:f1:27:9c:cd:59:bb:c1:ed:06:ad:fe:
bf:f0:7e:cc:6b:ae:dd:d1:24:61:f3:64:ce:5c:60:64:c7:69:
df:1d:eb:c4:a7:ec:6f:24:06:be:76:60:6d:ae:8a:aa:ae:81:
f0:ba:df:6a:b1:ea:b7:d1:46:1d:51:da:fc:ad:7b:8a:dc:7a:
98:65:53:af:99:cc:1f:40:8c:89:ee:05:d9:29:7c:56:70:3e:
32:20:69:eb:d4:c7:49:44:c0:d0:5e:ab:fe:69:31:6b:4d:c2:
40:64:71:75:98:51:f0:5f:a8:b6:b9:a9:4f:ea:4c:35:26:8a:
c6:5a:fb:d2:ff:4a:c1:e5:f4:3c:3d:f1:fc:23:87:22:5a:fe:
58:c8:f0:73:24:8d:c7:c6:01:57:8a:37:96:6d:64:31:bd:ae:
a0:00:f7:3a:08:dd:40:65:1c:49:26:4d:09:b7:16:63:0b:8d:
da:cd:81:0e:d9:0c:3c:e6:19:46:d8:49:95:dc:30:d3:07:46:
73:9d:04:64:52:76:c3:16:82:34:21:f6:af:95:08:aa:2a:8a:
5a:1d:ba:03:ab:d9:38:a0:12:86:c4:e3:ba:4c:0a:17:ff:f8:
86:6a:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:40:55 2025 by rpki-client