Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
File: FDNseNUrqBFXQQArawcNEXrpv80.mft (raw, json)
Hash identifier: 2Vrw1Hq5k4eKbSx8I3OxRd37cgvFtg28YFYmfICN9KU=
Subject key identifier: 99:DD:B3:D9:1D:A9:DA:76:C5:93:9D:ED:A9:B2:31:5B:89:95:2E:F6
Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
Certificate issuer: /CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Certificate serial: 019640D4FB8D369C800434535302DCBC14F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
Manifest number: 108F
Signing time: Wed 16 Apr 2025 23:00:21 +0000
Manifest this update: Wed 16 Apr 2025 23:00:21 +0000
Manifest next update: Thu 17 Apr 2025 23:00:21 +0000
Files and hashes: 1: E3L5dg5X3rqNLqYU8O9X1WsszW4.roa (hash: OcbMuDrIfD/A7RNsLFSYw+FRN5f4hK+YArdJTnwQdlk=)
2: FDNseNUrqBFXQQArawcNEXrpv80.crl (hash: zioSK42u9+48A14wQYZSGC93NONiidoeFmU2CkEvhk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:d4:fb:8d:36:9c:80:04:34:53:53:02:dc:bc:14:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Validity
Not Before: Apr 16 23:00:21 2025 GMT
Not After : Apr 17 23:00:21 2025 GMT
Subject: CN=99ddb3d91da9da76c5939deda9b2315b89952ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:e8:51:cc:c0:f9:bf:6c:63:84:be:61:bc:
c5:b6:f8:12:b3:b9:79:54:4e:78:f2:63:80:47:d4:
e0:33:71:c5:61:af:bc:f2:ca:aa:25:88:18:d8:7f:
da:0f:e1:5e:68:49:ff:ba:d7:77:04:97:ca:86:73:
85:48:7e:c7:14:d0:70:d0:f9:e1:b4:5e:20:cf:88:
51:16:bd:ec:0b:51:1b:f3:f0:d6:55:c4:67:6a:8b:
1a:3c:84:c8:f0:62:85:42:9f:b5:50:44:ea:c2:55:
73:0d:8c:f7:07:92:b6:1a:39:d7:99:84:b3:b7:bc:
ee:4e:bc:43:a2:91:ec:82:3a:19:eb:53:40:5a:64:
d5:f7:b8:03:62:d5:37:73:29:55:92:7e:8c:67:1e:
f4:52:ce:cc:48:28:57:6b:ff:41:e3:d4:c8:b2:96:
be:66:80:0f:bd:14:75:db:51:c6:3f:bb:9f:21:f2:
e6:ec:5c:6f:2d:58:56:69:a3:8b:d5:87:e4:3e:a8:
98:03:f5:bd:4a:16:c2:78:38:52:c1:0c:8c:2b:c7:
ea:e3:ff:55:5f:11:47:1d:7b:05:74:5d:ad:19:f5:
7f:7a:8e:e5:aa:4c:dc:0f:2f:94:8d:e4:fb:25:3f:
d9:7e:73:8d:a6:4d:da:c8:e4:30:5b:32:66:ed:3c:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DD:B3:D9:1D:A9:DA:76:C5:93:9D:ED:A9:B2:31:5B:89:95:2E:F6
X509v3 Authority Key Identifier:
keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:87:0d:ff:b4:f1:69:02:d6:f2:db:c2:32:a0:03:74:7f:5b:
57:ae:63:7a:c1:14:1f:af:d8:2a:a8:3d:ec:bc:e0:3e:5e:d1:
b9:15:39:a1:12:81:77:04:39:50:73:fb:77:7b:f3:1a:23:d1:
2d:af:28:67:63:26:15:3a:c3:04:54:78:04:9a:21:66:f9:fe:
c3:80:9f:5a:13:8c:93:20:4f:51:ad:a6:69:8f:00:39:86:39:
e6:5a:29:2f:cc:36:95:3c:a0:d4:84:e4:87:cd:13:a2:9a:13:
0b:c5:b7:14:eb:45:d9:f1:d5:c3:fb:35:4b:26:83:d2:aa:84:
66:a7:7b:11:5c:e9:53:18:b3:6e:2d:fe:88:41:fc:c2:c2:33:
f9:3d:a1:de:e8:f7:71:05:2e:cf:c1:3a:b8:b3:03:db:ce:b4:
90:be:8a:e3:81:1e:d0:06:6c:0c:ab:9e:ec:26:f1:7f:41:84:
e6:99:24:8f:29:c4:d1:c4:3c:ae:c2:82:0b:48:db:f2:e9:1a:
12:06:b0:c1:82:31:47:99:3b:fb:2c:8a:b7:f4:38:07:f6:23:
9d:bd:f0:15:ae:c7:4b:55:85:36:eb:06:74:4a:b2:19:fd:cd:
49:94:41:04:6e:c7:c6:35:db:ad:6d:83:85:0f:40:8d:8a:c5:
b8:55:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:57:11 2025 by rpki-client