Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: ArO0oHMxnuVu4IWfCex7pawGVc0ZVPrHIOO76MOjt9U=
Subject key identifier: F4:1C:FE:31:AC:B1:AD:CB:A4:0B:99:2B:FE:DC:D0:FE:86:3B:04:94
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 01965492C71F9F7EC99E45D0F8420E0325AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 19:00:27 +0000
Manifest this update: Sun 20 Apr 2025 19:00:27 +0000
Manifest next update: Mon 21 Apr 2025 19:00:27 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: 5WE+Nf3+UFDzAEb7dEvxVwL7xDGC98d2sx9uzgi7g6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:c7:1f:9f:7e:c9:9e:45:d0:f8:42:0e:03:25:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: Apr 20 19:00:27 2025 GMT
Not After : Apr 21 19:00:27 2025 GMT
Subject: CN=f41cfe31acb1adcba40b992bfedcd0fe863b0494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:5a:56:b7:13:9a:10:64:14:fc:71:3e:42:
7c:4b:12:cb:c1:cc:a7:b8:d6:7d:9d:af:9b:70:d5:
81:0f:81:78:b1:6a:7d:4f:8b:d8:f2:f6:96:e0:37:
e6:93:88:0f:59:b7:53:94:f2:5c:d0:34:27:59:c6:
20:ef:3f:7e:b4:d0:62:90:2d:68:65:d2:df:78:72:
bd:1f:b5:a5:bc:12:b0:04:98:dc:87:c2:0a:4b:c6:
a6:02:10:63:e8:c7:5d:d6:b1:46:3c:32:6b:27:d3:
11:cc:28:cd:fa:f2:bd:50:7d:4e:73:13:78:c4:23:
4c:29:ce:11:32:9a:5e:6b:bb:fe:31:88:a1:72:9c:
ec:38:7a:be:e2:df:fb:f9:81:82:ba:93:9d:16:d2:
24:24:f4:bb:f6:c1:d1:c4:57:82:16:37:42:e7:9b:
dd:bf:de:b0:2b:74:8b:26:27:3d:6e:1d:88:77:dd:
4a:3e:e0:28:8c:9f:24:9e:21:9e:49:53:dc:65:f1:
6d:5e:00:2f:de:e0:58:41:55:a0:ce:8f:55:dc:e0:
7d:54:d9:f6:1f:d7:c5:f9:ea:af:b8:15:c1:cd:36:
47:f7:64:ba:2c:4d:7b:82:54:ab:31:be:9d:14:c7:
b0:8a:6a:1c:9b:d9:8f:bb:51:c9:52:e2:55:ac:57:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1C:FE:31:AC:B1:AD:CB:A4:0B:99:2B:FE:DC:D0:FE:86:3B:04:94
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b3:28:30:ee:7b:11:41:ed:53:13:d0:88:5e:e4:63:62:74:
1f:69:39:6c:28:6e:37:97:5b:77:b8:a4:8d:8e:21:88:41:4e:
fe:ba:fd:cb:f2:64:a1:c8:3e:25:8e:66:f9:f4:e4:05:a0:6b:
5e:38:76:2e:4e:9e:92:58:4f:10:84:f9:87:6d:d0:a8:23:6f:
f3:69:d1:b0:ef:52:4e:4f:e4:98:53:3d:d0:d8:56:82:37:2d:
68:ce:e2:b1:92:5e:f1:a3:3d:e1:12:5b:12:44:a3:ae:d0:eb:
e0:e3:97:27:7c:b8:1c:99:63:1e:05:bf:0f:fa:ca:36:b3:73:
1a:ea:16:19:55:77:cd:aa:70:8f:a1:a0:bd:9c:ee:f4:ce:e1:
ae:1c:04:99:c8:85:d1:ca:ee:dc:3f:74:ef:92:36:87:43:4f:
1b:07:fd:ce:b5:bc:e2:1a:64:ad:43:30:79:d8:cd:1e:e0:d6:
4f:6e:52:bb:a2:6a:a6:d7:29:97:61:38:8c:73:56:cf:86:52:
49:fc:41:f0:35:d8:cb:4f:c2:2c:8a:0a:43:83:54:72:7e:83:
e6:35:c8:cd:5c:d3:0b:a8:b9:8a:d9:cc:ae:6f:92:61:b0:06:
de:e0:e7:99:5e:49:a9:5d:88:c3:27:27:0c:ae:76:12:4f:e9:
22:2d:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:32:44 2025 by rpki-client