Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
File: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft (raw, json)
Hash identifier: 3xfB6MQsDBZoZqCLlrpECvhp4CCoVxTlfbURQ1tmU7g=
Subject key identifier: 56:2E:BB:89:6C:8A:35:09:7D:37:CF:4D:9D:4C:54:98:17:4F:11:8D
Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
Certificate issuer: /CN=1571e6684306b748156c2ae3f420bb366b2efcee
Certificate serial: 019658A6BCE233DB0295099CFC749BAA2E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
Manifest number: 06BE
Signing time: Mon 21 Apr 2025 14:00:44 +0000
Manifest this update: Mon 21 Apr 2025 14:00:44 +0000
Manifest next update: Tue 22 Apr 2025 14:00:44 +0000
Files and hashes: 1: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl (hash: ZU9swBv+srzSu5SnHp+Pv+0nFtOYOOf+U6b/yQsXWLU=)
2: kpSxAGf-JEobwBlUTuy9w2kq9CQ.roa (hash: g89MP8+0dMYS7AxnUtFPb35wq3oTVlO8M0aQrm02TxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:bc:e2:33:db:02:95:09:9c:fc:74:9b:aa:2e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee
Validity
Not Before: Apr 21 14:00:44 2025 GMT
Not After : Apr 22 14:00:44 2025 GMT
Subject: CN=562ebb896c8a35097d37cf4d9d4c5498174f118d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:83:82:95:2a:6c:99:9e:f4:a4:ac:5d:0d:
54:a0:e1:e5:cd:fe:22:05:9b:c2:22:17:c0:76:2f:
10:2d:ce:6a:8c:c0:43:a4:f5:05:05:0e:54:fd:31:
a1:5b:8a:7b:7f:dc:55:92:9c:3a:58:bd:fe:29:37:
df:74:64:e4:a3:3e:d0:d7:66:7f:0c:ef:d0:ba:aa:
a6:d1:50:32:2e:1b:5f:35:75:aa:29:c9:d8:32:6d:
c5:6b:6f:c7:43:0a:35:68:d1:c8:8e:2a:74:93:4e:
24:e2:50:02:80:13:ff:5d:b3:29:ac:d0:05:fd:7f:
59:df:5e:c4:d6:11:5f:27:f3:65:97:79:3b:1b:2c:
9a:fe:ff:91:a5:2a:62:ec:c1:51:75:37:c5:46:dd:
0f:bb:dc:ff:71:cd:54:e3:e1:5d:40:dc:b7:dd:0a:
75:e7:89:de:4d:62:d4:72:9d:ac:f0:28:27:b5:e2:
41:93:81:6e:c8:9e:ba:0a:4b:eb:53:96:f0:7c:ce:
cd:4a:17:44:f6:b0:da:f8:3d:5e:12:0e:cb:5f:18:
2d:81:5f:12:a4:10:43:25:e3:52:40:0d:9b:20:87:
c4:16:72:bc:1b:5d:be:20:6a:ac:03:35:48:c6:b9:
ea:c0:17:80:db:aa:67:fa:2e:2b:5e:45:5a:21:1b:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2E:BB:89:6C:8A:35:09:7D:37:CF:4D:9D:4C:54:98:17:4F:11:8D
X509v3 Authority Key Identifier:
keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d5:9a:89:9a:2a:68:50:da:ed:6e:6e:10:b1:32:ca:23:d5:
26:f1:66:ca:40:c2:44:3d:5e:33:fb:76:43:c8:2f:7e:4b:6f:
06:70:b2:e7:f6:5d:18:d9:c7:85:15:ae:5f:2f:a9:35:5f:a5:
04:4c:ae:87:c4:93:5a:ae:d5:ae:4c:8d:6e:ea:99:19:9a:50:
81:f6:46:87:76:e9:44:6d:07:84:de:29:f6:92:eb:3c:a0:e8:
2d:c7:ec:79:0a:2d:f9:de:65:4f:f1:c5:b7:4d:9b:48:fa:1b:
8a:5b:7b:dd:b7:d7:d1:f5:ed:19:49:b5:a6:be:a8:33:99:c3:
9c:1c:de:f5:a8:1a:2a:34:f3:4d:d6:f9:e0:ca:95:4d:38:23:
00:cd:98:56:f5:24:7f:51:20:1a:02:6d:2d:31:41:1e:55:60:
38:5a:e7:db:36:4c:81:d9:a8:57:e8:71:58:f8:76:bd:29:22:
d6:64:0d:d8:de:27:8c:7b:20:d8:d9:02:8d:dd:53:3c:d3:25:
f4:01:7a:01:64:b9:63:b1:f3:7b:b2:77:2c:d2:19:50:ac:a3:
8e:bf:a7:19:83:2b:d6:77:80:e6:0e:0d:f5:25:2e:3f:c4:3a:
eb:1d:1d:e7:d0:44:b0:ae:23:0f:df:6e:79:10:b3:2c:c7:57:
ec:96:14:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:46:22 2025 by rpki-client