Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
File: FpedN9oBar0TJ5JwulXWs8KWBXg.mft (raw, json)
Hash identifier: d9GhM5Flq2/2Mlfq15FgwlEMnj9XtFVs/36BlyVDWc0=
Subject key identifier: E2:A4:5A:E9:04:F5:D8:B7:EE:BC:5A:C2:64:D1:29:A8:C6:11:AF:50
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 01963FC2356ABA957246F3B13022433389F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
Manifest number: 13CE
Signing time: Wed 16 Apr 2025 18:00:14 +0000
Manifest this update: Wed 16 Apr 2025 18:00:14 +0000
Manifest next update: Thu 17 Apr 2025 18:00:14 +0000
Files and hashes: 1: FpedN9oBar0TJ5JwulXWs8KWBXg.crl (hash: 2ESWKvMHovtMyhhOszvji7jo3ZpFuGQLDNdmnDs1piA=)
2: PPUYZlg6H0XwL9T7p9j25_C1QJ0.roa (hash: ocscl0Gbeg5aCVZzJomKYL7Dzdpg0U688ymNmvZ0gWI=)
3: b62zrr5wzYN2MOAEsHfWSMG7FHQ.roa (hash: QoQnJbFutWiN0bVjBSQujyBlpWiG4wn++jIZ23iyHu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:35:6a:ba:95:72:46:f3:b1:30:22:43:33:89:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Apr 16 18:00:14 2025 GMT
Not After : Apr 17 18:00:14 2025 GMT
Subject: CN=e2a45ae904f5d8b7eebc5ac264d129a8c611af50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:62:9f:81:9a:ac:2b:e8:99:66:bf:4c:fc:
71:91:b9:39:4c:2f:e6:1c:b0:ea:e3:08:da:94:7d:
04:64:62:7a:93:fc:5d:3a:62:b8:28:5b:98:1a:ab:
f0:a8:c7:d6:f3:78:6d:6a:70:b0:b2:1b:8d:98:fb:
7c:84:b1:e9:34:a3:80:7d:5b:f0:68:6e:c8:c5:e3:
e8:21:f7:54:8a:0c:32:bb:38:ac:a5:cc:79:e4:f9:
78:30:a5:eb:df:32:e1:ac:bb:e0:f8:a3:08:24:d5:
db:6e:40:c5:8f:8c:68:cd:79:e2:7a:9e:60:a5:2f:
9b:5e:53:35:36:53:97:cc:ca:c8:7e:de:ef:f7:e6:
c0:0f:b9:f1:a7:5b:ba:25:42:81:0a:23:80:50:47:
ed:15:a1:b0:96:72:55:a7:bf:c3:ff:ca:43:d6:4d:
8b:3c:06:c4:75:25:d5:03:f2:0f:63:54:85:d0:66:
4c:01:41:2a:86:95:9f:71:7c:d9:ea:28:53:23:2d:
28:22:ab:d4:bd:95:6e:ce:6a:c0:5b:5e:66:07:ee:
4d:c5:59:de:f6:e3:49:44:05:f0:1b:a4:14:d3:2e:
e3:31:4c:07:d0:90:cc:29:ef:2c:5c:99:00:5a:5c:
85:98:7d:a2:f9:83:bc:28:a1:23:94:58:29:d6:44:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A4:5A:E9:04:F5:D8:B7:EE:BC:5A:C2:64:D1:29:A8:C6:11:AF:50
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e3:86:3b:0a:22:45:85:31:85:20:b2:f0:f2:fc:83:8a:a9:
13:b4:3f:6e:2e:94:a6:37:61:30:af:5d:68:a3:67:88:54:f4:
46:c7:88:a7:fa:bb:00:39:48:51:6c:77:78:17:e6:31:06:33:
c9:d1:09:7b:8e:45:ca:55:87:3b:03:e9:98:f7:ea:0f:19:c9:
b0:bf:58:47:30:00:6a:ad:a2:d8:57:20:4f:e8:f5:3f:0f:72:
c7:28:14:db:53:d6:f3:a1:3d:66:5a:8f:66:f7:30:09:09:7c:
1e:5f:b0:ad:e6:5a:16:df:de:0a:81:70:9c:52:66:30:fc:f1:
41:ce:1d:34:e6:86:ea:90:7d:55:f7:77:a8:e4:09:2c:ad:4c:
8f:2a:b3:e8:45:de:73:3c:6a:89:d4:3b:4f:06:82:a3:2b:f4:
a6:f7:6c:41:de:00:62:2f:a1:49:02:59:7c:fc:af:87:24:f8:
13:7a:b5:36:1e:d0:58:b4:13:a7:4e:e8:c8:0c:fa:ed:12:a0:
b3:4d:ad:f9:3c:ae:02:ab:12:42:09:65:8f:a1:ec:12:76:ff:
23:5f:77:e8:4e:b5:15:c8:ed:8a:c3:7f:f9:6b:76:ac:62:99:
7a:29:e3:d2:76:ed:b8:d4:17:77:bc:39:f1:b4:c8:f1:ad:01:
b7:6c:3c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:34:34 2025 by rpki-client