Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: 9obrZGusj52shz3VP27RAykuvicO/aUQ1nJTvG0M3oc=
Subject key identifier: 95:A1:BD:45:9C:3A:DC:EC:D9:0E:23:C9:B2:D7:2C:2C:07:F6:45:C1
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 0196433154A89C4988FBACACAB3AA8E69DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 1460
Signing time: Thu 17 Apr 2025 10:00:28 +0000
Manifest this update: Thu 17 Apr 2025 10:00:28 +0000
Manifest next update: Fri 18 Apr 2025 10:00:28 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: +tvOr845v3xf3sonIcuN6JffteXFj6S+5KPh+Z2an8Y=)
2: kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa (hash: K3F9IA4gy3lGNBan+gMrBm2P+dEVmz4mQ6ObmV/2TV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:31:54:a8:9c:49:88:fb:ac:ac:ab:3a:a8:e6:9d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Apr 17 10:00:28 2025 GMT
Not After : Apr 18 10:00:28 2025 GMT
Subject: CN=95a1bd459c3adcecd90e23c9b2d72c2c07f645c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:03:60:98:c2:8e:a6:cf:60:a3:41:4b:c6:
ee:54:11:eb:d9:43:cf:7b:9b:9e:12:fd:f9:aa:18:
4e:43:04:21:bf:fb:a6:76:a9:38:78:4b:67:35:2d:
d9:35:a2:f5:45:a6:69:70:f8:6b:3a:c0:88:58:28:
e0:2e:2d:0f:d1:57:54:8e:ec:1a:78:00:ad:d8:15:
f7:38:9f:32:49:89:82:15:46:f8:1b:88:eb:6b:25:
32:a0:5c:27:3c:c5:b6:9b:8d:ab:5f:0c:f9:3c:a5:
1f:d8:28:bc:6a:f3:31:14:13:2c:f0:d3:4c:8d:0b:
4b:0e:c9:3a:ab:ad:16:eb:7e:5e:74:f0:fd:ab:1c:
84:58:67:87:e8:b1:07:a5:8d:fd:51:e0:97:3e:ab:
60:fb:43:c3:ef:4c:61:6b:6f:66:df:b7:73:a0:6c:
c9:83:b4:86:b9:ca:1e:60:a8:8f:2e:85:a4:fd:59:
34:da:ec:04:e8:cd:ef:b8:f5:8a:2a:73:dd:fe:86:
a1:90:10:19:6d:7c:28:7e:61:1f:10:b2:b9:6e:02:
b3:13:a9:36:da:76:4b:a3:ff:84:f0:e6:cc:74:49:
48:74:c2:33:73:93:e2:1d:92:b5:34:90:de:ad:dc:
6b:47:b0:bc:3f:33:90:fb:fc:e7:4b:cb:82:bf:17:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A1:BD:45:9C:3A:DC:EC:D9:0E:23:C9:B2:D7:2C:2C:07:F6:45:C1
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:20:b2:07:30:b1:f8:5c:04:13:bc:a0:3b:81:b5:50:3f:68:
e3:8f:ac:ff:1c:58:89:f4:7d:25:5f:9f:02:27:b6:60:fd:14:
11:52:31:6a:b6:a3:32:c4:65:ef:bc:3a:7c:77:4b:b8:f4:00:
3d:dd:e2:85:d2:a7:80:cf:a9:16:51:69:1b:db:4d:9d:e3:54:
34:cb:de:26:14:0a:09:80:b1:0f:1a:15:19:03:15:19:12:0f:
a2:cd:f5:61:cf:19:ea:8d:45:4e:b7:22:4a:31:f1:b3:1c:bd:
07:ae:c7:f1:4c:e3:d5:ce:72:29:13:ac:26:2c:9d:9c:3e:5d:
56:f2:0d:c9:7e:b5:81:c9:19:a4:7b:0a:c7:54:2b:44:36:2d:
93:33:9e:13:cc:5a:56:70:51:07:6a:cb:85:ac:be:d2:6a:75:
95:43:ff:77:d3:8e:99:74:23:9e:cd:34:e3:f2:bf:d8:fb:85:
fa:4c:b5:00:9e:2d:cd:bd:5b:cb:19:7b:61:0e:5d:a1:82:86:
70:f8:d0:bd:c6:e2:43:9f:f9:06:66:b3:07:4d:b2:df:b6:32:
f8:8e:47:0f:bc:6a:db:61:cb:ca:d3:31:a6:99:d1:7b:f2:85:
5b:b9:bd:aa:2d:dc:f6:93:55:cf:b6:a5:32:28:3c:fb:67:55:
03:9e:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:28:23 2025 by rpki-client