Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: sf5+X3CybR8lgTDjQpp8PQW3hUCInDAb7dJ6Pr7goxY=
Subject key identifier: 38:BE:59:4B:6D:EB:C2:7C:ED:99:63:9D:71:3B:4B:67:35:DF:57:28
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 0196BD125E604682568D7D331BA8F328DB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 0653
Signing time: Sun 11 May 2025 02:00:19 +0000
Manifest this update: Sun 11 May 2025 02:00:19 +0000
Manifest next update: Mon 12 May 2025 02:00:19 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: dEu9BeYiH4jzsqiIaPRtk0mFZiOpj5S87GTHiSK3wzM=)
2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:5e:60:46:82:56:8d:7d:33:1b:a8:f3:28:db:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: May 11 02:00:19 2025 GMT
Not After : May 12 02:00:19 2025 GMT
Subject: CN=38be594b6debc27ced99639d713b4b6735df5728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:eb:16:af:27:15:c5:9a:bd:b5:73:61:7c:
d1:82:d0:57:f0:8c:0d:96:f1:03:61:72:aa:9c:4e:
c7:49:4b:81:fb:4e:b6:ff:13:3d:16:83:f7:70:66:
5c:0b:0f:f1:56:0e:5e:09:9f:d8:fd:a1:84:ed:37:
86:b0:ae:f1:59:b4:ab:e9:02:3e:46:ac:16:c8:6e:
eb:c9:72:02:f0:b4:c5:e0:09:4d:b2:21:32:d1:9d:
89:ec:8a:67:60:e0:db:ea:9c:ae:f6:54:fb:c4:9e:
58:3b:45:53:13:90:00:dd:0b:e2:65:57:52:33:fa:
17:c0:e4:bd:ea:25:c6:6c:25:bf:f6:57:a9:f3:f4:
3a:39:17:9f:57:9c:a6:18:41:d9:9a:d7:5b:20:74:
ee:eb:47:67:9e:a8:d3:10:d7:6d:63:e6:dd:0c:82:
53:59:d5:05:8e:a7:76:6d:71:6e:08:c3:a8:3f:22:
e0:94:9e:df:e2:9d:32:e1:34:4b:cb:e9:6f:d3:3a:
78:75:7c:31:7c:7b:fa:89:09:19:6b:43:f8:d6:ff:
12:61:3a:d2:02:65:3b:93:61:66:6a:75:25:55:61:
7c:a1:45:9e:b0:81:88:eb:05:f0:aa:47:b9:79:ce:
92:26:ac:78:20:b1:6b:7c:b3:8c:66:9e:75:e7:e6:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BE:59:4B:6D:EB:C2:7C:ED:99:63:9D:71:3B:4B:67:35:DF:57:28
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:88:a1:ab:99:9f:98:c7:55:33:3e:67:a7:af:1a:d7:56:ec:
f7:23:e7:37:98:72:3e:d4:eb:45:be:f0:6e:d6:6b:00:79:77:
46:b9:02:1b:81:eb:86:44:c4:58:cf:e2:5e:5a:13:e4:e8:34:
22:5c:16:85:c0:fb:c1:1c:e2:8e:ad:73:50:62:35:24:f8:e4:
18:53:37:ac:04:0d:be:bb:79:a5:e8:6f:6a:6a:6b:5a:3d:c6:
a3:ad:80:12:d6:52:43:b0:46:a9:b6:ec:fb:9f:24:c8:65:84:
31:a7:3f:fd:0b:d7:c9:fa:01:62:eb:9b:be:a1:63:9c:97:33:
07:08:b6:d3:00:59:c0:61:9e:68:25:82:78:32:79:20:33:98:
31:ba:8d:c6:7c:fa:86:74:e2:56:83:be:ee:5e:04:d7:55:ab:
d7:61:4b:50:1a:e2:b6:69:73:0a:8d:8d:f1:45:e3:de:3e:e4:
25:dd:94:ea:7b:4c:de:76:24:84:2f:97:a5:90:6d:08:be:ee:
ee:b3:31:20:f6:7b:11:12:6d:6c:d3:76:2f:e9:de:14:34:c2:
85:a8:28:11:4d:e3:76:c1:df:ab:cf:a8:cc:bc:f4:19:ef:52:
7b:c7:e9:6a:d8:74:bf:ee:a3:98:a8:86:dc:eb:f2:2b:4f:11:
82:db:d7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:39:52 2025 by rpki-client