Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
File: FPsZA22DNH9Rl66gLaSmlbkYlYw.mft (raw, json)
Hash identifier: VJWxXbpnFy+1v3ERK7RZwOdQQuy97E5ZzEb8Bl6O3Pk=
Subject key identifier: AB:3F:89:3B:C3:A0:56:28:F5:38:A8:F8:54:72:9F:95:17:94:FE:7A
Authority key identifier: 14:FB:19:03:6D:83:34:7F:51:97:AE:A0:2D:A4:A6:95:B9:18:95:8C
Certificate issuer: /CN=14fb19036d83347f5197aea02da4a695b918958c
Certificate serial: 0196C5A7F4B0CCF71098B154449DC6C38635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
Manifest number: 040C
Signing time: Mon 12 May 2025 18:00:40 +0000
Manifest this update: Mon 12 May 2025 18:00:40 +0000
Manifest next update: Tue 13 May 2025 18:00:40 +0000
Files and hashes: 1: FPsZA22DNH9Rl66gLaSmlbkYlYw.crl (hash: Fs6JkaQh4Btsn4SPwdtuV0TxAzXymFXVGfadMmqZFpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:f4:b0:cc:f7:10:98:b1:54:44:9d:c6:c3:86:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb19036d83347f5197aea02da4a695b918958c
Validity
Not Before: May 12 18:00:40 2025 GMT
Not After : May 13 18:00:40 2025 GMT
Subject: CN=ab3f893bc3a05628f538a8f854729f951794fe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:6d:9b:95:c3:ad:db:61:fc:e2:d8:84:12:
ec:f9:17:77:30:ff:56:94:a5:5e:53:13:73:35:05:
a9:41:2e:93:8f:73:7e:0b:c6:16:b3:95:21:9c:62:
d3:f0:94:15:24:eb:e6:c4:eb:a9:30:5c:08:ca:55:
fe:78:0d:c1:42:81:11:0f:65:4b:52:e5:01:11:10:
b0:8f:d5:ca:d3:6a:fb:8b:4c:ac:b1:de:9e:1c:5b:
df:0c:d1:58:0a:60:39:84:7f:ea:84:04:52:c7:25:
76:27:94:2d:33:a3:78:08:1e:44:e3:5a:40:2d:a0:
21:06:ea:4d:5b:43:a1:45:92:70:03:96:e6:e9:74:
3c:3a:a6:72:3d:b1:9e:ca:a4:bb:54:e6:d1:ce:97:
18:43:46:9f:a5:7f:5d:43:fb:9e:15:82:01:d4:6c:
77:dd:cf:f6:6c:92:75:48:63:b2:69:79:1f:b4:1c:
b2:09:bc:3a:55:61:55:6e:bd:80:d9:fd:c4:57:7e:
b7:11:fe:80:14:b1:60:81:c6:20:44:e5:df:ca:ae:
20:36:dc:56:49:bc:7b:61:98:22:48:f6:59:28:c2:
86:69:38:f8:2e:9a:8c:cb:42:4d:21:86:03:af:d6:
31:a8:eb:ef:5d:5c:9f:f0:ed:68:83:f1:96:dc:62:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3F:89:3B:C3:A0:56:28:F5:38:A8:F8:54:72:9F:95:17:94:FE:7A
X509v3 Authority Key Identifier:
keyid:14:FB:19:03:6D:83:34:7F:51:97:AE:A0:2D:A4:A6:95:B9:18:95:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:81:16:8e:6f:57:c4:ef:4f:f0:5b:eb:fa:bf:b8:fe:46:3d:
71:16:7d:58:27:e6:05:df:d7:52:7f:de:87:33:11:db:ba:91:
31:41:0c:7c:24:50:29:1c:de:f6:4b:4a:a0:c0:21:36:fb:36:
13:80:7c:76:c9:61:98:72:08:df:8d:ac:ed:2a:66:03:20:ca:
4e:8e:8a:6d:92:07:ce:64:a3:f5:73:e8:7c:14:93:b2:41:10:
c1:97:67:19:47:e0:03:c5:9e:5c:b3:cb:8a:38:b6:ef:0a:fe:
1c:ac:bd:c2:df:9b:de:d8:c7:23:90:de:1f:49:cf:9a:92:a5:
65:1e:97:22:40:9f:1f:9d:3e:48:34:4e:dd:19:52:74:cb:68:
9f:c0:18:47:7a:f8:ed:0b:34:83:e5:d2:87:27:ca:51:57:3f:
3c:6d:bf:c5:26:83:7c:ee:3c:99:5e:0b:92:a6:df:b9:d9:88:
57:d1:88:30:3b:e6:d2:d1:80:36:2d:29:5e:84:da:af:f0:18:
e1:d5:32:6d:4d:e5:6b:2b:80:8d:52:86:5e:2c:ed:65:7e:dc:
8c:e8:6f:b5:01:f4:1a:53:6d:76:70:89:26:5d:35:57:cf:62:
2d:29:49:32:50:cd:19:34:58:2b:6e:e0:82:72:ea:19:c5:e5:
2e:32:74:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:17:40 2025 by rpki-client