Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: +NL/e6KlAVP11Of2ODOIcAdTy9pUu4AZfPM2hVOI5zQ=
Subject key identifier: 65:D2:A3:3D:2C:EB:C3:80:4C:CF:AF:E7:29:EB:A2:46:F0:8B:8D:98
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 0196A27730E9F56EB0C40E188CCF54777A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0C89
Signing time: Mon 05 May 2025 22:00:42 +0000
Manifest this update: Mon 05 May 2025 22:00:42 +0000
Manifest next update: Tue 06 May 2025 22:00:42 +0000
Files and hashes: 1: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: 9HmCS5ooxkilKfk4swVvS/eBvRRu4BfYE5XdQKbdSaE=)
2: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (hash: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=)
3: ouo267dSlLznMI9vKQqz-AZYNWg.roa (hash: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:30:e9:f5:6e:b0:c4:0e:18:8c:cf:54:77:7a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: May 5 22:00:42 2025 GMT
Not After : May 6 22:00:42 2025 GMT
Subject: CN=65d2a33d2cebc3804ccfafe729eba246f08b8d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:3d:b8:06:fc:8f:ed:c3:b5:19:ea:7a:9c:
ea:25:e0:a2:aa:80:7e:9a:f5:05:cf:cc:08:5d:1f:
91:67:20:6a:81:dc:4e:1f:02:04:1e:4a:16:43:fe:
ec:eb:38:c7:04:e7:04:7f:76:23:6a:48:76:88:28:
df:71:8b:2c:79:ca:51:c8:3d:23:b3:5d:a5:0e:90:
b1:c5:2e:49:1d:73:0f:4d:a6:0f:0a:58:38:3a:c5:
27:08:06:ef:01:39:4c:71:a3:d1:d8:2c:e5:4c:eb:
5f:3b:1f:a5:f7:0e:b8:cc:39:85:5e:f7:5a:95:70:
18:e3:59:13:35:87:6f:d8:8c:c4:74:b5:83:22:4e:
3f:3a:85:7e:ce:20:77:7b:29:49:04:9e:aa:db:91:
68:e6:7c:82:65:52:0b:3d:94:17:92:a2:1b:e8:43:
76:95:ad:5c:e0:e3:24:9e:f6:c3:73:57:a2:b8:7a:
77:74:79:ff:30:01:ea:74:e4:51:2e:4f:e3:98:f4:
31:ad:f6:74:6c:cf:53:ec:42:f9:4f:cb:a0:c5:a1:
11:1f:67:be:f7:55:7d:47:c0:de:9e:81:d1:3e:b4:
70:16:34:1d:7f:da:9c:22:e8:ff:1b:be:52:0c:82:
38:5d:14:f0:58:f6:ac:36:54:14:b9:d2:2f:12:d0:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D2:A3:3D:2C:EB:C3:80:4C:CF:AF:E7:29:EB:A2:46:F0:8B:8D:98
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2e:f9:49:f2:ee:dc:9d:72:7e:40:c8:1c:1a:ad:58:5c:e2:
bc:ca:2a:a4:da:bc:3e:e2:f9:14:d1:55:f8:01:7e:a1:ef:52:
64:00:aa:f2:f9:b3:f5:60:6d:a3:47:ed:b3:ad:10:63:37:4d:
aa:2e:aa:02:92:3f:79:fc:c9:34:e9:79:b7:13:08:a4:db:55:
98:42:87:99:40:a0:cf:2f:ff:2c:3d:da:f4:16:35:c9:b4:6e:
bc:45:21:8e:be:0f:79:df:0e:a1:bf:cc:9d:1c:32:01:3a:af:
a7:bc:12:c6:c8:65:34:87:24:96:8f:6f:dd:2a:32:63:0b:72:
10:0d:b5:27:73:bb:ce:91:e2:48:f5:88:79:80:0b:9e:4c:64:
19:4e:9b:a5:77:75:31:d5:b0:ad:93:b8:91:cd:79:73:16:c8:
9c:36:ca:f6:d4:1d:6c:6b:f8:3b:d2:bd:87:37:26:bb:04:31:
63:c9:81:fd:a1:6b:2f:3a:53:f2:59:b2:88:67:f5:f7:7f:8a:
f9:8a:b8:12:46:83:84:cb:e1:f9:32:21:88:f3:82:62:ce:3f:
64:6a:f0:d6:89:91:bd:3a:54:f0:85:06:13:54:f3:f2:23:08:
a7:5d:d0:38:9f:46:42:e9:9f:01:e4:1e:79:ba:74:2b:d2:03:
f6:61:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:17:15 2025 by rpki-client