Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: w3y/baF3hxhQGmqNXOEkvCF8ZHEHJQ2E9xoeozsM+0M=
Subject key identifier: FB:D5:A4:01:DD:65:28:A0:A5:9A:64:E2:2D:68:B8:F6:07:31:8F:1E
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 0196BA7F917955C9E5FD389E6CD969B3B4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 11C6
Signing time: Sat 10 May 2025 14:00:44 +0000
Manifest this update: Sat 10 May 2025 14:00:44 +0000
Manifest next update: Sun 11 May 2025 14:00:44 +0000
Files and hashes: 1: 52KUDdFP_rD3RmJYr6LMpUPEMmM.roa (hash: usibkDt6eCnub+7x6EZqrdrQgsmz6UQ+udh3uzbsAi0=)
2: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: FmpRjLgtEGqAZ/m4VXOzBU53lkPig2XS9gffBXSpLT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:91:79:55:c9:e5:fd:38:9e:6c:d9:69:b3:b4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: May 10 14:00:44 2025 GMT
Not After : May 11 14:00:44 2025 GMT
Subject: CN=fbd5a401dd6528a0a59a64e22d68b8f607318f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:cc:eb:1c:d5:3a:5c:74:76:79:20:cf:6d:
97:d5:ae:23:49:52:40:ac:ac:a4:c1:03:1a:c5:f1:
83:a1:c6:07:41:60:96:2b:ec:fd:e5:b6:35:ed:e9:
37:be:d5:d1:27:04:16:de:32:65:9a:5b:a4:03:d1:
7d:3d:95:b5:ab:1e:46:aa:8f:ba:70:a8:7c:0d:0a:
55:20:62:56:6f:93:6b:00:7f:cb:3f:e1:5a:46:36:
a4:9f:e9:6e:8b:4b:4d:4b:24:0f:41:3f:48:5d:42:
73:93:cb:92:17:34:ed:26:dd:ec:87:f8:d1:00:04:
7f:f3:97:e6:e1:48:2f:27:cc:57:d7:73:48:40:79:
78:c7:50:1e:85:3f:ad:40:79:14:67:74:44:b7:89:
0b:d7:68:e8:0c:df:1b:66:c8:47:ab:b8:d3:cd:f5:
21:af:03:35:3a:af:a3:b6:d5:9c:62:c8:cd:e7:23:
cc:c5:ca:48:8a:62:47:94:52:69:40:05:16:65:78:
5c:56:1d:fe:40:c2:3e:8e:12:8e:c7:c1:39:c6:fd:
30:12:cc:e1:e7:e0:ad:2f:c0:51:ea:f8:62:ae:ef:
5b:86:65:e5:18:ef:cb:91:49:01:d0:43:c7:cf:22:
a2:39:09:3b:79:b0:14:15:e3:c5:91:c6:c5:27:3f:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D5:A4:01:DD:65:28:A0:A5:9A:64:E2:2D:68:B8:F6:07:31:8F:1E
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:36:21:4a:f8:d2:18:76:dd:77:ab:e9:90:79:a7:be:77:6c:
86:58:e5:c4:e8:e9:3a:1b:74:e9:09:c7:61:09:55:d8:2f:d3:
b0:53:f1:09:70:cb:85:f6:3f:c8:8a:73:80:e7:5d:41:6a:74:
44:25:f9:4e:84:65:0b:3a:c1:c7:74:14:85:4d:2e:93:88:6f:
9a:ef:ea:7a:11:e9:fa:86:f4:7f:23:8e:43:13:cc:ac:a5:3d:
60:d4:40:ce:10:0b:1a:3c:c4:19:4e:d7:31:c8:23:e2:a2:05:
a7:c3:e1:5c:ad:80:26:e5:60:a1:59:a5:90:3b:23:87:14:89:
ea:bb:48:02:4c:18:36:69:39:40:41:a2:8b:12:0a:7f:36:c1:
49:b4:a5:dc:9e:d4:ad:8c:ca:ff:12:69:d3:a4:62:c1:62:d2:
bc:53:8e:5b:c5:12:fb:f6:4b:8f:05:93:02:8f:92:ad:51:3f:
54:9f:9f:77:08:ea:81:26:be:d0:df:17:a6:f7:6e:39:c1:e0:
bd:be:14:f0:fb:4e:fa:c3:25:ca:10:76:c1:50:a3:d2:60:5d:
af:81:12:b2:65:9e:b8:f2:a8:c1:64:0d:70:80:a9:00:10:a3:
49:88:1d:5a:47:bb:c0:bb:86:9f:12:86:e0:10:24:65:b8:ff:
ff:2a:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:55:33 2025 by rpki-client