Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: J/qg/Hj+CvzA1PMAsm5HyJEJ72ZvoGATSC7Jqz0+vSA=
Subject key identifier: 8A:08:BF:6A:F3:0E:14:66:27:18:12:87:2A:33:1F:7A:06:5D:05:30
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 0196AFFC11ECE6568AD5A6DE0281C959BCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 14C1
Signing time: Thu 08 May 2025 13:00:54 +0000
Manifest this update: Thu 08 May 2025 13:00:54 +0000
Manifest next update: Fri 09 May 2025 13:00:54 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: ClZok+ZGA036XtRxBAepuchOo0r+RMrroDcsL6TdU54=)
2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:11:ec:e6:56:8a:d5:a6:de:02:81:c9:59:bc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: May 8 13:00:54 2025 GMT
Not After : May 9 13:00:54 2025 GMT
Subject: CN=8a08bf6af30e1466271812872a331f7a065d0530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:c7:7d:9f:ba:d4:2b:b4:73:6c:95:27:95:
b6:dd:32:5e:cc:8a:79:1b:15:4c:35:36:61:b7:4f:
02:45:ed:ba:01:34:34:71:12:a7:fa:ac:a6:7c:ad:
51:a2:f8:29:19:60:3a:84:d5:55:fd:71:4c:46:c6:
2b:27:6e:af:d8:a7:ba:65:3f:a4:25:d6:82:d8:24:
c6:fc:1c:0f:c0:c4:68:9c:46:fd:62:be:11:93:b5:
de:d4:89:3f:f0:15:49:05:9f:ac:9d:19:1f:b8:77:
f9:ad:83:82:ea:19:cd:76:5c:e8:59:d6:b7:08:58:
67:1e:a3:9f:84:d6:91:66:f3:16:7f:9f:09:a4:ac:
29:81:29:05:0f:e2:35:61:f6:8e:37:62:4d:d1:47:
04:9d:24:da:17:6f:0c:05:d4:62:ba:53:7c:88:e7:
ee:22:9b:f6:0b:89:1c:5c:c8:72:fd:c0:d3:7f:40:
17:9f:a6:85:48:0b:b3:00:d3:90:2a:7a:9b:32:58:
cc:8b:ef:10:19:88:24:9c:43:62:1f:1e:57:e3:b4:
62:94:16:ce:19:cd:ba:80:ea:82:39:fe:50:54:4e:
7f:91:14:bc:0e:56:1a:e6:90:c1:2e:6b:55:33:ea:
50:c1:ae:ee:45:37:54:f7:c4:f5:2f:c1:8e:d1:54:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:08:BF:6A:F3:0E:14:66:27:18:12:87:2A:33:1F:7A:06:5D:05:30
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b0:d3:f7:95:5b:05:e4:48:9d:cf:04:71:6d:c5:af:35:4a:
69:b7:7e:b8:47:e3:58:79:b2:9d:8b:9b:15:a9:03:89:4b:7b:
3c:39:88:d0:93:44:02:6f:b5:b2:b7:c8:fc:47:ba:79:14:c8:
9e:36:5c:47:cf:e0:69:71:4c:2a:18:48:64:73:a9:00:48:6b:
41:e0:4a:11:08:6d:ab:6f:5d:dd:a6:e2:84:f8:77:af:ea:4a:
5a:6a:93:19:17:89:a3:f6:87:9e:b6:fc:c3:85:dc:51:26:77:
e2:95:8d:60:7d:19:5c:60:fa:42:b4:e0:15:da:88:2e:ed:68:
7d:af:e7:58:28:2d:b8:b5:85:c5:fd:c3:e5:7d:87:ff:5b:77:
41:1b:86:1e:3c:02:45:05:76:c1:52:2f:b5:73:64:0f:39:c1:
73:d2:02:7b:b4:d7:00:81:32:0e:15:15:ab:c8:f5:11:35:4a:
e5:c7:70:25:dc:b5:d2:9e:4b:0a:30:17:1a:15:c4:9d:34:64:
59:f1:a6:8e:8b:9c:db:67:10:c5:b0:9b:23:91:92:b6:40:9a:
22:b7:50:ea:e6:6b:2c:03:c8:eb:e9:9d:08:24:b1:9f:b8:89:
c2:21:c1:e1:66:f4:32:ea:ef:ee:79:db:9e:a6:4b:7a:9a:ad:
02:0e:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:59:39 2025 by rpki-client