Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier: OiekNS8EW+Ks5ior/Nq87yalKN8j2sLIQsZcq0US5gk=
Subject key identifier: 2C:FB:1A:7E:E1:B0:11:16:23:AC:23:1D:06:B0:14:DA:10:CE:9D:D6
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial: 0196B635230B55E87D83567F274991D26898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number: 1036
Signing time: Fri 09 May 2025 18:00:57 +0000
Manifest this update: Fri 09 May 2025 18:00:57 +0000
Manifest next update: Sat 10 May 2025 18:00:57 +0000
Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: /yAv1nT648jkmTMwjf07HzpktUrc6tPzG2UeTqngGCY=)
2: HD1uPet-iIu7hW_120IFu9su76s.roa (hash: vFNL8ghAlqPTrA8jGEs+I7hRSyNODsDNbh5CwQDUvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:35:23:0b:55:e8:7d:83:56:7f:27:49:91:d2:68:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Validity
Not Before: May 9 18:00:57 2025 GMT
Not After : May 10 18:00:57 2025 GMT
Subject: CN=2cfb1a7ee1b0111623ac231d06b014da10ce9dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9e:8e:33:ba:de:cb:ab:5f:67:0d:bc:c1:72:
ea:cc:e4:46:e3:ca:59:df:e2:ed:81:ca:5a:ac:c1:
4d:50:c1:1a:b1:85:77:b8:66:88:13:f9:c2:dd:be:
a4:13:05:2d:c9:39:da:42:1e:02:1f:c1:12:d6:e8:
ee:7b:57:52:f0:7a:00:36:b4:6f:8c:e0:76:d2:cf:
6c:53:f9:fe:d2:e8:86:01:40:40:04:26:5c:13:22:
9a:5c:d3:f0:d6:20:6a:16:ce:1f:ce:37:d2:59:81:
cc:6a:9e:01:5a:e8:e4:e6:8d:23:be:04:4d:e5:f2:
ee:04:fc:3e:a2:51:bf:a6:1d:d1:da:19:c7:1e:f6:
78:a7:93:45:f8:dc:31:0d:1b:27:b0:33:72:58:4c:
e6:ed:a4:c7:99:82:47:83:1a:a6:80:bb:52:5d:ad:
da:30:49:91:e5:cb:dc:5f:25:5e:a5:5d:9e:b2:0b:
41:39:03:6d:e0:68:87:12:ce:f5:0a:93:5b:5c:82:
b7:08:b5:64:42:32:75:da:9c:1c:41:59:db:c3:82:
c8:69:7e:15:8e:37:bb:d7:4b:de:a4:bb:98:63:73:
89:d6:65:5a:9f:4b:02:78:6c:e7:ca:ae:8f:d6:c6:
66:87:39:7b:93:b1:82:9a:9c:a8:df:40:50:c2:3a:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FB:1A:7E:E1:B0:11:16:23:AC:23:1D:06:B0:14:DA:10:CE:9D:D6
X509v3 Authority Key Identifier:
keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:34:29:73:f0:20:6a:7d:0b:27:74:8a:41:7a:b1:49:99:b9:
18:92:aa:11:77:67:9d:e9:86:26:76:3f:c7:bd:0d:6b:5f:03:
4a:f2:f9:1e:b6:58:53:1a:b1:5e:36:4e:66:e2:94:b4:90:d2:
32:f4:10:20:20:d7:d9:8c:27:27:b6:d6:75:38:19:79:a8:ec:
d2:62:ca:61:2d:28:3d:71:87:42:9f:6a:6c:50:35:f9:6a:39:
8a:e5:64:63:55:3c:84:a4:39:cb:c9:3b:8c:62:cc:66:5d:53:
ce:cc:e6:be:02:89:17:c1:65:b9:24:b5:d9:4b:63:95:19:bf:
eb:a2:86:cf:f0:3e:c3:ce:f3:ed:fa:9e:ea:f3:4b:18:48:e4:
60:d6:4f:95:a8:c9:88:b0:16:68:b3:a4:2a:fc:aa:ba:93:e8:
2e:f4:e2:d5:48:b2:67:c8:3f:2e:2d:0c:ae:d4:84:95:97:a7:
d5:f6:47:d0:e0:4a:3b:69:19:29:3f:d0:26:aa:f8:a2:15:92:
6e:3a:90:de:db:89:10:4e:9f:8e:97:bb:8e:09:44:ee:26:56:
ee:d6:e1:28:e5:c2:86:97:a6:28:36:4d:19:57:85:4e:4c:71:
a6:f0:9c:1b:83:73:05:2e:1d:35:97:a9:3b:70:18:1b:88:14:
80:82:6c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:34:32 2025 by rpki-client