Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File: fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier: /9wszHmL88bRA+S4lNefgNO75tzsVplfNX92Vb2QVkM=
Subject key identifier: 85:B2:2A:46:5F:D0:70:A8:8A:5A:A1:3C:53:D7:6A:5A:9C:CF:98:EE
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer: /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial: 0196BDEE6034DF491D1E567614A54CBB6A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number: 021B
Signing time: Sun 11 May 2025 06:00:38 +0000
Manifest this update: Sun 11 May 2025 06:00:38 +0000
Manifest next update: Mon 12 May 2025 06:00:38 +0000
Files and hashes: 1: 82ywaE3JFKydhCtiLwP3kX3cHw4.roa (hash: HxQsJBHdoQOXXDmtm1dRn8dN912bmzuv+pkYTIzf//Q=)
2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: SJqt1ShTCNxQPLz1ULlM1HQgyiJtKzW7RD4Lzp4SyI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:60:34:df:49:1d:1e:56:76:14:a5:4c:bb:6a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Validity
Not Before: May 11 06:00:38 2025 GMT
Not After : May 12 06:00:38 2025 GMT
Subject: CN=85b22a465fd070a88a5aa13c53d76a5a9ccf98ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:c7:b7:8d:82:77:d3:cb:d8:20:99:d9:e5:
08:b8:2a:82:b2:4c:32:ca:f3:e3:1a:09:32:63:2d:
b4:fc:d7:e8:3d:91:40:7e:0f:9f:00:41:c6:86:14:
10:70:67:97:22:66:bb:38:e6:4a:3a:3d:7d:e0:00:
aa:e3:74:50:af:09:2d:4b:fa:8f:90:55:22:e9:ef:
4a:86:9e:23:96:cb:f7:cb:32:34:64:5b:54:03:38:
b4:23:67:ab:6f:f1:fd:b4:0b:8f:2d:f3:55:20:2f:
65:ad:97:c7:a7:c1:db:4b:71:54:ee:85:03:82:6c:
10:97:1c:fe:8e:14:fc:66:d7:c5:c3:02:d5:b1:ef:
b6:be:97:43:ef:c8:a9:8f:37:b9:5f:e6:b7:bf:d3:
41:c4:58:b7:b0:fd:2f:43:65:6f:f8:c9:c3:1b:e6:
ac:4d:08:37:50:4b:14:04:dd:59:35:36:bf:ee:b1:
4c:b1:87:8f:86:90:69:23:d1:db:d3:94:ff:52:2d:
e8:e9:c7:da:03:d8:c6:50:c1:76:8a:07:bb:8c:95:
8c:89:ce:f9:be:b5:57:60:b1:cc:f1:d1:d3:ee:50:
da:d2:dc:19:6e:b3:3c:79:42:fd:0e:34:6e:75:d2:
df:4b:98:79:ce:69:27:ed:28:57:35:81:b7:cb:17:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B2:2A:46:5F:D0:70:A8:8A:5A:A1:3C:53:D7:6A:5A:9C:CF:98:EE
X509v3 Authority Key Identifier:
keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e8:30:b4:1c:c7:b2:b2:78:fb:a0:d9:45:f9:0f:7a:61:be:
58:26:a8:a2:a0:f2:71:fb:b3:a0:13:29:c7:ea:c8:bc:23:64:
35:4b:6c:c7:2a:a2:c5:82:ba:84:78:22:aa:c1:c2:bf:16:97:
b6:64:55:c5:f3:39:ad:94:eb:c1:f3:4d:51:24:f6:0c:f5:6b:
a6:f8:40:3c:0b:52:fb:22:97:43:19:b2:12:47:04:5d:4f:3e:
7a:d3:57:df:30:b9:68:8d:67:a1:2d:0d:0d:d6:23:26:b4:2c:
08:bf:71:a1:e9:99:6e:74:73:01:4a:8f:ee:16:1f:b4:18:ad:
00:1d:35:c4:05:f8:5f:16:c3:f1:9b:13:f8:13:d4:be:c8:b8:
16:99:f1:3b:84:e4:9c:42:4c:c3:de:60:5d:59:7c:c8:47:58:
cb:0a:ff:b4:d9:1d:4f:2a:71:ac:53:cb:d8:65:0f:29:6c:17:
ba:9d:1b:da:64:a1:b7:5f:f3:9a:00:14:0b:e5:4b:1a:07:54:
d6:43:0b:93:3b:d1:91:e8:05:7d:97:f1:bd:17:c6:81:f1:50:
d6:19:41:be:57:04:95:dc:56:e5:b6:d5:ed:a1:40:65:ce:55:
82:26:fa:c7:42:d7:3b:be:6a:08:bc:65:5f:92:59:dc:ec:9f:
52:fe:e2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:47:06 2025 by rpki-client