Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
File: _FlUn23SuDFEuIDCPwb7o7JdOYY.mft (raw, json)
Hash identifier: YA5TnldNye7faB10/FrFzTVxmWevcjnPzCb+SCQJbnY=
Subject key identifier: 4F:D3:35:C2:F7:C2:3E:6C:2E:B7:B9:8C:55:14:D0:55:EE:94:7F:BC
Authority key identifier: FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
Certificate issuer: /CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Certificate serial: 01969E9AD8180A7DF170EA4554AE4EB3F8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
Manifest number: 0F1E
Signing time: Mon 05 May 2025 04:01:09 +0000
Manifest this update: Mon 05 May 2025 04:01:09 +0000
Manifest next update: Tue 06 May 2025 04:01:09 +0000
Files and hashes: 1: Z6qviYCXQTeLJoJfMAOJcgB-9Qg.roa (hash: oDapm5Z+x3QJafhm3qUyzSGeINGec4KUVgNU/i7jaZI=)
2: _FlUn23SuDFEuIDCPwb7o7JdOYY.crl (hash: mM+hxiymCSxX0O1OC37RcvxxMAMRNOEO7bofD40/L+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:d8:18:0a:7d:f1:70:ea:45:54:ae:4e:b3:f8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Validity
Not Before: May 5 04:01:09 2025 GMT
Not After : May 6 04:01:09 2025 GMT
Subject: CN=4fd335c2f7c23e6c2eb7b98c5514d055ee947fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:28:27:68:c5:b3:81:ce:87:44:7d:ff:f3:89:
85:a0:78:cb:1e:ae:cf:fd:3c:fa:7d:3c:7c:1e:81:
d3:30:c5:28:0f:2b:19:1a:34:82:25:b3:d2:3d:53:
54:3d:1d:02:00:d2:9c:69:4f:b6:a7:50:e6:ba:ae:
b2:fb:07:94:32:e1:3d:ab:18:48:61:53:34:56:58:
2c:34:42:b2:91:8d:88:0b:46:0a:15:77:21:3b:36:
e2:17:e4:c8:fb:08:cc:44:e2:7c:93:b2:17:2f:40:
0e:b2:c4:29:64:f4:0b:ce:75:cb:c3:07:b8:da:64:
2e:7b:f2:35:7b:21:b0:b9:ce:cb:77:14:31:f5:05:
95:8a:19:9d:8e:2d:29:0b:5c:98:5a:b3:d4:0f:3f:
b8:de:b1:bf:0b:5a:54:58:ad:8f:6b:74:37:f2:07:
19:d1:8a:db:ed:2f:1d:4a:1e:e0:b4:42:24:28:4f:
e3:fc:61:59:8c:be:e2:f6:cd:bf:f3:00:a1:28:b7:
80:58:d5:60:cb:dc:0f:ec:68:da:32:38:b9:ef:f7:
24:a9:48:b6:95:b7:36:d5:78:c9:94:89:bf:78:7e:
03:02:03:35:42:c8:a1:38:a8:c7:de:50:71:6d:23:
32:bf:9d:7b:ae:06:3f:53:a2:ae:44:d6:5c:61:90:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D3:35:C2:F7:C2:3E:6C:2E:B7:B9:8C:55:14:D0:55:EE:94:7F:BC
X509v3 Authority Key Identifier:
keyid:FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0c:a9:60:df:33:86:d3:e9:f5:d7:35:21:26:be:23:b8:59:
d7:bb:57:74:c8:75:47:2b:8e:40:24:a7:3e:4e:71:d6:07:77:
3d:09:bf:3f:2c:f9:ec:00:f8:01:4f:ef:46:6d:e6:fc:5b:20:
b9:ca:f4:54:d6:99:77:b6:c6:ec:92:d9:d5:c1:42:e5:b5:22:
f7:3e:ab:77:ce:e1:5f:d7:34:b2:02:55:ae:89:4b:1c:6f:73:
18:b5:9e:59:dd:69:32:5a:d0:94:ed:43:c3:27:f3:f9:e5:9d:
d1:60:16:4e:28:70:52:6d:e4:83:e0:fd:c7:ed:02:01:05:f2:
77:c0:00:24:f8:2c:35:55:85:44:76:d4:2d:a1:eb:a4:4e:e6:
e9:a9:ee:fc:c5:b9:86:56:2c:68:5b:f2:ff:26:ef:b3:4c:10:
c8:77:24:15:61:b2:ee:cd:b0:ba:4d:02:cc:92:5a:48:e4:af:
75:42:ca:fc:a8:6b:68:dd:9f:94:e7:f5:ad:17:bf:24:73:25:
9d:53:d3:75:65:98:a5:56:0d:af:aa:99:25:5b:09:82:58:28:
fd:af:c5:9d:e7:09:03:a6:4c:3d:35:b7:82:7d:72:16:3d:16:
6b:cd:9f:28:01:7f:60:4f:50:75:0f:14:20:f4:95:6b:7a:e7:
9a:ed:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:48:54 2025 by rpki-client