Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File: FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier: 8PEIGyJO7bY0enEUE+R0y5jtHBQ/mXJALus4mjMIEbo=
Subject key identifier: 49:0D:C7:43:A6:08:04:D8:88:F4:7A:80:5F:D3:FC:7C:E7:08:9D:92
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 0196C0EF412E67C8DDA1E57A6C3F01CE2889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number: 0B25
Signing time: Sun 11 May 2025 20:00:27 +0000
Manifest this update: Sun 11 May 2025 20:00:27 +0000
Manifest next update: Mon 12 May 2025 20:00:27 +0000
Files and hashes: 1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: z4dOVpukUf8YNSEFVCektKjO6wuro4en0eeL+yFe3fQ=)
2: ejP-cqngAl2WeEUv13m8XETr7WY.roa (hash: LoPRyo03v+sBUkzNnzQYBljjeo3cKGIRbIW1IcB6h4c=)
3: jRgLBU0x04bcrCqoAsjc1LU66SE.roa (hash: nfzJrFphVt8WQGlI/qwAihviviH5Ky8UyaUYyOFvqY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:41:2e:67:c8:dd:a1:e5:7a:6c:3f:01:ce:28:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: May 11 20:00:27 2025 GMT
Not After : May 12 20:00:27 2025 GMT
Subject: CN=490dc743a60804d888f47a805fd3fc7ce7089d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:0d:f3:18:40:e9:b1:c8:17:00:48:9c:e7:
0d:da:d2:dd:01:07:98:52:24:57:09:11:b9:11:82:
9e:b0:e5:95:39:22:a2:06:78:c2:1a:fc:49:77:cb:
4d:02:df:ed:d2:6c:af:95:8e:d1:a9:d7:3c:78:69:
2e:70:c1:c4:2e:8b:3c:37:83:32:b4:a3:c2:a3:4f:
9d:10:45:ee:a6:44:93:a2:24:b8:ed:d2:ec:ad:51:
dd:59:97:ba:dd:61:3e:0b:f0:f5:b4:bd:ec:4c:58:
5d:5c:58:11:a4:79:27:ea:68:fd:16:e0:1e:ef:9c:
3f:9a:01:91:b1:c3:f3:c5:4c:17:0e:0f:05:a9:f9:
21:f9:01:cd:95:3b:83:d9:80:d6:ee:35:91:ee:c4:
07:02:32:82:cc:3e:e6:86:1c:5b:b0:93:72:7f:39:
0f:ea:2d:d0:ae:c0:16:81:02:15:fd:9a:1f:90:bf:
01:3e:af:15:6b:9f:e8:df:2b:8e:8d:f6:13:d2:97:
cf:14:9a:2c:f7:bb:e8:46:7d:3a:3b:15:6a:34:46:
fd:a4:ba:72:08:2e:48:ba:58:b3:94:f0:cd:26:c6:
cf:f3:af:c4:72:4d:87:c7:2d:99:d5:7a:40:3a:de:
0e:b7:99:77:2b:ea:7f:f9:07:b1:07:23:39:e6:e7:
74:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:C7:43:A6:08:04:D8:88:F4:7A:80:5F:D3:FC:7C:E7:08:9D:92
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6f:85:d5:1c:92:91:47:bf:5b:f6:7f:d8:63:81:76:e7:3b:
e3:1b:fd:1e:07:4e:3f:09:e4:05:82:40:c0:c1:58:6e:de:ae:
01:19:08:8d:04:5c:0f:16:d6:52:4e:30:23:a4:7d:b9:39:0b:
ec:bd:f3:77:84:c7:53:d6:a9:1b:01:72:3a:d9:fd:f2:78:fa:
25:a7:07:9d:37:44:d4:c0:bc:d8:fd:c6:6c:cb:96:a5:43:88:
48:20:a7:3b:77:4b:83:89:7a:8a:98:ac:18:19:01:44:4d:21:
6b:dc:a3:21:25:91:e2:a1:ec:5f:6f:e7:a3:1d:2a:23:f7:fa:
18:51:fd:f1:54:5e:f4:66:76:0f:4f:15:73:2c:4e:5d:08:55:
3d:53:6d:3b:af:87:90:54:e6:32:7e:2a:7d:51:24:4e:e8:c3:
7e:14:3c:00:18:11:8f:95:9a:41:43:69:7e:db:8f:3d:b6:11:
5b:b0:38:10:ac:e3:32:07:5e:78:30:37:ef:38:22:e9:3b:6d:
3d:a4:9b:5a:91:7f:e7:ee:c8:fd:40:cc:6c:e0:92:f4:77:56:
78:23:27:aa:b0:be:bb:f0:eb:33:57:d3:4b:da:eb:75:e6:ad:
b2:8c:be:d3:43:e8:1c:7f:c3:d1:0c:7f:75:ef:31:14:45:3f:
09:de:d1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:34:24 2025 by rpki-client