Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
File: FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json)
Hash identifier: kKZxG2aPpTXnz6iuepZEn8lQlZmAgXe9xCbuabOiJPs=
Subject key identifier: 0C:1F:3F:DA:3A:12:C6:29:8F:52:46:80:EE:1E:D1:77:E6:B8:9C:E1
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial: 01969F3FB02D025962873876E2ECA7801BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
Manifest number: 07C8
Signing time: Mon 05 May 2025 07:01:13 +0000
Manifest this update: Mon 05 May 2025 07:01:13 +0000
Manifest next update: Tue 06 May 2025 07:01:13 +0000
Files and hashes: 1: CRew1yNG5xJSLzpzwmoLp-zhTwY.roa (hash: 93BHoq8vptXxPswONjpJ7IKNz5731MnLBO2O3H4KKvY=)
2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: 7yEO/fWv4zXAilG9JeMc594/tbHwsbcC/qFYU5gYUEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:b0:2d:02:59:62:87:38:76:e2:ec:a7:80:1b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Validity
Not Before: May 5 07:01:13 2025 GMT
Not After : May 6 07:01:13 2025 GMT
Subject: CN=0c1f3fda3a12c6298f524680ee1ed177e6b89ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:e8:26:4e:37:5e:33:a1:d0:27:bb:06:b6:
5c:fb:d7:37:c8:33:26:a7:19:ae:48:68:8c:9a:1c:
be:5f:6e:bb:71:9a:03:2b:9e:0b:d0:38:ae:79:0b:
2c:f0:b4:48:b7:e8:a1:4a:e2:fa:c2:03:ab:98:f0:
fe:a0:b0:eb:1e:5f:e4:77:4b:72:2d:af:36:35:e4:
d3:a1:5d:62:8f:ab:33:18:50:3b:81:26:c8:9a:d2:
0f:22:65:e1:67:94:f2:b0:9c:17:45:69:c7:b2:60:
25:02:0f:dc:6d:c9:9b:83:58:19:74:bf:5e:1e:2e:
c6:b0:50:b0:05:29:c6:43:b1:cc:e5:4f:ee:28:7e:
dd:8c:58:72:33:ce:f1:c0:7f:c9:26:48:0c:3e:58:
d7:4c:1d:1b:d4:c8:5f:16:3c:6c:ae:62:73:1f:10:
72:3a:a5:6b:ff:a3:0e:64:42:3d:07:12:6a:1f:d2:
6f:af:1a:5b:50:72:86:cc:eb:47:8b:9c:25:3d:e1:
51:73:c6:66:46:47:c4:9b:e1:8c:0a:92:3f:64:6a:
9c:cc:eb:7f:0e:99:44:44:e2:87:a3:61:1e:34:e5:
d2:cd:7c:19:d0:0f:3c:6d:fd:df:1b:e1:79:78:a0:
79:ae:3a:91:24:39:74:98:77:06:9e:37:a2:41:d4:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1F:3F:DA:3A:12:C6:29:8F:52:46:80:EE:1E:D1:77:E6:B8:9C:E1
X509v3 Authority Key Identifier:
keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3a:bf:7e:30:2d:b7:f5:d3:d5:f5:dc:8c:d8:1e:cf:5c:10:
5f:de:5f:35:3f:b5:68:2f:15:c1:c1:4b:8c:18:21:f2:2f:67:
9b:c6:35:e6:b8:37:45:15:cf:b2:0c:93:b8:8e:e5:a6:f8:6d:
bc:7f:ed:37:d5:51:89:f6:4f:8e:b4:5d:fe:72:88:7f:5e:ee:
ba:a1:78:f5:ab:e6:d7:db:2f:ef:0c:ec:89:d3:c5:7c:90:2d:
ce:db:dd:fd:4e:c3:ed:94:68:e6:5a:61:bd:5e:08:e1:36:19:
e9:35:c2:7d:d3:43:6d:c8:24:2d:05:bc:67:e9:90:56:73:1a:
ce:a4:c1:b0:80:a1:51:17:62:41:f5:41:7b:5f:06:3a:06:3b:
1c:dc:8b:16:5c:53:7f:c7:36:8e:c8:9e:bb:55:e0:06:43:0f:
6c:b0:6e:0e:ce:86:aa:0b:74:8d:d6:de:3d:61:81:3f:4a:8a:
c0:28:a6:9d:ab:0c:71:c9:c8:38:d8:25:a9:1a:d5:04:9d:80:
56:5c:03:2d:36:68:5d:ae:3d:0d:2f:ae:bd:7c:d9:68:36:7b:
0e:7f:00:13:2a:74:1f:e8:6b:a4:b5:12:6b:21:8c:b7:b2:d4:
4d:d4:b7:94:f7:2d:97:ff:20:7e:b9:44:47:ef:0c:c6:bc:2d:
ae:93:39:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:24:48 2025 by rpki-client