Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
File: Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft (raw, json)
Hash identifier: N8h46bQS3JDVn0C/U6+8tkYehtaMsOhiPO+XfqJDUEo=
Subject key identifier: 0C:AF:A0:A3:FE:6B:75:4C:79:47:B0:5B:31:1F:20:A0:97:8A:EC:1D
Authority key identifier: 16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
Certificate issuer: /CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Certificate serial: 0196CBA9949527D4C5131C7E40BE0999D609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
Manifest number: 14C9
Signing time: Tue 13 May 2025 22:00:10 +0000
Manifest this update: Tue 13 May 2025 22:00:10 +0000
Manifest next update: Wed 14 May 2025 22:00:10 +0000
Files and hashes: 1: Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl (hash: yLQhRwPvLg0iOwg2Isl5dl98dcWUWAt3eGjaZcpOwI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:a9:94:95:27:d4:c5:13:1c:7e:40:be:09:99:d6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Validity
Not Before: May 13 22:00:10 2025 GMT
Not After : May 14 22:00:10 2025 GMT
Subject: CN=0cafa0a3fe6b754c7947b05b311f20a0978aec1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:19:b3:29:3c:24:22:aa:8d:af:00:db:d5:
42:5c:bf:4d:0b:9f:7c:3c:e2:31:f1:6b:88:a7:41:
c1:56:b4:ca:a8:0d:4f:0b:61:c4:2b:81:1d:f4:4d:
d8:e3:14:ab:11:8c:66:a4:4f:79:fd:41:26:0a:76:
10:1c:ad:1b:70:84:96:41:14:d2:f5:64:94:ba:76:
c2:29:69:51:05:2e:b3:a6:ad:c0:4a:8e:53:8a:32:
13:e6:01:1a:27:b9:83:67:69:68:bd:1b:ea:24:e5:
fa:a8:66:dd:44:71:2e:3c:69:00:71:c4:b5:bf:dd:
66:b4:3d:52:41:ac:44:1f:2b:a0:5f:82:d1:f8:37:
09:45:78:69:98:e2:02:d1:35:9e:87:89:f2:90:6a:
e2:52:01:8f:50:15:b8:88:ce:3a:41:8e:a5:a6:42:
93:ad:de:fd:d6:bc:5d:05:9d:75:88:c5:94:c7:d1:
ad:43:83:e5:3a:20:43:e5:3e:20:03:a3:29:a3:1e:
fc:65:71:1e:f1:34:c5:9d:86:7a:5a:d1:4d:08:c3:
2f:b3:6b:e7:2d:06:9b:67:c3:0b:fa:c3:66:9e:83:
61:5f:74:72:7b:61:b1:ca:a5:97:79:47:4f:5b:23:
51:b4:69:7a:74:e9:2b:69:36:57:2a:d6:ab:2d:00:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AF:A0:A3:FE:6B:75:4C:79:47:B0:5B:31:1F:20:A0:97:8A:EC:1D
X509v3 Authority Key Identifier:
keyid:16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d3:84:32:c9:94:40:e7:4f:00:cd:ff:67:87:92:1e:30:79:
9e:cd:89:eb:d4:dd:0f:29:60:8f:c0:cf:83:34:0b:b4:8a:2f:
fa:e0:53:b3:a2:cc:2f:f9:32:ee:3c:f1:34:77:ac:60:4c:9f:
d8:4b:a8:0c:36:9a:32:f5:f6:04:1f:65:80:d7:c7:f7:43:95:
38:83:7a:cb:50:ca:84:41:5e:ce:19:33:4b:c4:09:d3:32:d1:
e0:d1:7c:63:6e:5b:d2:65:5a:3e:37:a3:6d:36:a7:6a:8a:af:
f4:1a:3f:1f:ac:66:90:22:83:72:4e:7b:a1:91:65:e3:90:30:
fe:4c:6b:70:38:0b:4d:31:4d:f0:18:e2:99:bb:10:27:af:5e:
03:cd:c9:5c:5e:a0:c4:ba:3d:17:66:19:68:02:1d:01:1d:60:
0e:23:2a:f4:3e:e2:c0:ff:f8:d4:65:1f:78:8a:bd:2e:2c:bd:
70:d5:17:42:36:f6:a3:2d:68:60:da:4d:15:95:7d:fc:64:5b:
d5:47:76:35:53:0a:29:a1:ff:34:70:6a:56:69:be:3a:a1:2e:
77:10:9b:4c:d3:cf:84:e3:cf:fe:c3:60:19:31:8e:20:27:fe:
8b:91:02:80:61:0e:ef:82:3a:c8:46:e3:1b:94:cf:aa:91:1f:
83:cc:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:14:38 2025 by rpki-client