Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
File: FpNzegFGnJUBHWlzklZZFgRdOiA.mft (raw, json)
Hash identifier: TzAsqBvZDQYgCcMyCsJcGYSh2AE1BriXb/NtY6tSr7g=
Subject key identifier: 11:68:47:0A:04:44:A6:49:E9:96:E6:99:08:7A:DE:C7:94:49:93:BA
Authority key identifier: 16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
Certificate issuer: /CN=1693737a01469c95011d697392565916045d3a20
Certificate serial: 0196BCA4B0E901EBC97226AFFB30AC4BB9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
Manifest number: 0219
Signing time: Sun 11 May 2025 00:00:31 +0000
Manifest this update: Sun 11 May 2025 00:00:31 +0000
Manifest next update: Mon 12 May 2025 00:00:31 +0000
Files and hashes: 1: FpNzegFGnJUBHWlzklZZFgRdOiA.crl (hash: io5uhCPomciyQoWAzKsy6kZENGFHHpiJybxog4da8PI=)
2: mgFhpVWpKKOAS9kS1Whb-f8EjPw.roa (hash: b1ojmUR/j/a0k5umyT93sSV7c2lVJTgs9RA7eYuyM+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:b0:e9:01:eb:c9:72:26:af:fb:30:ac:4b:b9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1693737a01469c95011d697392565916045d3a20
Validity
Not Before: May 11 00:00:31 2025 GMT
Not After : May 12 00:00:31 2025 GMT
Subject: CN=1168470a0444a649e996e699087adec7944993ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:d8:9c:c2:9c:95:44:1b:13:42:c3:ba:d1:
c8:90:20:5b:7b:1e:38:2d:65:13:d5:93:00:b8:5a:
49:79:d4:8c:e2:3b:af:08:4e:e6:ae:95:f2:2b:63:
23:ad:38:66:1d:18:82:da:c5:75:4c:96:00:1c:ba:
61:bf:b0:eb:6d:62:7a:f2:57:60:2f:8e:88:62:16:
2f:02:f2:31:78:23:e6:57:a1:57:bd:89:27:19:66:
6f:c7:59:2b:18:53:08:7b:0c:28:f6:d0:75:9b:34:
a2:06:40:67:97:d5:7a:2b:3c:b6:86:9c:7f:87:b8:
aa:0b:cd:69:d0:6e:ea:04:4a:fa:6e:b9:fb:09:7a:
98:a6:a0:7a:ed:b0:9c:99:55:59:d3:31:2a:35:46:
3a:f9:c6:3f:cd:e5:da:b1:13:25:b4:44:17:57:53:
22:82:c7:d3:77:44:a9:b8:d9:13:c4:02:4f:be:c4:
19:24:8f:df:a6:84:f5:e0:c6:88:c2:fc:2d:ab:4f:
c5:d4:27:cb:0c:0d:29:50:b7:b8:53:21:ca:24:8c:
76:22:97:0c:dc:c1:21:a6:ba:c8:1f:e0:50:6c:52:
83:87:90:e4:ed:34:f1:81:64:88:ce:46:d7:f5:82:
66:03:e7:66:43:22:c2:e3:a4:1d:7c:da:f3:3e:ae:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:47:0A:04:44:A6:49:E9:96:E6:99:08:7A:DE:C7:94:49:93:BA
X509v3 Authority Key Identifier:
keyid:16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:15:3a:e3:17:86:b9:8e:fd:c7:a1:61:f8:29:14:82:47:bd:
fc:26:89:31:7c:82:37:4b:b3:b0:cf:da:50:6e:c0:66:1d:95:
0e:e2:95:cc:60:d3:15:22:c2:ae:bf:72:74:a1:94:66:c0:20:
62:13:81:fe:a7:70:03:61:af:bd:e6:12:fd:de:68:ef:b1:c2:
0e:45:c2:b0:2c:58:da:21:8a:7d:fe:25:48:6e:37:36:9c:1a:
da:8b:eb:07:15:08:f5:c7:e8:6e:11:9d:41:9e:df:60:c3:75:
76:80:7b:63:a2:07:e5:74:47:5e:3e:4c:59:a7:12:0a:aa:c4:
a1:cb:90:34:96:92:51:6b:fc:74:83:d0:ca:49:2c:59:92:3b:
18:8d:71:18:3f:d5:b2:8c:f7:79:5a:1d:31:94:5d:cf:52:96:
7e:9f:54:c5:10:9d:20:9c:2d:af:39:af:f3:5f:49:8a:99:5c:
6d:3b:e1:39:61:27:f6:42:a5:3a:b1:08:2a:6d:b1:42:d1:48:
65:1b:a1:76:fe:68:38:39:24:9e:49:8a:7e:22:90:b4:8f:7b:
20:75:36:fd:59:16:72:1e:52:ca:16:70:be:2c:a8:ff:04:ea:
28:3f:9b:12:8a:f1:44:32:38:8f:c0:67:85:76:f6:9e:ce:0c:
06:a3:9c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:37:25 2025 by rpki-client