Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
File: FqMhIVpNNe0imLBzlx20CIZP02I.mft (raw, json)
Hash identifier: wjgDZLRZKPT0sEJalpXYDaf0usgiotWuKLOGhSwCJNU=
Subject key identifier: 89:C3:4C:23:88:DB:C4:A5:8D:B5:8C:A2:38:09:D2:D0:4E:E3:F5:93
Authority key identifier: 16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
Certificate issuer: /CN=16a321215a4d35ed2298b073971db408864fd362
Certificate serial: 01969F763F852A34B1980AB01395A65D63AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
Manifest number: 0D4D
Signing time: Mon 05 May 2025 08:00:48 +0000
Manifest this update: Mon 05 May 2025 08:00:48 +0000
Manifest next update: Tue 06 May 2025 08:00:48 +0000
Files and hashes: 1: FqMhIVpNNe0imLBzlx20CIZP02I.crl (hash: gDdYrGmTvlT73Fmv18oefWy6FTY0L9rzS7YS46EpFzk=)
2: q9FXpjO7WYpYF_PuEvxdIBNk31U.roa (hash: eU80FRwYJKXcKKPdsKCtTdJX7dfta5v66z6KC/V+tqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:3f:85:2a:34:b1:98:0a:b0:13:95:a6:5d:63:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a321215a4d35ed2298b073971db408864fd362
Validity
Not Before: May 5 08:00:48 2025 GMT
Not After : May 6 08:00:48 2025 GMT
Subject: CN=89c34c2388dbc4a58db58ca23809d2d04ee3f593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:b0:b8:6d:51:9f:db:4d:d0:6a:02:04:08:
4c:13:06:c1:82:ba:3d:d7:02:c1:11:31:e4:7a:77:
39:13:41:d6:2b:4a:6c:38:f0:b3:95:e4:c7:0f:49:
13:2b:16:56:8c:b8:d2:60:7b:04:f2:7a:8c:e1:a1:
8d:f1:8b:33:84:82:70:fc:47:1d:55:24:8c:be:93:
b3:48:c3:57:eb:cb:ce:9e:36:83:5a:2d:a2:a8:90:
6b:90:28:a9:10:37:54:57:cd:cc:67:ac:a5:3c:25:
88:f6:1f:89:af:9a:c2:d1:60:c9:f0:c0:ed:b1:9f:
7a:51:25:7d:30:b3:e1:d1:82:62:9a:15:46:31:20:
5d:73:12:b3:2c:65:04:92:e4:82:9d:ba:5d:66:dd:
d6:90:87:26:41:52:21:ed:6b:4e:85:21:89:f6:13:
73:8b:19:8a:c5:0a:77:0b:13:80:d9:96:af:02:4c:
aa:b0:03:ac:fb:44:a6:9b:13:0d:35:38:b2:fa:33:
d0:1d:47:32:06:63:bb:97:4a:43:5e:9b:48:88:c7:
8e:d0:70:90:32:a9:da:81:4f:14:e2:82:20:4a:ef:
f2:3e:16:cd:4b:50:4a:82:47:ad:13:e2:03:e3:9c:
fe:c7:a5:95:43:86:0c:b4:58:c5:27:47:da:e8:dc:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C3:4C:23:88:DB:C4:A5:8D:B5:8C:A2:38:09:D2:D0:4E:E3:F5:93
X509v3 Authority Key Identifier:
keyid:16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e2:b2:a0:69:99:43:6d:50:56:69:30:c0:dc:16:47:81:9b:
d2:7e:3c:b9:69:ab:4b:16:65:80:8c:02:8e:bd:b8:87:d1:8d:
97:0a:b6:57:0d:8d:26:b7:11:88:d7:96:67:3e:9b:ab:b1:54:
5c:30:56:3a:d7:9f:a8:8f:28:b0:23:e1:01:90:91:64:50:55:
3a:d5:13:96:49:86:a5:d7:ef:7b:7d:c9:67:0a:de:86:62:db:
14:77:1c:f6:bf:fe:f1:12:25:6a:f9:67:48:f3:45:23:73:23:
ab:a8:d4:e6:bd:de:4f:bd:26:1d:a9:2f:a1:65:34:3d:72:fc:
c5:f4:49:cd:bf:43:0b:f0:75:1d:35:7a:55:ca:74:80:86:a3:
c6:e4:1b:8f:d4:0c:c5:2a:35:09:47:c2:25:43:14:87:43:07:
fe:5a:70:e7:d7:85:47:2d:16:6a:28:32:7e:ae:fd:a3:ef:b3:
16:97:e9:c8:94:a0:b9:eb:8d:1b:4a:af:ff:00:ca:a6:42:b8:
f5:4c:f7:44:9d:64:c6:0b:31:01:1c:d5:69:54:a6:57:11:46:
fb:fe:3d:dd:0a:f3:7a:4f:80:87:bc:d9:00:59:f9:60:9e:43:
67:b0:1b:27:09:39:2c:60:33:64:7f:6d:a4:44:65:1a:de:9d:
2b:85:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:28:19 2025 by rpki-client