Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
File: FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json)
Hash identifier: FYZ1Sa+4rwfPv6+te7ECCRs+ajtOXFDRmA4+28VtLIA=
Subject key identifier: 4A:14:1C:7E:CC:7D:9E:17:A8:03:A7:42:04:77:4A:B3:18:F8:E5:03
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Certificate issuer: /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial: 0196BAB61DC7DB853C2FC5D7DFEAD83D52F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 15:00:19 +0000
Manifest this update: Sat 10 May 2025 15:00:19 +0000
Manifest next update: Sun 11 May 2025 15:00:19 +0000
Files and hashes: 1: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: i75naACbbMaH2u8Upwaq56JDxyk5Jn8BKWuC5+cz/0c=)
2: m47qBE9phwomTDeqf52wHfAYr9E.roa (hash: 7rx0B/HjAB/FPNOSkgRw7oYEkC39mslIeJTzls7ObLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:1d:c7:db:85:3c:2f:c5:d7:df:ea:d8:3d:52:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
Validity
Not Before: May 10 15:00:19 2025 GMT
Not After : May 11 15:00:19 2025 GMT
Subject: CN=4a141c7ecc7d9e17a803a74204774ab318f8e503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:e8:af:0d:24:f6:a9:0c:34:71:e6:83:6d:
f4:34:56:8c:27:39:8e:aa:56:e7:69:6f:dc:ac:ef:
0f:4e:0d:51:4b:c8:18:c1:4f:49:4c:3a:c8:60:a2:
f5:70:90:d0:54:ca:f1:c7:07:80:a6:3b:0f:10:dc:
ba:15:0a:27:3d:cd:2b:c9:c7:82:1f:9e:e2:06:0b:
6a:55:f2:fe:99:a3:18:0a:fc:54:9e:8d:64:df:8d:
ac:fd:d5:60:29:81:c2:8f:71:f4:a9:f6:e3:18:87:
fa:d0:b7:88:06:9d:e2:91:08:09:97:a8:14:cf:26:
00:f3:a7:0d:7b:af:c1:b2:34:1c:f3:fb:51:96:42:
f7:00:65:65:cd:a1:8a:7a:e8:0d:50:ed:bb:0a:f4:
24:0d:ca:67:db:59:35:c1:09:0f:f3:51:8b:d0:7a:
61:c8:57:f8:a4:e7:7c:91:87:4b:04:2d:ed:d7:41:
5b:da:70:42:94:ab:7c:68:d2:bd:e5:68:70:6d:0d:
8b:72:b9:23:2f:33:1e:a6:35:72:5d:be:f1:ca:10:
fd:c3:b1:14:1b:16:46:60:73:81:bb:ad:f2:cb:49:
ab:7c:ca:e6:2f:b4:d0:da:4d:26:45:4a:de:11:6b:
36:ae:b9:77:e1:9d:9f:01:97:be:a4:f1:b7:2f:5b:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:14:1C:7E:CC:7D:9E:17:A8:03:A7:42:04:77:4A:B3:18:F8:E5:03
X509v3 Authority Key Identifier:
keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:61:7e:4d:30:2b:6f:6d:f8:b5:10:ae:64:c3:a8:55:ee:51:
f5:f8:e3:40:45:69:f6:3c:d4:8f:c6:ea:ea:b3:f5:f4:3e:6a:
15:8b:f9:41:70:9b:a2:1f:d4:60:0b:b1:03:4e:e2:ad:d0:c7:
05:dc:6c:b7:d6:91:3f:8f:a7:f4:b9:26:36:70:2d:cb:3d:bc:
3d:da:02:ca:6c:a5:96:c8:7a:a2:ea:dc:be:3c:cf:71:60:7d:
81:5c:ae:bf:86:ee:bb:65:bc:fd:2b:5f:59:23:dd:44:be:db:
14:6a:83:ec:53:ac:73:7b:13:47:77:96:f5:d6:91:a3:36:7c:
99:88:08:27:11:6f:70:00:8c:94:92:81:a3:e7:9b:8b:78:db:
de:d5:1c:ae:e8:d2:6c:2a:98:7b:23:f3:cf:52:d7:54:0c:7d:
2f:46:a9:cb:56:0b:6e:70:a3:ec:8f:e3:04:87:53:dd:41:6e:
c9:c1:7c:b0:2c:90:98:b5:0e:1a:79:79:10:9b:a6:91:19:c8:
9e:18:8e:84:3c:61:a7:d6:7e:d4:86:f5:0e:65:1b:b7:6c:92:
77:bc:62:dc:bb:ad:5e:04:fa:f0:10:05:e4:03:92:a0:30:91:
e1:32:3d:a6:27:99:96:ca:3f:31:f7:98:8f:fb:63:c8:4c:87:
02:a5:4d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:35:28 2025 by rpki-client