Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
File: FQmDQfJrtURkBQe9iAqZp-eiNdA.mft (raw, json)
Hash identifier: lJCAcLfFk/o4iNF6wqR4po7yEMLU7GdCI2/wUJ4QTBY=
Subject key identifier: DE:D2:38:12:5A:28:2C:F8:77:8A:B6:7E:34:C8:10:A0:E3:50:47:46
Authority key identifier: 15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
Certificate issuer: /CN=15098341f26bb544640507bd880a99a7e7a235d0
Certificate serial: 0196C1CB8698ED0DD8806062A30CDC56871E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
Manifest number: 14C5
Signing time: Mon 12 May 2025 00:01:02 +0000
Manifest this update: Mon 12 May 2025 00:01:02 +0000
Manifest next update: Tue 13 May 2025 00:01:02 +0000
Files and hashes: 1: FQmDQfJrtURkBQe9iAqZp-eiNdA.crl (hash: blQVYqX7/1v/6yS+St0fT2qoFgY5t65F6m1a4efZ7Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:86:98:ed:0d:d8:80:60:62:a3:0c:dc:56:87:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15098341f26bb544640507bd880a99a7e7a235d0
Validity
Not Before: May 12 00:01:02 2025 GMT
Not After : May 13 00:01:02 2025 GMT
Subject: CN=ded238125a282cf8778ab67e34c810a0e3504746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:23:73:6a:c9:c7:f5:13:40:b6:f2:d1:ab:
06:46:3d:28:e7:9d:84:2c:72:8a:cc:66:4d:85:4f:
5e:6a:c9:41:ac:c4:7e:d1:15:a6:ba:ce:8d:43:68:
ad:25:fd:93:02:44:d7:ff:07:62:e4:14:fb:86:4c:
d3:6e:69:13:8e:cf:e9:1b:64:8d:a3:a6:c6:91:6a:
a5:86:05:e7:c5:d9:ac:5d:0e:72:e0:86:00:66:2e:
5b:c5:1e:ea:b8:fc:49:d0:d2:d0:6d:cb:af:56:dd:
bf:69:34:f2:8d:78:8c:92:19:06:d2:d6:0e:80:4e:
7a:36:06:7e:fa:69:a2:68:86:3c:87:4d:55:2f:0b:
58:e8:fe:f0:0d:15:48:e1:4a:ad:52:31:47:95:32:
a5:76:9f:41:4d:d6:15:dc:05:24:b6:94:de:75:3d:
d8:87:f6:9d:af:0c:65:26:4f:0a:b8:67:f6:b4:ec:
b6:84:38:3f:ce:f1:8b:98:25:00:b0:f2:3c:c1:91:
97:ec:1b:dc:6d:5d:64:b7:11:09:6f:47:f6:a9:e3:
81:da:ae:d8:b9:0b:35:d3:04:76:8b:66:52:ff:38:
9c:fa:26:39:0e:d7:08:d0:53:62:53:32:7e:c2:96:
0e:ab:02:32:f6:5a:80:9d:a2:38:9c:b7:5c:e4:a3:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D2:38:12:5A:28:2C:F8:77:8A:B6:7E:34:C8:10:A0:E3:50:47:46
X509v3 Authority Key Identifier:
keyid:15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:79:ad:12:e5:0d:0a:f1:91:91:76:8d:25:60:c4:e9:7c:0c:
eb:4c:34:0c:52:69:f4:cd:bb:fc:6a:84:39:e8:98:cc:e1:3b:
d9:bf:60:5d:30:1b:24:19:ef:38:68:1d:c5:cb:42:a7:14:70:
bf:7d:0a:9f:ab:9d:07:70:19:85:6a:96:a6:5a:54:11:de:ed:
87:47:82:40:5d:d0:44:fb:70:dc:ee:42:7e:4e:2b:2a:a1:4c:
2e:5f:c0:97:b8:e8:2c:48:8c:10:be:00:ca:62:51:f1:2b:ce:
84:5d:77:fc:e8:6c:6a:6d:cc:49:34:26:15:59:d6:25:6d:56:
ee:8e:bc:56:75:c1:30:e7:70:3a:3c:7b:a8:57:fc:d1:66:2e:
ad:1d:10:4f:74:40:71:ab:11:32:a0:d4:f9:a5:bd:ec:c3:dc:
7c:e0:ff:9a:9e:9b:c3:d6:a0:c8:ec:37:72:ae:cd:bf:51:41:
6c:ba:88:63:8e:d0:c5:d2:1c:91:d9:e7:c4:ab:63:54:d2:9f:
2f:34:dc:f7:69:eb:43:18:6b:aa:72:15:8e:5e:31:70:24:01:
5e:a0:6f:81:71:ef:b1:ba:46:25:7b:68:02:77:6d:72:31:eb:
e2:63:5b:77:01:6c:c1:9c:dc:73:ed:8c:7e:d8:7b:3a:f7:26:
08:c9:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:37:18 2025 by rpki-client