Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
File: Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json)
Hash identifier: Sf1T+sl1TVEBZ1b8yask2rv2ghsOA7JeV6112mk2Iaw=
Subject key identifier: F7:7B:7F:50:61:D0:75:A5:A1:C3:67:EF:02:13:B1:D4:DD:F6:ED:B1
Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
Certificate issuer: /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Certificate serial: 01969DF59F0E7D80EA793C5A05E4163B3B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
Manifest number: 10F3
Signing time: Mon 05 May 2025 01:00:42 +0000
Manifest this update: Mon 05 May 2025 01:00:42 +0000
Manifest next update: Tue 06 May 2025 01:00:42 +0000
Files and hashes: 1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: u81khfKOmBf8r3r5BPUYIt1LrCgIT+zYNb/v+93Ka1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:9f:0e:7d:80:ea:79:3c:5a:05:e4:16:3b:3b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Validity
Not Before: May 5 01:00:42 2025 GMT
Not After : May 6 01:00:42 2025 GMT
Subject: CN=f77b7f5061d075a5a1c367ef0213b1d4ddf6edb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:9d:04:cd:24:77:56:e0:74:52:4b:44:80:
69:db:a0:7d:88:2e:a1:19:05:dd:a1:bf:35:75:46:
84:e9:3b:bd:13:25:67:ab:3e:71:d0:22:20:50:31:
ab:3e:aa:a9:6f:6e:2b:51:25:5c:2e:fc:92:4d:8b:
e8:1f:a6:c7:bd:d4:5e:15:6d:22:30:da:76:8a:04:
1a:7d:89:fe:83:60:ba:e7:ec:d1:91:58:37:00:b7:
c2:a2:d5:11:d8:e3:6a:1d:51:99:52:d6:5f:c0:c7:
03:25:4e:23:88:30:6f:d5:a3:81:10:6d:06:49:bf:
c4:f5:21:42:4d:55:71:02:59:20:e9:62:61:16:35:
b5:44:b2:55:41:36:32:9d:ca:68:20:8b:32:bb:91:
90:3f:7c:e3:f8:47:d5:c6:b1:e6:77:79:56:92:c9:
05:0d:41:2e:43:73:c8:f0:cc:46:41:59:83:d5:90:
88:cb:1f:56:a9:90:29:48:ba:43:44:f8:7d:1f:1f:
56:c5:79:d8:cb:b3:7a:a8:91:ea:c1:88:a8:33:56:
01:96:90:ec:02:d2:56:50:f3:9d:cf:fa:fb:61:10:
08:87:a3:f7:1d:2e:12:3a:4e:80:65:28:67:74:8f:
48:65:f1:cf:d8:4a:a2:f8:f1:70:e5:28:d4:28:3a:
47:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7B:7F:50:61:D0:75:A5:A1:C3:67:EF:02:13:B1:D4:DD:F6:ED:B1
X509v3 Authority Key Identifier:
keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b4:ee:0b:50:25:18:1d:3c:d7:c0:8d:48:74:a6:e5:40:f7:
2a:7a:5b:77:bd:ab:5f:d0:b8:dd:aa:d0:00:25:6f:d9:76:a5:
34:7d:b0:26:b3:82:1e:f6:26:ac:9a:af:56:fa:9c:da:21:ed:
ca:28:9a:44:56:b2:c7:c2:eb:67:11:e8:38:de:de:9e:af:a7:
82:aa:7c:3c:bb:21:45:ef:b1:70:13:69:7b:5b:b0:75:77:40:
d2:e6:97:bb:80:76:b0:54:29:5a:b7:0a:39:25:1a:85:65:f6:
3a:22:73:a7:4b:35:68:23:9c:19:6a:82:d6:63:c2:cb:8f:ca:
a0:7d:7a:be:87:fb:81:ed:4b:8b:9f:a0:ea:e7:78:39:67:3a:
ac:4f:42:bc:08:f6:9f:b5:78:ed:39:3e:fd:11:c2:dd:ce:bd:
88:9a:c1:f1:7d:f8:d2:74:f4:00:42:0b:86:b0:a8:bb:c1:93:
aa:c3:25:a7:30:04:8b:ca:80:d8:82:28:ff:ba:06:aa:49:c8:
b7:cf:d2:12:44:87:2f:87:e5:24:5c:51:6e:e0:b9:90:4b:f0:
d9:c2:2a:ff:34:67:24:d7:e3:60:6b:e5:29:a7:1e:08:f2:d2:
3e:35:9b:47:6f:1b:4d:5c:9c:56:54:db:c2:96:78:f9:77:65:
b0:d7:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:54:20 2025 by rpki-client