Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
File: FAThjoYWcF7A8pDlfKgpqC9flsI.mft (raw, json)
Hash identifier: QPfCbGOFR1zy2rgZBnQ7m1KUekYBnTTczFi7ksDUJEs=
Subject key identifier: 05:46:BF:E0:AF:85:E0:0E:9B:3C:E8:15:62:74:DE:61:C7:12:44:C6
Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
Certificate issuer: /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Certificate serial: 01969E2C72CF06EDEEE6DC1A53F9FAC005F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 02:00:35 +0000
Manifest this update: Mon 05 May 2025 02:00:35 +0000
Manifest next update: Tue 06 May 2025 02:00:35 +0000
Files and hashes: 1: FAThjoYWcF7A8pDlfKgpqC9flsI.crl (hash: n1j1asAJY3E8RRhlkpWVAjHeXEiGWMoy8rP4HfTEBJc=)
2: tsrNBESAlUjzygDHgS7gEuqfQn0.roa (hash: 6Jn0pVJqrN6B9jn7fLfe3kxST0CupCM2snjZV9wb1no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:72:cf:06:ed:ee:e6:dc:1a:53:f9:fa:c0:05:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Validity
Not Before: May 5 02:00:35 2025 GMT
Not After : May 6 02:00:35 2025 GMT
Subject: CN=0546bfe0af85e00e9b3ce8156274de61c71244c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:a5:a7:94:9c:df:d9:2b:4e:df:9f:b6:eb:
72:ee:e2:8b:fc:b9:e2:cc:1f:12:a4:26:fa:aa:e3:
6f:09:a5:90:b3:03:fb:48:fd:21:4e:7a:24:f1:52:
fe:85:8b:07:3a:38:2e:ef:4f:e9:3a:ad:9a:d8:1d:
4c:bc:86:8a:a7:c4:3b:7b:77:d8:9c:82:e5:44:e2:
f2:5b:64:7e:7b:59:4a:f4:74:3d:64:78:85:d1:c2:
1a:8c:da:a5:b0:38:21:2c:22:e6:34:43:b3:59:ad:
5d:53:a1:41:6d:0a:d8:42:c7:9e:32:77:e9:5a:65:
ba:d2:25:a6:2a:74:f5:14:3e:9b:3d:f1:06:69:e2:
53:b4:8e:98:29:73:45:43:39:a5:13:ee:e2:0a:c6:
97:c1:60:c0:8f:8c:a4:b5:4d:03:6a:45:b6:73:3e:
e6:ad:e2:e1:bb:c7:84:ab:0d:a1:01:06:97:01:20:
c7:a6:88:f1:92:a8:f3:b9:4c:47:08:84:f1:70:c9:
67:b3:e2:ae:c8:ad:bb:4c:37:23:d3:de:48:f6:82:
9e:c8:a0:a7:53:64:e9:db:3c:94:a2:f3:7c:c0:53:
c2:0f:98:5f:79:7b:3b:0a:12:18:15:83:4c:7f:d9:
48:43:f6:15:92:8b:48:00:01:1f:ef:1c:fb:68:64:
31:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:BF:E0:AF:85:E0:0E:9B:3C:E8:15:62:74:DE:61:C7:12:44:C6
X509v3 Authority Key Identifier:
keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9e:e1:3a:f6:69:65:d1:f3:f2:4c:5b:77:8d:1c:ad:aa:10:
b6:d4:c5:78:71:1e:69:e0:16:be:e1:f5:64:3f:60:36:cd:cc:
b8:b1:13:01:20:47:eb:1e:bc:17:82:5c:01:c7:a7:81:be:ae:
5a:ea:48:50:6f:f3:68:70:46:d6:a8:06:7b:4a:dd:87:3f:db:
4d:91:13:f1:96:36:d3:4e:14:1a:38:a9:49:10:09:fd:f0:37:
67:79:82:32:06:c4:88:f1:69:cf:30:ff:5f:ef:e8:37:1b:07:
79:b5:17:c5:87:f2:3f:03:a6:40:d4:73:07:18:65:82:79:25:
a1:57:86:c1:78:23:6d:13:0f:6b:2e:76:55:85:0d:05:36:9a:
63:5d:36:67:47:83:44:0b:d8:cc:82:04:c2:8b:60:1f:3d:66:
6b:01:c5:9c:02:0e:eb:25:59:90:54:09:1b:f2:49:72:ea:5f:
99:a6:c5:6c:c0:37:dc:e5:3d:5b:e3:e4:22:af:19:c3:f6:42:
b7:7b:6e:38:c4:d8:23:55:8d:52:94:da:be:af:ae:83:d9:04:
0b:d3:49:df:61:10:49:3e:6c:4c:0c:e2:73:43:ad:b6:8f:ec:
81:3d:00:b9:77:87:7f:71:ac:49:0b:a6:0e:36:f3:61:ee:6d:
5d:be:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:21:35 2025 by rpki-client