Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
File: FWKPn9qri4VJS8M4gJGhIrC7pcg.mft (raw, json)
Hash identifier: smKw2dZwbwvcfpEzK9Jd7+SPBX/NKxGg/9d3A0JkloI=
Subject key identifier: E8:B6:50:88:BE:D4:05:56:9A:B8:84:7C:9A:C1:BE:13:A7:9F:0D:1C
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Certificate issuer: /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial: 01969CE2F8A407290A3DBB4D7D02C9474D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
Manifest number: 1522
Signing time: Sun 04 May 2025 20:00:42 +0000
Manifest this update: Sun 04 May 2025 20:00:42 +0000
Manifest next update: Mon 05 May 2025 20:00:42 +0000
Files and hashes: 1: 7ckiXqFCsl9Ii0LOr5UmFiqADBU.roa (hash: 9bGwX0kwTRRgIdjNNDlgMuEQgvhNB3ZWI22IbqLrXvk=)
2: FWKPn9qri4VJS8M4gJGhIrC7pcg.crl (hash: 0crMl0nI/6NsVZ/s3OO6PXYA+Sa3s9NXLcHZ1tvXO/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:f8:a4:07:29:0a:3d:bb:4d:7d:02:c9:47:4d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Validity
Not Before: May 4 20:00:42 2025 GMT
Not After : May 5 20:00:42 2025 GMT
Subject: CN=e8b65088bed405569ab8847c9ac1be13a79f0d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:db:59:c6:07:8c:48:f4:7b:5e:44:45:57:
d1:87:9a:31:c8:41:96:79:f3:7f:c6:70:68:ef:ee:
5f:f7:26:32:89:2a:ee:52:f3:3f:f9:7e:f1:9a:4d:
a7:01:22:c2:68:e0:4e:6d:1b:8b:2e:16:c8:17:75:
01:aa:5c:64:6e:b6:4d:a7:58:40:25:d1:b7:42:59:
a0:4b:54:e3:d7:c2:06:a4:14:fe:59:4a:f6:2f:cd:
bc:cc:96:74:01:e0:b7:fa:bd:11:e0:89:48:f9:05:
e0:57:c2:da:b4:75:49:f1:9b:bc:1a:e7:80:03:25:
cb:07:e0:c5:fd:eb:9a:bc:2d:91:6f:37:92:68:ec:
ac:61:81:fe:80:78:90:84:d6:db:90:3c:3b:a5:02:
02:cf:25:da:30:b0:3f:07:85:65:29:5c:a0:9b:f6:
4d:43:36:d4:3d:92:b3:72:bc:f6:86:a7:f5:ec:d2:
57:1c:34:2d:cf:9b:03:b8:33:a0:64:2a:66:e0:76:
45:c2:81:91:67:08:c1:17:77:20:36:f6:a3:82:d3:
19:7b:38:27:e0:82:c1:09:e7:40:a2:d2:bd:15:d9:
a6:2a:fc:34:9a:b5:60:b7:d5:c5:a3:37:83:9c:d3:
ee:28:ac:e2:28:79:d7:49:22:a0:68:ad:ae:05:64:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B6:50:88:BE:D4:05:56:9A:B8:84:7C:9A:C1:BE:13:A7:9F:0D:1C
X509v3 Authority Key Identifier:
keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b6:57:37:8b:c9:79:cb:63:a8:22:b9:70:84:7e:7d:16:52:
24:95:6c:30:31:eb:88:30:d8:23:8e:3b:1a:b1:91:6e:3a:d5:
de:5e:1f:d5:c9:99:07:fa:07:55:2a:42:4e:0a:24:5e:fb:68:
ec:5a:e3:ba:e3:d0:03:d4:55:22:1b:c2:4e:07:bf:ac:de:62:
5e:91:c2:da:a8:4d:a4:0c:95:70:9c:9d:eb:01:34:4b:a8:5c:
f9:8f:4f:a7:58:8e:9b:11:20:15:2f:30:63:ab:12:53:9b:ef:
25:c7:33:84:b2:85:95:86:3e:bf:e2:7e:b6:d6:f6:bc:c0:be:
97:78:c9:e5:11:86:13:70:e1:bd:c2:b9:0e:f7:36:d2:24:43:
96:b0:38:18:f5:ba:e7:6b:e5:e8:a4:51:c3:44:d2:7f:96:b8:
c4:f2:92:c2:91:96:c3:21:8e:23:20:07:75:85:43:1d:ba:38:
1d:2d:9f:e7:41:a5:ae:c7:50:0b:f5:ec:84:6b:7a:f9:12:6f:
28:bb:be:24:bf:4e:a4:f8:49:b2:ee:20:28:24:56:33:27:57:
cf:e8:4c:df:f8:7c:ef:27:5a:e2:64:a8:ff:e9:73:16:c5:b2:
57:d5:6b:fe:f0:ed:5e:40:ca:38:b8:18:29:7d:31:5f:4f:65:
db:61:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:34:55 2025 by rpki-client