Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File: FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier: 7hpXD8QKsmUKybNAVjWRM6NF2ev1+a37hp5W1iD8NpM=
Subject key identifier: E1:2D:F5:91:AA:DD:D7:11:EB:D5:54:D5:EC:B7:10:EF:F3:FB:B1:DF
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer: /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial: 0196A65422630914F251B5E6CD667043DCB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 16:00:53 +0000
Manifest this update: Tue 06 May 2025 16:00:53 +0000
Manifest next update: Wed 07 May 2025 16:00:53 +0000
Files and hashes: 1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: vX6h545z2rLFoEKIgNVTPulX2LoBoYomisgww+WYh14=)
2: xdBt6mgdPLmEK6zvGwvirp2QCKY.roa (hash: nTAIAin8JLzpAvSGVhNOts7eSHkAmQZF1jcZc7SgaKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:22:63:09:14:f2:51:b5:e6:cd:66:70:43:dc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Validity
Not Before: May 6 16:00:53 2025 GMT
Not After : May 7 16:00:53 2025 GMT
Subject: CN=e12df591aaddd711ebd554d5ecb710eff3fbb1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:fb:5b:ce:04:b3:4a:51:98:8f:12:b0:5f:
e0:0c:a9:1e:02:a9:45:29:04:b9:ae:0a:cd:f9:c0:
d6:2c:b7:69:be:07:6b:7f:eb:22:2e:96:81:21:ad:
23:e7:3b:ef:c3:f7:67:a4:ab:6e:0c:07:88:96:2c:
7e:38:79:51:a0:f0:14:13:06:6c:02:99:f3:cb:99:
0f:67:8b:3f:24:8d:82:c7:24:dd:10:8b:a0:e6:f2:
42:40:59:10:07:18:d0:90:45:0d:55:84:42:53:93:
c8:8a:b6:8a:4a:1a:4c:0b:da:05:61:7b:e8:3f:f2:
21:29:31:11:24:4a:ad:d4:18:b7:08:dc:3d:5a:6b:
7b:72:d2:c2:59:11:8e:e8:67:3d:fd:8d:bc:41:ab:
4f:0e:8a:02:ed:2a:cc:e7:24:e2:f4:f7:d9:98:96:
e0:0c:7d:84:17:76:ac:ea:ea:c6:a3:5a:a9:ca:be:
3e:85:97:e3:f8:ec:35:2e:bf:83:8f:12:d0:a9:78:
0d:5c:26:21:e5:50:f8:be:f7:35:7a:64:74:3b:92:
cc:ab:38:ce:d6:d2:b3:14:f5:da:b8:ea:8c:67:7d:
68:4c:04:35:07:8f:60:49:bb:00:cd:91:df:53:1f:
a4:d7:d7:2d:fc:d2:91:4a:aa:e0:99:56:68:d1:5d:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:F5:91:AA:DD:D7:11:EB:D5:54:D5:EC:B7:10:EF:F3:FB:B1:DF
X509v3 Authority Key Identifier:
keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7c:92:0b:11:a0:9f:30:07:b5:da:84:c3:88:f3:74:62:ec:
ad:7c:9c:9e:c3:5f:69:0e:3f:29:4c:78:24:af:de:4f:36:cf:
17:6f:84:18:98:c4:fb:c3:0f:b9:d2:04:c0:39:6a:f2:2b:81:
e2:0a:77:a4:21:6a:6d:05:19:91:1d:6a:e8:5f:e9:8d:6e:54:
8e:28:a3:9a:83:27:ed:28:7f:1a:bc:3d:8a:00:e3:e0:72:b4:
01:71:85:24:9c:fc:e0:4e:ef:68:82:41:20:a7:11:3a:d0:2d:
42:6b:0d:5b:8f:89:0c:8b:b4:b5:c1:28:9b:98:86:24:b3:4f:
40:fd:37:cc:56:ba:c9:ef:91:25:f3:06:a4:d3:88:ed:bb:36:
ac:98:4a:61:89:cb:24:ec:a8:a9:28:7b:56:13:54:02:58:0d:
c0:ed:03:01:6e:3d:54:33:be:88:ef:bd:ca:95:27:74:06:82:
92:74:f3:16:a5:cf:c1:53:06:ab:07:e7:f9:4b:52:1f:b3:ee:
67:63:60:62:74:2c:56:ca:45:7e:0e:7a:9c:47:e1:00:3a:31:
b5:fa:6b:6d:fa:e7:70:c5:7c:1f:56:55:15:81:02:1a:d6:c0:
16:9c:6a:8d:4b:89:c8:fd:e1:6b:7e:b4:c4:87:12:08:b8:30:
f4:b9:7e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:42:40 2025 by rpki-client