Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: xgmY24q1zlrN3KMcfB/U5URLTAlVl118zBvvhzxK4Qg=
Subject key identifier: 30:85:14:22:B0:5F:92:F8:2F:EA:3D:12:79:62:D2:9D:AD:04:89:76
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 0196BCA4FE0F86BCDB3366801099729BA69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 0FF8
Signing time: Sun 11 May 2025 00:00:51 +0000
Manifest this update: Sun 11 May 2025 00:00:51 +0000
Manifest next update: Mon 12 May 2025 00:00:51 +0000
Files and hashes: 1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=)
2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: ObJ5Bt+XYOo1fXXSKeXlhQCpY36EX7S9sksBad6/9QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:fe:0f:86:bc:db:33:66:80:10:99:72:9b:a6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: May 11 00:00:51 2025 GMT
Not After : May 12 00:00:51 2025 GMT
Subject: CN=30851422b05f92f82fea3d127962d29dad048976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:4b:8b:83:19:fd:37:c1:ad:14:a7:6e:1c:
c4:cd:29:6b:1f:43:56:7e:cb:c3:f7:e2:58:63:bd:
f5:c4:95:7c:cd:4d:96:a6:50:99:6b:40:ce:03:fb:
92:02:f3:7a:df:b6:7c:f4:30:11:27:c9:5d:32:35:
c8:88:7c:d3:6b:1e:a4:76:5f:db:9a:0e:eb:3c:89:
91:5f:b6:32:89:3c:cc:b0:fb:a7:74:28:a6:85:64:
6a:b1:24:d4:78:f5:07:9a:09:4f:8e:6f:b0:ae:d5:
97:19:fe:2e:74:28:3b:d3:83:a0:e0:b1:40:d2:18:
7e:c6:48:6a:ce:34:9e:c5:b4:f4:4d:fb:39:b4:81:
1c:69:5b:e6:32:66:f1:45:14:21:06:6b:a8:0f:03:
19:c4:88:a8:51:3d:80:6c:03:43:20:bc:89:23:39:
d0:cb:1c:78:13:9b:7e:8d:f9:d0:66:17:90:3f:f5:
75:b1:ae:e3:1d:99:38:0b:c6:71:ca:47:76:d1:36:
19:d1:6e:04:04:99:8e:ef:1c:a5:df:b4:b5:56:34:
ee:3a:99:e6:68:98:68:a4:f8:3b:83:f7:d7:de:57:
d3:ef:eb:36:8f:d0:84:46:3d:43:29:aa:6b:33:49:
25:4b:92:f5:82:c0:8f:d5:0b:b6:b8:01:15:f9:c4:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:85:14:22:B0:5F:92:F8:2F:EA:3D:12:79:62:D2:9D:AD:04:89:76
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f6:3e:43:05:7a:b0:cc:59:d0:a9:22:ec:18:fc:69:ec:81:
f5:e3:2b:f0:ab:da:e4:4d:44:06:8a:41:c5:07:ea:ac:b5:e1:
72:9b:56:d7:3f:b4:b4:1b:16:db:bb:62:b3:bc:76:40:05:2a:
a2:dc:de:1f:79:3c:01:53:30:ac:b3:6a:e3:1b:60:45:de:b6:
99:d1:77:9b:4a:6d:ca:27:cc:15:9d:e7:28:f5:75:ff:3f:4d:
fb:3c:d6:5b:5c:b9:ac:9b:85:ad:31:2e:50:d5:0e:9d:fc:d0:
5d:49:0d:56:a1:c6:99:f8:88:07:0b:28:51:b4:f7:ec:5d:c3:
b1:0c:cf:ee:19:34:50:5a:11:e4:a2:2a:ba:4e:0c:89:44:76:
bb:c8:12:21:3d:22:54:1a:45:c3:72:f6:0f:3b:97:1f:72:af:
69:4a:bd:01:1b:2d:95:78:ba:5d:84:b6:12:fb:f3:af:0d:17:
ef:9d:70:1b:82:20:64:ea:9f:28:a7:27:f5:a7:6c:ce:7d:5f:
a7:1e:d2:ef:55:64:74:5b:a0:b5:9d:09:b3:61:f0:21:20:63:
ba:58:8b:52:f2:49:67:79:97:55:20:f7:87:a1:af:c0:e6:1e:
1a:89:e0:6e:14:1b:58:d5:fc:53:84:ec:b3:01:dc:31:90:2c:
50:c1:07:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:33:32 2025 by rpki-client