Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
File: F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json)
Hash identifier: IE+3h+DioSI1ckViDgGgRJ/NmofIdHWx1nCRA9i+VJk=
Subject key identifier: FE:BC:DC:0A:22:4E:27:1F:EA:E2:96:3B:51:90:BD:B1:43:64:1A:2F
Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
Certificate issuer: /CN=176c34e5ae7016c3605d3269564ae9685443595d
Certificate serial: 0196B4EB41CA841ACE9F47DC346E29382F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
Manifest number: 0796
Signing time: Fri 09 May 2025 12:00:38 +0000
Manifest this update: Fri 09 May 2025 12:00:38 +0000
Manifest next update: Sat 10 May 2025 12:00:38 +0000
Files and hashes: 1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: I4Q5jcxW7cvYMGn44pEJixgyOWK9z2OO9Zrks/imZ80=)
2: wlY-QtAkBrD3gjKIpeQoXPyzFOM.roa (hash: zJBXQ4JCSb3Ylp4EVKprUMeUDS30W25c/gEiCbzENgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:41:ca:84:1a:ce:9f:47:dc:34:6e:29:38:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d
Validity
Not Before: May 9 12:00:38 2025 GMT
Not After : May 10 12:00:38 2025 GMT
Subject: CN=febcdc0a224e271feae2963b5190bdb143641a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:33:f4:52:e8:82:12:f7:21:44:90:a0:22:
b7:d2:57:4d:eb:c3:4e:49:89:fe:bf:5a:fb:2f:1d:
d8:80:14:fe:d8:0c:7d:81:b2:6e:ed:25:7f:26:2e:
11:7e:8c:82:83:1b:c1:95:4d:68:9b:89:d5:60:92:
d6:74:c2:6f:7b:ff:7c:fc:33:5d:a1:fe:7e:51:32:
3d:e7:11:ee:9c:e6:de:c6:4b:7b:97:d3:4a:7b:c9:
97:82:3b:d3:fd:aa:a9:7e:f4:98:4e:bd:8c:0a:a0:
c1:60:dc:18:2d:df:82:dd:6e:b1:bf:b9:a8:03:c6:
3c:45:b5:6e:d6:19:4a:e9:fd:71:f6:52:96:2c:4a:
f1:b7:74:f9:80:39:79:14:8d:df:0d:25:2d:e9:ff:
65:2e:42:32:40:29:9f:b2:c8:57:68:3a:30:10:42:
8f:df:a4:86:1f:b6:33:8f:e5:c7:76:14:04:ea:4f:
58:bb:2a:42:f6:48:f0:86:8c:f0:36:a3:25:5e:2b:
17:80:8a:5a:c7:f0:d6:51:4b:9d:8f:76:b2:5d:32:
e8:86:7d:ef:ea:6a:18:ac:1c:72:68:0d:b6:c7:80:
94:57:31:82:10:42:c0:af:e9:48:5a:c2:92:d5:12:
ad:cd:26:66:8d:ec:81:c4:1b:f4:33:1d:0c:2f:51:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BC:DC:0A:22:4E:27:1F:EA:E2:96:3B:51:90:BD:B1:43:64:1A:2F
X509v3 Authority Key Identifier:
keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:82:73:6f:8f:97:37:d2:04:28:86:4a:07:bd:3a:f7:65:e8:
79:05:18:41:bf:c5:ea:e3:62:a8:aa:c0:46:38:58:ab:ef:4d:
9c:54:cc:4e:c7:a7:ba:f9:1a:77:45:1b:7e:cb:c6:1e:6f:ea:
37:9c:f3:69:72:18:72:d8:76:9c:5a:28:33:af:46:a8:2d:67:
af:9b:1c:d8:a3:5b:dc:52:1c:90:b1:5a:b5:8f:42:7c:19:4d:
0d:ce:22:8d:75:ac:6d:f6:38:08:e1:e7:37:20:4b:b9:65:82:
86:46:af:74:5f:01:da:3f:9d:0c:67:fc:fc:53:2d:0b:87:fb:
47:83:76:22:b3:62:a3:c4:26:e1:37:99:94:db:d4:5b:97:07:
a3:b9:48:f4:d8:0b:06:4b:de:4e:00:ae:65:25:6d:1f:e9:74:
38:bb:f9:28:df:13:7b:10:4f:91:09:e6:1c:88:a9:fb:da:63:
a1:79:b4:ff:4c:61:87:8e:e4:e7:a1:f6:9b:c1:df:6e:fe:c2:
77:68:5c:b3:ee:42:96:87:67:e0:b6:e2:22:94:54:68:ae:bb:
8f:84:9f:5a:c5:d1:b5:da:86:05:c1:f6:83:74:f0:59:38:67:
8c:1b:f0:b6:c2:91:82:43:9c:ea:75:2f:b2:40:64:a2:8b:57:
23:c4:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:35:51 2025 by rpki-client