Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: VrfinKsFtHoKwC6pQOC0K4cyZL2OY0Cb1U4vgltPUZc=
Subject key identifier: 01:6D:1D:FC:C1:68:FF:F8:9C:5E:11:56:CF:25:CD:65:64:FB:03:03
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 01969FACE9CEDE28CB13B19ED1105C54A428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0993
Signing time: Mon 05 May 2025 09:00:31 +0000
Manifest this update: Mon 05 May 2025 09:00:31 +0000
Manifest next update: Tue 06 May 2025 09:00:31 +0000
Files and hashes: 1: ACD72rE-jioyxPH9RAuGb5mC6oU.roa (hash: QtFylWnulCc2yQBn+mtJTIcyYgVI68tUvXBBF4rKnVc=)
2: _4IIJhtFlJdrkjSOppTsaFBNkrg.roa (hash: r5hI609ZhZ4xyXvkrk1Z26XwV02QOdDJJ0CIfMyhg7s=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: bCJVdqTn2uXP2We5jofURIx9dH4mcsKP5FJ08qd+zU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:e9:ce:de:28:cb:13:b1:9e:d1:10:5c:54:a4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: May 5 09:00:31 2025 GMT
Not After : May 6 09:00:31 2025 GMT
Subject: CN=016d1dfcc168fff89c5e1156cf25cd6564fb0303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:f7:02:a9:42:5a:e3:42:31:e2:dd:1e:c6:
20:5f:6f:ec:10:3c:36:da:c0:7a:b2:47:c0:db:5f:
4b:1a:7d:c5:ee:8f:fc:a8:83:43:56:73:18:0c:20:
1a:2e:91:14:ac:90:ed:5b:89:b3:fb:1b:ea:9b:3c:
e1:94:bb:62:e0:af:d7:b3:fa:26:0b:c9:df:4a:fb:
db:0f:59:88:71:22:07:30:db:5e:ae:34:42:a9:13:
bf:3c:0f:20:00:a9:33:aa:98:b7:63:d7:e7:cb:30:
f6:da:2e:82:0c:4d:d0:2f:d9:5e:f5:f1:63:f4:b9:
7c:cc:57:bc:ff:74:a9:e8:7d:49:dd:a6:65:37:b0:
8e:96:dd:19:e9:43:d4:25:68:6a:6b:7b:ab:1a:3d:
33:02:9b:4d:ce:47:6e:96:72:44:ca:df:ca:c6:ca:
fa:46:10:8f:29:43:01:01:a7:81:5b:70:74:00:a6:
72:09:77:9e:a3:40:94:05:34:87:1a:27:41:5e:ea:
4a:34:07:ed:04:1f:c5:d1:1e:76:73:fb:74:28:13:
86:0c:55:f7:d9:1d:0b:94:84:2a:75:85:ab:4e:9f:
02:f2:cb:cc:fa:eb:17:34:95:11:d6:9c:86:7e:74:
5e:5b:b7:17:c7:e2:af:7d:69:13:e0:f9:13:d0:0d:
5d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6D:1D:FC:C1:68:FF:F8:9C:5E:11:56:CF:25:CD:65:64:FB:03:03
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:14:88:29:cc:48:5b:8e:e9:79:28:58:e3:dc:de:61:47:33:
fa:ae:dd:9e:93:20:e9:1b:12:3a:6e:a7:68:0a:dd:44:bb:2e:
66:f6:fa:de:72:19:aa:2b:dc:56:20:e2:b9:4f:0e:90:18:21:
0d:62:05:f8:5b:be:85:e4:3a:0d:e5:59:79:7e:b7:56:14:85:
ff:9a:72:87:a0:5d:ee:a9:31:d9:34:5c:8f:97:b7:e6:47:73:
2f:da:81:f6:e2:d4:cb:ae:67:a8:c0:38:f9:7f:d0:84:25:18:
3e:46:7b:7f:3c:cd:f8:46:ea:43:53:c5:ea:06:43:85:d7:06:
d0:83:dd:46:dc:c9:b8:e9:24:ca:b3:d3:c7:88:24:71:59:79:
19:97:00:55:2d:cf:1c:c8:54:27:66:cb:f7:f7:22:72:23:2b:
f2:ac:d9:85:57:45:bc:d1:82:c5:24:08:1e:ac:6d:83:a4:82:
60:e6:fa:f5:03:d3:33:33:10:43:f8:40:c2:32:e6:23:c5:68:
f7:59:a6:a9:6e:ca:1d:a7:8d:fc:5c:61:8d:6b:ad:3a:44:78:
03:78:41:73:3d:c9:0d:e6:65:c3:ed:f8:4d:85:19:31:74:bb:
e1:a1:d0:91:db:1f:ca:54:5e:06:34:91:8d:fa:d0:3f:52:b6:
0e:4c:f3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:50:08 2025 by rpki-client