Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
File: FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json)
Hash identifier: jG3TfCvSr3daSvmqlcBhwGzFSEN8+mO8YekkZAL2q04=
Subject key identifier: 9B:BF:98:34:5F:CD:4D:E2:C7:3D:75:1C:A8:91:C5:CB:CF:AF:AC:0A
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Certificate issuer: /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial: 0196C04AE87A4617924367DC0C31531FDC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
Manifest number: 0840
Signing time: Sun 11 May 2025 17:00:56 +0000
Manifest this update: Sun 11 May 2025 17:00:56 +0000
Manifest next update: Mon 12 May 2025 17:00:56 +0000
Files and hashes: 1: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: lYWukdbpJBa2Ul+YF9fwc6SCZx1BPjbhOO5FpkE4JFo=)
2: IUfWM-T8xAGUnehJbHrihlR8Ip4.roa (hash: +ZYqqzAxCIjpw2v4zvSgH/2R+ZjJqO0o/ztNO/Ll//g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:e8:7a:46:17:92:43:67:dc:0c:31:53:1f:dc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Validity
Not Before: May 11 17:00:56 2025 GMT
Not After : May 12 17:00:56 2025 GMT
Subject: CN=9bbf98345fcd4de2c73d751ca891c5cbcfafac0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:64:15:fc:9b:28:d9:5c:f1:04:91:b8:cf:
87:41:86:d3:67:8a:85:07:de:e6:5f:c0:bd:03:d0:
60:a4:0a:a1:63:6e:47:71:c7:29:73:24:28:50:a7:
3f:80:50:92:e0:b7:a5:7d:5f:9b:61:87:66:48:53:
9b:da:ea:ce:cd:06:d9:1d:cf:32:04:0f:9f:de:c0:
52:d3:25:23:63:a8:29:9a:f8:fc:6c:34:db:b8:73:
2d:f3:e3:9e:f9:21:85:13:04:79:85:7a:4f:34:f2:
0f:e4:c9:e6:b6:c3:7f:25:e1:6b:84:e9:ff:a0:04:
c1:99:e7:af:f0:94:35:b3:89:e8:90:c7:ec:52:b1:
f3:7e:2e:bb:fc:d8:71:f8:9d:52:5b:59:4a:ae:6e:
bb:f5:c6:fe:1e:f8:93:11:74:61:cf:72:8c:d4:30:
67:6b:19:27:25:b5:69:12:f6:07:3d:34:d7:cf:d9:
e7:14:a3:d1:d7:7e:ec:bd:0a:eb:c4:45:7a:8b:a3:
ce:fc:c0:6c:97:ec:5f:c3:41:9f:75:83:99:60:29:
fc:18:dc:e7:63:32:fa:19:f4:63:cb:82:ae:31:cc:
52:58:89:86:df:15:76:42:5a:64:39:17:e5:39:93:
a9:f9:90:89:05:69:03:71:36:b4:8a:59:a7:27:c1:
51:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BF:98:34:5F:CD:4D:E2:C7:3D:75:1C:A8:91:C5:CB:CF:AF:AC:0A
X509v3 Authority Key Identifier:
keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9c:34:41:1f:bf:bf:96:4e:06:cb:f6:56:b1:5b:c8:27:3d:
22:b9:bd:83:bb:40:62:2f:83:14:90:43:4d:2e:b8:fd:6c:3f:
26:54:6f:20:2c:2f:8c:25:6b:1f:a1:fd:9a:52:3c:54:4a:7a:
1d:5f:86:bb:4a:7a:62:63:3a:a5:b1:7d:53:d2:a1:91:ce:85:
ea:c0:70:84:7a:44:ba:9c:a7:24:73:69:89:5a:c1:6c:e6:31:
49:6b:cf:fb:fb:d9:d6:0b:29:30:31:59:ca:a8:41:64:ba:73:
de:42:a7:63:90:76:cf:8f:93:4f:40:66:86:da:04:33:3e:b3:
89:cd:45:98:7d:db:a7:58:8a:57:ce:5a:2b:97:ec:2e:f3:58:
8c:52:8e:7b:c2:a8:53:c9:70:a0:e3:40:93:f0:4c:53:df:57:
de:25:4b:f6:05:b4:3e:c5:53:fc:f8:3f:43:11:af:28:e3:5f:
0c:2e:c4:4f:58:9c:e0:1f:37:08:05:8d:43:17:2c:f6:47:2c:
cb:82:01:3d:73:0e:52:54:c9:db:c7:3a:1e:ea:a3:b9:ce:a7:
9c:78:0a:db:5d:cc:77:c7:81:5e:59:b4:9f:ce:8f:bb:fd:f1:
73:28:2b:a9:d6:c1:a3:a4:89:5d:86:c4:d2:1a:ae:ce:67:82:
c2:75:5c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:17:18 2025 by rpki-client