Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
File: FycWA_qPBq-kSoeCBl81-WWcft0.mft (raw, json)
Hash identifier: Q/Jzoasmmp43FXUgO0X5CvN7WAdOiRCOPt1CEVtmuG0=
Subject key identifier: F1:FA:24:48:CD:14:41:24:27:57:5C:B9:C2:25:EC:5E:B6:B8:B8:FA
Authority key identifier: 17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD
Certificate issuer: /CN=17271603fa8f06afa44a8782065f35f9659c7edd
Certificate serial: 0196B4B4757928AB98CA896B8FFFB3D29D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
Manifest number: CB
Signing time: Fri 09 May 2025 11:00:47 +0000
Manifest this update: Fri 09 May 2025 11:00:47 +0000
Manifest next update: Sat 10 May 2025 11:00:47 +0000
Files and hashes: 1: FycWA_qPBq-kSoeCBl81-WWcft0.crl (hash: zWF1A7+wxconub28nAFcSJKC4zgSxD+6Tx4JmimqGco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:75:79:28:ab:98:ca:89:6b:8f:ff:b3:d2:9d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17271603fa8f06afa44a8782065f35f9659c7edd
Validity
Not Before: May 9 11:00:47 2025 GMT
Not After : May 10 11:00:47 2025 GMT
Subject: CN=f1fa2448cd14412427575cb9c225ec5eb6b8b8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:e0:c6:72:e4:fd:2c:56:50:5d:84:ab:27:
e9:a2:58:19:f6:24:a5:62:95:13:26:ba:cd:c2:9f:
3a:61:d2:3e:8d:e2:85:3c:84:c1:a0:79:a1:8b:36:
1f:bc:80:d1:1c:c8:2c:6e:89:08:82:28:fa:3c:8b:
0e:88:f6:5e:de:cd:e7:28:31:a5:fd:bf:9e:09:df:
55:7a:95:ca:ae:17:d1:34:d5:e4:b7:96:58:3a:2c:
9f:58:dd:f7:8d:f0:a2:3c:e8:0b:bd:fe:b8:72:f6:
48:2d:2c:2f:03:50:af:40:f2:e7:67:18:4f:bb:46:
ed:33:62:e4:93:2c:cc:31:1b:86:6b:cf:bc:1b:30:
a0:cb:6d:6d:06:75:56:af:6e:18:54:4e:15:43:15:
5e:52:79:2f:61:a6:79:48:2b:42:83:7e:32:fa:c3:
e3:1a:4a:e4:38:f1:1a:d8:ec:05:41:5a:f2:52:68:
cd:67:4c:6e:e8:44:4f:e0:5a:b2:c4:d2:77:34:c2:
56:8c:33:71:97:cb:b1:33:38:5a:0d:1c:f4:be:f4:
cf:b7:d0:0e:60:e6:be:f3:3f:14:8c:cd:5e:5b:65:
30:59:a9:a4:68:30:e5:55:f6:46:1f:c2:97:4e:4e:
e3:25:4b:50:29:01:38:ff:44:8a:79:b4:1d:af:57:
b9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FA:24:48:CD:14:41:24:27:57:5C:B9:C2:25:EC:5E:B6:B8:B8:FA
X509v3 Authority Key Identifier:
keyid:17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:08:52:a2:2a:6d:80:61:ba:2d:ff:c6:7b:2f:fc:7c:83:c5:
c5:49:89:74:99:3c:ae:70:d6:b9:63:71:a9:b6:dc:da:1e:2e:
35:f7:55:de:97:26:0d:3a:90:1a:39:b8:31:55:4a:e6:16:80:
ac:fd:6b:4d:80:48:44:95:af:ec:8b:bc:77:10:43:3b:70:f7:
0d:b6:4f:e4:ea:f2:04:be:ab:d8:2a:4d:90:b4:41:cd:bf:3f:
79:d9:86:9a:2f:d2:c4:62:73:de:09:d2:32:4c:cc:37:ff:0b:
14:4c:fd:a7:e8:b8:ae:29:a3:c7:1a:54:44:b0:80:c2:46:35:
50:e5:9b:64:9b:ae:96:5f:64:d1:7f:c5:5b:3f:7a:62:20:1f:
4e:b2:2c:29:b5:22:30:70:f2:d5:a3:a8:ed:9a:92:e4:79:e2:
bb:9b:53:56:44:06:78:12:3f:63:8d:94:0f:cf:03:2f:32:63:
c8:a3:0d:57:c9:22:e8:20:67:8e:ee:0a:aa:70:e2:a8:02:7f:
30:32:e6:e5:54:97:85:08:8e:4d:30:5d:3d:05:b2:bc:1c:b3:
51:4b:d1:89:f1:91:2c:6f:e7:81:37:87:2e:a4:43:3a:82:eb:
07:58:3e:8c:7f:4c:ab:af:0b:b0:1f:e9:6b:d7:db:d1:fe:19:
9d:2e:90:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:58:38 2025 by rpki-client