Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
File: FnhcBIzz1bIYafSUNPLTu0fUO6E.mft (raw, json)
Hash identifier: Yv0EtdCjeq0M6Zzri5ApmYaVfVu741lnwk/Z+Jb97Us=
Subject key identifier: A0:F2:EB:E6:D8:EE:D2:42:71:44:CE:3E:C7:32:D7:0D:F1:64:30:00
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Certificate issuer: /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial: 0196A1649D638C14C714B152BB80C10510C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
Manifest number: 1422
Signing time: Mon 05 May 2025 17:00:47 +0000
Manifest this update: Mon 05 May 2025 17:00:47 +0000
Manifest next update: Tue 06 May 2025 17:00:47 +0000
Files and hashes: 1: FnhcBIzz1bIYafSUNPLTu0fUO6E.crl (hash: CtjZYVWf+4BMtP4i6DM4a5G5S352fTif41FsImGG7cA=)
2: wq-sbK6wZCslTg-KQk0eohj20JY.roa (hash: dIwNqBJjOyWxVd+rD1dPAAWpwiNwWE2sUgy3A31jXAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:9d:63:8c:14:c7:14:b1:52:bb:80:c1:05:10:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Validity
Not Before: May 5 17:00:47 2025 GMT
Not After : May 6 17:00:47 2025 GMT
Subject: CN=a0f2ebe6d8eed2427144ce3ec732d70df1643000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4b:39:d9:d8:06:e3:c6:e0:a7:a5:66:de:01:
cd:56:0b:00:73:5c:e3:90:7c:a7:56:12:b0:88:52:
ce:b7:9f:60:5e:ef:70:15:85:15:0e:36:78:fa:1b:
d0:b6:0f:a1:d7:ad:0f:0b:c9:d4:96:18:1e:60:53:
1a:ed:86:cc:83:fb:b3:0f:a8:fb:9d:b4:39:0d:1e:
44:11:4c:cb:d6:6a:4e:77:b3:9b:1e:22:5b:3e:87:
13:e2:aa:cb:55:9d:b5:99:4d:72:3f:ea:be:59:fd:
85:9d:78:24:e3:4d:b6:f6:9f:9f:74:70:44:23:69:
44:53:f6:c5:3f:69:73:0b:21:dc:40:4a:8e:b4:0b:
b8:c3:43:f9:10:ce:88:62:9c:e2:19:53:be:b2:8a:
8e:3b:2a:bf:d3:01:c1:74:1d:48:e5:c9:7e:0f:6c:
b9:c1:5e:d0:b3:36:99:21:cd:e1:e3:c3:01:14:da:
d5:16:9d:d2:8f:f8:64:9d:b3:dc:90:15:28:64:e7:
fe:64:4f:29:2e:e4:cd:56:87:7c:99:ad:1a:ae:62:
08:06:65:05:99:17:10:92:c3:76:6c:fb:8c:29:ed:
ce:73:38:6e:81:16:63:53:e1:60:0a:1b:3a:b8:8f:
6a:bc:d3:86:da:39:79:fe:70:7b:34:58:50:36:bc:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:EB:E6:D8:EE:D2:42:71:44:CE:3E:C7:32:D7:0D:F1:64:30:00
X509v3 Authority Key Identifier:
keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9d:8e:42:b4:bf:5d:96:3a:52:d5:00:13:a3:62:97:73:87:
5e:e6:b2:21:08:c7:b5:68:bf:e8:c0:3e:39:d4:f4:0e:b8:6b:
70:47:45:78:36:30:22:da:b0:c2:96:1b:1b:0b:d9:ab:72:4a:
8d:51:89:91:48:81:1b:e5:46:5e:9e:d2:9b:40:bb:e1:2c:2b:
22:0e:36:ed:fd:af:d5:e7:69:73:ab:ef:49:95:1b:f3:60:ee:
90:2f:28:25:67:26:eb:da:3a:21:6c:6b:f8:57:8d:0a:d6:92:
60:ea:d7:ad:25:ee:63:46:62:d9:73:88:df:43:c7:73:da:eb:
40:3b:dc:c7:23:43:5a:e9:18:d8:0b:3b:78:e5:bc:20:6c:ac:
01:8b:ea:24:59:1d:58:56:4e:31:49:79:69:f6:ea:fc:f8:2b:
88:9f:6e:5d:8d:cd:84:f2:e2:46:e7:52:52:69:e3:36:62:a4:
eb:7f:ca:8e:fa:19:b7:06:77:2d:84:ca:1d:c2:9b:1a:5d:59:
56:e0:b9:e8:57:1d:5f:21:e9:32:9e:41:db:e3:b1:d6:1d:4a:
50:45:f7:e6:44:27:e7:85:cb:09:19:88:c8:fc:5e:3f:e3:55:
6e:08:f0:33:61:49:10:09:57:aa:90:15:9d:2a:e3:a2:38:0d:
69:a3:b8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:03:36 2025 by rpki-client