Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: pAE9/I6QYua7Mo4lqx8NNb3BjWKVYDjudT7G/1XwK0Y=
Subject key identifier: CD:A9:45:95:BE:E6:CB:C5:2D:E1:84:D2:C1:F7:6D:72:F4:48:B0:F6
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 01968210478E56CFE8C5F1B2160312A110B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 06EE
Signing time: Tue 29 Apr 2025 15:00:27 +0000
Manifest this update: Tue 29 Apr 2025 15:00:27 +0000
Manifest next update: Wed 30 Apr 2025 15:00:27 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: grqQ0A60a8XcJG6ezYyHEfyjKT4s1g6UYAq280uZVcA=)
2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:47:8e:56:cf:e8:c5:f1:b2:16:03:12:a1:10:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Apr 29 15:00:27 2025 GMT
Not After : Apr 30 15:00:27 2025 GMT
Subject: CN=cda94595bee6cbc52de184d2c1f76d72f448b0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d7:11:6a:fb:73:23:42:62:28:79:23:25:40:
15:76:e0:f8:cd:bc:ac:3b:84:bd:03:37:c4:1b:68:
a3:89:c6:da:b0:59:bd:47:6a:da:6b:34:a5:45:95:
43:3a:ae:eb:3c:a1:8e:73:cc:7e:ef:33:c9:e4:68:
5e:3b:f3:8c:41:74:9f:af:1a:39:71:75:52:ce:c7:
81:af:54:92:e5:8b:b3:c2:7c:e4:ca:52:86:0e:ac:
74:02:cf:40:69:fa:a4:4d:cd:ef:38:e5:a6:22:e7:
a7:9c:05:ef:44:43:eb:00:67:b4:70:3d:d5:e4:a8:
af:e4:bc:33:2e:bf:ac:ee:ec:71:45:9f:28:62:fe:
62:be:82:38:31:ab:d1:1f:45:70:9c:b3:28:e0:e3:
42:20:2f:e1:71:cc:91:02:b8:06:05:00:12:26:69:
f0:d6:38:2d:9d:ca:71:53:8f:30:a6:92:c3:f8:69:
58:54:3a:45:bb:e2:c5:69:1e:54:33:ee:e7:aa:94:
ea:55:32:96:82:e5:b3:f7:99:3c:65:3c:9a:2f:a5:
9b:fa:ea:49:26:f0:82:0e:e8:c6:79:fb:68:36:44:
99:a4:ed:cb:08:31:18:7e:88:70:cf:3d:87:94:78:
bc:d9:21:16:4d:9c:03:b2:e8:35:49:dc:fd:f7:35:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:45:95:BE:E6:CB:C5:2D:E1:84:D2:C1:F7:6D:72:F4:48:B0:F6
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1e:ff:ee:25:4e:11:d1:e3:0c:a0:42:08:88:82:56:73:0f:
19:69:b1:21:3a:cf:1e:43:05:1a:97:70:12:4e:66:56:15:82:
f0:bb:5c:0e:22:f9:f7:1e:43:ea:c5:7b:92:07:3c:98:43:64:
7f:1f:27:9b:a5:a0:4a:f2:c6:11:92:a7:47:54:8c:a1:f2:9b:
ed:0d:44:b5:4f:28:b0:74:ba:4b:48:31:57:c1:c8:b5:1b:61:
89:63:fd:a0:69:96:d5:6f:c8:ed:fb:51:41:fa:f1:15:c8:d4:
32:81:67:50:7f:45:9f:bc:e9:7c:15:ad:3d:d4:da:d2:83:3d:
6a:3d:ed:74:87:f7:bf:45:1b:b0:ad:ad:90:60:36:06:c5:b2:
6b:c6:e9:7e:1a:8d:cb:63:50:26:55:65:2d:25:36:a7:4c:24:
33:7b:54:ef:b9:14:ef:ee:38:48:c9:a0:b2:cc:61:c8:7f:8a:
5e:8e:42:f2:4a:6d:3c:ee:43:5c:c6:90:8c:f3:78:c9:08:02:
ac:50:d4:2c:0e:ff:0e:b7:4d:d9:10:4a:8f:93:2c:9d:b1:ff:
79:b4:99:96:ce:f7:36:b7:95:d9:80:62:0e:35:46:a0:bf:46:
af:c7:cc:66:a7:be:ed:89:ce:04:2b:e2:7f:a4:92:e3:2c:47:
ce:9b:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:46:47 2025 by rpki-client