Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier: fQ20cqVfuql9nTdH3mzFrICLk7CV3gZCbx4EVp89K8Q=
Subject key identifier: C3:DE:BF:D3:A4:32:32:B5:FC:87:4F:23:11:ED:02:0A:41:F6:A0:39
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 01967C0E300DDF641C14D445B52A159B6CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number: 0938
Signing time: Mon 28 Apr 2025 11:00:26 +0000
Manifest this update: Mon 28 Apr 2025 11:00:26 +0000
Manifest next update: Tue 29 Apr 2025 11:00:26 +0000
Files and hashes: 1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=)
2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: HjtfInzmUhod5v4ZBp9nOuqj7UYYhh7aawGTQ0aEdEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:30:0d:df:64:1c:14:d4:45:b5:2a:15:9b:6c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Apr 28 11:00:26 2025 GMT
Not After : Apr 29 11:00:26 2025 GMT
Subject: CN=c3debfd3a43232b5fc874f2311ed020a41f6a039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:ed:b0:e5:da:c3:be:b2:dd:45:bd:89:3d:
f4:c2:bf:49:f6:20:6d:3e:c9:8b:0c:8a:4a:fa:cb:
56:67:16:fd:bf:52:14:8b:e7:b5:a9:ad:bb:a3:e1:
2b:38:6a:56:32:66:fc:c4:d7:11:da:04:00:b2:40:
42:01:56:74:e0:59:9d:44:ba:e0:0b:61:9c:f5:4a:
7b:eb:c7:bf:28:49:26:25:90:7b:f1:77:b7:dd:d1:
6a:4b:8d:3a:ec:5e:a2:ae:de:55:8b:ec:44:52:b8:
0a:a7:f5:cb:54:1d:d3:26:96:87:b2:0d:6f:90:1e:
95:d0:35:14:08:d4:e7:a3:48:87:28:63:2c:25:97:
f5:bf:46:46:f6:86:2a:10:31:cb:d6:e8:46:ed:12:
9c:3e:59:c3:c5:c8:aa:96:42:11:27:66:0a:20:20:
2f:64:15:c7:67:79:4e:a4:c5:3b:2e:61:41:5a:96:
46:77:74:a4:f0:00:3b:74:fc:bf:3f:26:6d:69:98:
30:d8:1e:89:2b:5a:e9:b5:7f:ca:14:69:d4:78:5b:
45:c0:1c:43:78:31:50:41:63:49:bf:51:78:43:21:
85:2f:f0:6c:76:72:42:90:b9:05:a2:28:b1:89:d5:
f8:72:46:16:12:a7:3b:28:65:49:ff:7d:08:ed:8f:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DE:BF:D3:A4:32:32:B5:FC:87:4F:23:11:ED:02:0A:41:F6:A0:39
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0a:2d:c0:39:4d:c4:58:6c:e3:40:17:78:75:79:8d:ba:00:
c8:53:3a:25:5c:6e:f4:88:dd:0a:38:d6:f2:23:d3:5a:fc:42:
fc:6b:af:99:ed:c5:bc:e3:2f:7b:c6:99:63:be:53:d0:90:48:
de:af:01:b9:fe:64:35:dc:35:83:92:8b:12:6c:10:97:74:58:
d5:0c:30:60:a2:3c:27:17:92:bc:b0:17:f4:12:01:5b:35:14:
84:80:24:5f:d8:35:2a:68:1d:d7:49:c1:21:1d:b1:76:b5:07:
40:e1:93:4d:06:0d:eb:d4:78:c3:ad:ff:f6:45:1f:a4:fc:47:
83:d6:4a:8a:d6:00:88:53:a4:22:96:f1:fa:46:7d:b6:b5:2c:
77:bc:ca:c2:98:b0:06:ec:8b:3a:fd:cb:e8:f6:d3:f5:cc:b9:
88:fa:eb:eb:ed:47:82:d1:ed:e4:23:27:75:71:68:b9:0b:ea:
55:77:32:d9:10:5f:7e:af:d6:a5:19:e8:94:6f:eb:30:e5:2c:
19:09:c2:03:75:c2:a6:eb:88:17:0a:ef:f2:19:aa:97:c7:76:
b3:0d:20:b7:26:a6:06:6e:c7:2b:97:7b:fe:a8:ba:dc:0b:f2:
e8:25:ec:cc:d6:93:e6:34:87:50:31:f9:dd:55:a0:b7:42:98:
a0:e8:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:14:01 2025 by rpki-client