Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
File: ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft (raw, json)
Hash identifier: xea4XK+1iKCOsyl+h7ys7AugmaxuVwAcjkvVPI4ADzY=
Subject key identifier: 65:78:72:00:7A:91:5D:C0:FE:08:7A:56:EB:7B:D4:71:1D:13:AB:22
Authority key identifier: 7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
Certificate issuer: /CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Certificate serial: 0196760D19EB72B7CD2C7793B695B05DCD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 07:01:31 +0000
Manifest this update: Sun 27 Apr 2025 07:01:31 +0000
Manifest next update: Mon 28 Apr 2025 07:01:31 +0000
Files and hashes: 1: W5t6K8mhaeB1jcBRnZnKCObRLXo.roa (hash: vlPvYnrh67Sac6G89vl74L5sy1jyV/vOZ0tMCXQKGc4=)
2: ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl (hash: FZ45zkBj/352PGE+G1CG4azBSgXCSDkcI2PF0FHD9zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:19:eb:72:b7:cd:2c:77:93:b6:95:b0:5d:cd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Validity
Not Before: Apr 27 07:01:31 2025 GMT
Not After : Apr 28 07:01:31 2025 GMT
Subject: CN=657872007a915dc0fe087a56eb7bd4711d13ab22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:f2:30:a0:61:cd:70:3c:1f:cb:b8:1e:1d:
87:3a:1e:8d:4f:0e:4c:29:dc:45:6c:11:70:72:6d:
b2:a1:ff:69:21:29:77:09:dc:63:a5:81:9e:f7:ba:
84:94:5b:e5:75:6f:5a:eb:9a:8e:09:f7:90:86:d8:
84:ad:3b:b7:81:fd:51:61:aa:e1:ed:8b:ba:43:50:
e4:6d:a4:ac:1f:ce:b1:c5:17:fe:e9:79:28:13:80:
aa:b4:68:3d:a4:bb:9c:5c:2b:89:9b:6c:77:f5:3d:
14:71:9d:46:8f:d5:14:30:91:a6:4b:1c:af:c8:76:
da:a6:a4:e0:60:e0:47:6f:61:de:ac:27:4d:34:fd:
16:71:b9:49:14:db:45:be:d1:12:05:8b:88:39:e6:
17:13:85:fc:52:1b:dc:77:7e:8f:3d:42:ef:93:86:
9b:3c:e8:d9:b6:bb:63:d6:0c:93:7c:ee:42:49:a8:
70:8b:e4:d9:89:ff:b8:c4:97:d9:a2:02:40:45:00:
da:db:36:95:e8:9d:05:b4:75:a1:aa:43:08:e6:c7:
f3:fb:38:36:91:9c:ff:0f:bf:d5:17:9e:90:38:52:
93:c0:98:d2:fc:5e:2f:ae:3a:11:89:20:d4:74:d4:
7c:9e:51:83:a8:c8:de:d4:ae:3b:63:9b:3c:5a:e6:
f2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:78:72:00:7A:91:5D:C0:FE:08:7A:56:EB:7B:D4:71:1D:13:AB:22
X509v3 Authority Key Identifier:
keyid:7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7b:34:4a:21:84:92:02:04:e4:b5:c7:9e:b6:05:c7:2b:7f:
a2:69:bb:54:c7:21:2c:ac:98:5b:81:49:bd:6d:7e:b8:17:10:
18:07:d6:ea:d7:eb:56:c2:fa:09:f0:d3:b6:db:ec:32:5b:5f:
52:24:71:b7:e0:2d:61:1b:41:c6:c2:aa:99:9b:39:d1:84:10:
03:63:e9:f8:19:d1:b4:3d:a7:6b:c1:e8:e7:60:e3:8b:b3:a1:
42:21:2f:2d:f4:36:08:96:20:3a:64:92:b9:b9:d4:fe:ab:97:
35:9e:dc:db:41:89:da:55:ec:29:dd:26:98:d7:e5:b3:3d:21:
02:71:b0:78:32:b2:46:b8:0f:75:26:3a:30:19:77:88:c3:d6:
28:0d:f7:b2:68:d5:6b:b4:56:9e:c9:2f:3e:19:3c:b6:43:8a:
6f:26:24:a0:e0:3c:27:96:c8:53:ad:7b:df:1c:4c:01:85:c2:
f9:0b:bd:9b:89:92:2d:98:96:cf:89:87:53:18:1b:97:bf:eb:
ed:b4:54:20:3e:90:ab:0d:1f:c7:ee:df:4c:7c:ca:04:3f:46:
e2:26:28:12:a7:de:f3:bf:b4:28:5c:3e:77:a8:87:9c:81:97:
0e:4b:81:00:4a:c6:e4:c9:5a:75:5d:fa:5a:6c:a3:59:9e:10:
85:e7:f2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:32:43 2025 by rpki-client