Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
File: f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json)
Hash identifier: z+ZmXAdwpR0W5YI9qBhjtYotfhOWcZlY0YJXJc5F2B0=
Subject key identifier: 25:E8:0B:0D:EE:33:E6:0A:4F:8F:1C:73:41:53:E7:B6:67:DD:0E:C1
Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
Certificate issuer: /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Certificate serial: 01967B6999C6CD976FB0CCB48662E0EEDDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
Manifest number: 14A3
Signing time: Mon 28 Apr 2025 08:00:40 +0000
Manifest this update: Mon 28 Apr 2025 08:00:40 +0000
Manifest next update: Tue 29 Apr 2025 08:00:40 +0000
Files and hashes: 1: ZbCuBvhm3WPg8vIgNTz5bN7GnM0.roa (hash: geQ1HtbnOZqLyTn8wKAlnJdK10ztk7Vg8HhapzU1X2M=)
2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: g2pG8V6sMVs+1/YPqHCh23Qm3GbLGAwmo4acmofFfmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:99:c6:cd:97:6f:b0:cc:b4:86:62:e0:ee:dd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Validity
Not Before: Apr 28 08:00:40 2025 GMT
Not After : Apr 29 08:00:40 2025 GMT
Subject: CN=25e80b0dee33e60a4f8f1c734153e7b667dd0ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:6b:dd:5f:50:ad:85:7f:eb:1b:6a:32:c9:
ab:01:76:65:f9:d1:21:d5:d0:b7:03:a9:ba:ba:41:
97:2b:d2:9e:f1:c2:fa:ad:75:5f:b1:60:da:84:a8:
a2:3a:c4:fe:ed:77:a0:cf:9a:9f:8d:b0:d0:38:70:
e8:9f:f9:cf:bf:ac:65:25:a3:90:d3:62:1e:9a:b6:
ea:a0:13:9f:ed:9b:b4:3f:80:22:58:f5:8f:77:35:
37:85:9c:28:f7:2d:bf:16:c0:4a:7e:8d:85:b7:be:
cb:f4:b5:99:03:8a:a9:52:87:23:f8:53:bd:9e:59:
c7:4e:cf:b4:9c:cd:41:3c:73:09:d0:cc:8e:7b:df:
6a:f7:dc:a9:8a:02:e7:66:07:63:30:9a:b1:1b:6b:
ee:c4:cf:5a:65:9b:4a:8b:41:0a:5b:c6:c5:e5:99:
60:05:d9:7d:3d:e9:0b:b3:a6:6d:4b:b8:7a:03:f1:
a9:ef:0a:63:0b:e0:38:48:3e:4f:48:5b:84:03:04:
7e:71:83:06:b3:f2:f6:68:29:e2:41:4d:8b:b1:1a:
18:66:3f:4e:e2:a8:45:80:83:61:41:9e:59:17:05:
85:2e:5b:2f:ea:5f:c5:6d:ec:08:96:7c:12:86:09:
a9:cc:10:59:cc:78:c9:6c:f5:1e:73:80:c2:00:dc:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E8:0B:0D:EE:33:E6:0A:4F:8F:1C:73:41:53:E7:B6:67:DD:0E:C1
X509v3 Authority Key Identifier:
keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b5:09:0a:2e:01:c2:2e:31:ae:22:ad:21:62:29:65:0f:76:
34:24:6a:31:26:dd:fc:23:cc:fe:fb:cf:95:c6:76:35:1c:c7:
6c:be:f9:ae:3a:c1:65:4c:61:00:da:ce:77:84:bc:bd:f0:a3:
98:ec:e2:e9:23:34:ea:e8:2c:ec:4b:47:8b:4e:6e:02:6b:c9:
57:b0:b2:b7:35:7d:87:96:83:fe:9a:1b:00:7f:ce:3e:ec:7b:
f6:76:0e:4d:6f:4c:fc:de:b0:b3:8e:a2:35:80:c3:ad:0a:4c:
c9:a2:d7:ae:dc:cd:a6:52:d0:1b:0c:c4:09:6b:08:b4:e5:9c:
de:0f:a5:26:6c:e0:5c:a9:8e:de:40:55:2d:a6:ff:37:3f:48:
87:d3:33:f6:bb:21:ee:c7:6d:aa:00:d8:43:22:3d:be:60:e7:
e6:0c:59:c0:d3:4a:31:3e:34:92:05:d8:77:e3:f1:94:31:b5:
05:5c:1d:89:29:7c:7e:fa:b2:ff:67:2e:dd:60:2d:b5:d8:cd:
e1:70:83:2d:6c:98:57:7a:6a:92:46:cc:e6:3c:5f:e4:cc:99:
f1:1a:5a:d8:4b:45:4d:ff:64:a0:d0:be:a2:8e:8d:de:aa:f6:
18:04:65:17:c0:b2:b6:8b:db:5a:78:4a:0d:e1:8d:79:29:cb:
96:0e:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:25 2025 by rpki-client