Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
File: f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json)
Hash identifier: TWrkCG2XXHKZ6CQYB7kDPRugRgTiBGJrHtq7yGIXVgU=
Subject key identifier: 9E:7A:F7:4E:6B:38:E7:21:46:B5:AB:3E:D5:46:5D:0C:36:84:FB:65
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 01967454B51DF62475834A2CB03357A6C214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
Manifest number: 0C7E
Signing time: Sat 26 Apr 2025 23:00:30 +0000
Manifest this update: Sat 26 Apr 2025 23:00:30 +0000
Manifest next update: Sun 27 Apr 2025 23:00:30 +0000
Files and hashes: 1: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: BqbZiTeM54WHiO32wDqSTofXw4B2tlljczzWmkmy7l0=)
2: uNHn3nGofmcHl4lM7HkivQe_5zI.roa (hash: P5wPJ1eLs+Pe8c3zQ6YiOWLNnnfuv2xAEXiikikIGBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:b5:1d:f6:24:75:83:4a:2c:b0:33:57:a6:c2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: Apr 26 23:00:30 2025 GMT
Not After : Apr 27 23:00:30 2025 GMT
Subject: CN=9e7af74e6b38e72146b5ab3ed5465d0c3684fb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:22:45:ca:c2:59:a1:50:0d:ec:0f:a2:f8:
51:b6:db:48:b8:f9:fc:70:4b:d5:b7:68:bc:a0:59:
d1:aa:ff:28:99:60:f8:95:2c:34:3c:29:be:ea:43:
1e:88:e2:5e:06:88:7e:93:49:c0:7d:36:ce:a8:ac:
56:ca:80:4e:a7:b6:24:7a:90:a7:5f:ea:0f:ae:21:
14:b9:ab:27:00:84:75:13:ef:35:b1:ef:c1:02:11:
c4:1a:38:15:6c:2f:67:91:c4:0f:28:7d:b0:0b:96:
32:90:5a:4e:2c:ad:f5:0c:40:e2:7e:d7:a1:06:35:
15:72:bc:67:c1:c6:e8:10:71:f3:6e:13:f5:d8:b6:
e0:40:e6:68:69:dc:27:fd:c0:2c:54:c9:e2:13:4f:
e7:84:0b:d4:15:2a:bb:59:d1:05:f4:c3:fd:3e:d2:
0b:1c:27:09:00:f6:3d:23:4d:7c:74:1a:95:57:fa:
e6:37:a2:e9:59:1d:4e:ca:e1:eb:3e:98:be:e2:be:
17:57:11:63:67:76:b6:f9:d8:39:e0:fe:97:18:bb:
6f:66:e8:d9:39:8f:a4:5d:07:22:c1:4a:35:b2:67:
bb:f5:14:b5:e8:6e:4f:2e:30:32:ba:26:b0:68:7a:
76:f1:4e:1f:c8:24:37:8d:00:cb:ac:94:04:93:e5:
42:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7A:F7:4E:6B:38:E7:21:46:B5:AB:3E:D5:46:5D:0C:36:84:FB:65
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a9:cc:17:0c:b5:14:d0:e0:dc:05:83:f5:67:89:c2:c0:da:
f5:5f:34:05:8d:d1:54:47:21:9b:08:50:c9:33:47:3b:1c:75:
bb:93:42:88:2f:e3:70:1d:4c:85:a4:cf:66:03:ce:c4:8c:10:
0d:af:49:9e:f1:a5:e6:15:91:48:d0:91:80:70:3e:f4:b0:13:
eb:44:9b:89:63:4d:75:16:dc:0a:71:2c:38:e1:7b:e2:32:fb:
a0:90:9c:df:c7:47:63:d7:b8:56:28:ab:3b:3f:d0:6d:f6:66:
47:7c:a3:32:1b:d8:ea:86:e6:a4:af:e1:2c:cb:5c:be:10:89:
7b:f1:ab:bc:62:99:e8:37:84:a8:47:32:10:c5:67:7a:50:81:
03:48:a0:60:08:5c:0e:61:c0:ad:4c:2b:2b:e4:30:12:1b:f6:
ed:69:32:bc:d8:c3:65:fa:18:4b:8d:23:6c:4f:8b:50:7c:e3:
40:08:13:dd:b3:63:35:1b:f8:1a:ca:29:6e:65:20:96:c2:71:
f1:60:84:69:a9:42:e0:8c:81:47:6f:60:e9:23:ca:83:d7:d3:
e6:21:78:22:c9:6b:70:8c:12:47:16:58:a0:fd:57:82:54:63:
f9:90:13:45:70:83:31:1c:82:d7:68:87:d6:d4:17:d8:ed:57:
aa:d8:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:17:25 2025 by rpki-client