Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier: DjT6x/Ye8jyKKGEZGnjccp1wLUzyaCw7xkUwJyX7q1U=
Subject key identifier: 74:5E:9F:EF:A2:0E:DE:7D:57:F7:E4:51:7A:C0:E9:28:13:A4:3B:C4
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 019680C6A76E6D02FC2D20169E1C9111BD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number: 0DC7
Signing time: Tue 29 Apr 2025 09:00:24 +0000
Manifest this update: Tue 29 Apr 2025 09:00:24 +0000
Manifest next update: Wed 30 Apr 2025 09:00:24 +0000
Files and hashes: 1: POu4BRKwJ9b6QnLtzzujF-OJsSQ.roa (hash: XnOw29GXgrIDV++SsvKlXzYrR59LZbUOXYaVKIhexjc=)
2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: J2AkLHcjgfJOn3jwoIfsxdbfx60LkZA4YQDagCGjK+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:a7:6e:6d:02:fc:2d:20:16:9e:1c:91:11:bd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Apr 29 09:00:24 2025 GMT
Not After : Apr 30 09:00:24 2025 GMT
Subject: CN=745e9fefa20ede7d57f7e4517ac0e92813a43bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:af:85:1f:5f:e4:ac:44:cb:7f:5f:7a:d6:
23:1c:87:2e:1d:8e:2f:45:98:c3:21:7c:24:6b:3f:
8b:51:6a:a0:88:43:3c:22:7f:5a:69:40:6a:5b:f0:
f1:56:76:fb:f6:96:19:dc:af:7e:da:31:d1:20:b7:
65:4f:fe:75:ab:b3:45:cc:80:a9:cc:bf:df:3a:9c:
92:e0:fb:41:e3:a4:ce:57:11:cc:72:5a:d2:33:10:
53:c3:2d:33:0d:df:5f:53:26:7a:02:35:bb:67:49:
36:bb:c7:11:27:dc:d7:a8:68:8d:2e:7c:ce:49:05:
05:2f:7f:82:6a:4f:99:6d:5a:15:42:93:4b:e7:be:
2e:15:0d:91:a7:c4:0a:95:e0:f0:9e:43:1e:bd:1b:
9c:68:4e:73:68:d4:54:37:3a:35:bb:60:7a:af:de:
90:0d:ea:7f:1a:40:8c:9c:15:58:41:36:79:8b:23:
e8:17:9e:9c:dc:65:9e:21:ef:02:d4:64:7b:5c:54:
f0:f0:3a:67:34:df:07:8e:ee:1f:b7:16:93:0d:8c:
92:f9:06:3a:eb:2f:48:6c:a4:c4:ab:59:90:70:07:
c8:87:69:34:92:1f:09:24:b7:e2:86:d6:91:5b:89:
7f:f7:71:e8:04:7d:62:35:a2:f7:7e:af:5c:62:69:
53:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:9F:EF:A2:0E:DE:7D:57:F7:E4:51:7A:C0:E9:28:13:A4:3B:C4
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:71:a5:42:98:06:54:48:d3:01:1a:86:f6:e9:3a:b0:f1:fb:
8f:17:6c:6a:72:fb:02:b8:04:aa:46:d2:26:a4:3d:6d:bf:ec:
37:a2:83:eb:6b:87:32:60:97:15:6a:06:23:bc:30:b1:c4:73:
0d:75:aa:c8:f4:1c:56:79:21:8a:f8:80:f5:53:be:4b:f7:df:
71:66:ea:34:91:d8:30:a5:1f:e9:2e:82:1d:3d:14:03:ea:58:
ff:2e:f7:b9:bf:1b:80:2d:0d:93:95:a4:19:9e:99:0c:fa:a9:
05:6b:d8:d7:d3:03:9b:4f:1d:fc:a7:61:1e:0b:50:c4:bc:a6:
fe:8b:de:65:7a:31:ee:6b:51:39:cd:73:00:ec:10:84:23:f5:
fa:a3:af:7b:be:20:34:9c:9e:7d:fc:d5:f6:49:62:df:92:e2:
ff:b4:e0:ca:04:0a:d5:94:a0:b9:85:d1:da:03:7b:1c:29:83:
30:ad:8c:e1:19:87:f1:ce:09:37:21:e3:47:53:01:5e:94:ba:
d4:1b:8b:0f:81:52:77:85:4a:e3:e4:54:9d:ca:60:ab:24:31:
f1:2a:28:14:87:a3:58:d0:0e:34:52:3b:bd:36:aa:c6:eb:d9:
c8:40:7d:b7:1b:dc:a9:e0:af:ec:2a:34:de:a0:11:28:12:1d:
58:1a:7d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:23:07 2025 by rpki-client