Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
File: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json)
Hash identifier: jyyY8DN5qivU2FEkw3zYo243IyGjAG0B4/aRcWbZoYM=
Subject key identifier: 8F:68:EA:D8:BE:00:23:C3:C3:5C:E9:C8:32:C2:DA:DD:D2:A7:36:0B
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Certificate issuer: /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial: 0196778CBFAA10002554536209383DB38B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
Manifest number: 022E
Signing time: Sun 27 Apr 2025 14:00:34 +0000
Manifest this update: Sun 27 Apr 2025 14:00:34 +0000
Manifest next update: Mon 28 Apr 2025 14:00:34 +0000
Files and hashes: 1: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: xrsChXmck7zMKyEdratTypxI5WSmawNFunBst44R6Ac=)
2: pa5HePIwYLGZT4FlyIIuIImBBQ4.roa (hash: bgmy9hrxpCSfMFbbUzRFuhNbtBsDHQmEsmp/I6aYk+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:bf:aa:10:00:25:54:53:62:09:38:3d:b3:8b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Validity
Not Before: Apr 27 14:00:34 2025 GMT
Not After : Apr 28 14:00:34 2025 GMT
Subject: CN=8f68ead8be0023c3c35ce9c832c2daddd2a7360b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:a2:3d:c4:c2:42:cb:7e:f4:5a:a9:f8:b6:
05:50:8a:b6:df:7b:00:7d:45:ee:8b:3a:b3:08:e3:
05:61:ea:a0:c2:78:69:c0:ab:d3:f5:e6:fe:ab:0f:
1e:89:58:85:9e:58:b1:e9:52:65:21:94:4d:af:1a:
90:7a:f8:78:94:f0:61:06:24:60:40:39:fe:56:1e:
16:53:84:db:96:b3:df:ab:17:27:89:7b:9d:45:12:
c0:21:4e:1b:3e:17:c6:a2:8e:a7:87:33:f8:c4:19:
8e:cb:12:3d:ee:21:d6:fe:b3:4a:8d:96:b2:fd:39:
7d:8d:9f:ea:ef:0b:5f:46:81:2b:fd:9f:bf:6a:2d:
00:28:6b:09:28:e1:7c:ed:46:bc:d6:a0:48:7a:38:
af:b9:dc:db:6d:60:b9:8e:33:56:4a:65:04:f6:06:
a2:ac:35:53:37:2b:56:9d:bc:60:c4:21:78:11:0b:
35:44:54:63:4b:d9:39:d7:ce:56:1b:e6:ad:c0:76:
30:c3:45:da:76:4b:6f:26:d2:ac:89:5e:89:83:fd:
aa:a7:9b:93:24:fa:b4:4d:58:f6:a0:44:fd:99:5e:
8f:b9:00:98:7e:f0:ad:a1:05:42:60:66:01:ba:b1:
59:e4:e7:f0:0d:2b:fb:6a:bf:8d:b8:c0:ad:60:ac:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:68:EA:D8:BE:00:23:C3:C3:5C:E9:C8:32:C2:DA:DD:D2:A7:36:0B
X509v3 Authority Key Identifier:
keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:37:1f:5e:32:01:64:be:85:8c:02:87:3b:68:91:71:38:6c:
88:19:64:eb:96:0e:42:ab:2c:35:19:f3:6d:c3:20:06:98:33:
c1:26:d3:79:75:a5:f2:5c:df:a1:70:46:fb:da:e2:10:6d:a3:
6d:99:14:b5:ec:33:0a:21:b3:ce:9b:ae:82:25:99:35:46:9b:
cf:0b:b8:34:d9:1a:78:f9:00:46:1c:11:b3:3c:92:5b:e9:54:
c2:ae:8f:a5:c3:b1:3c:24:44:68:07:9d:c5:d7:73:c2:13:1e:
07:6b:b8:69:fc:ca:c3:9f:99:57:f1:d2:ea:cd:a3:7a:83:d9:
f9:06:d4:be:4f:f4:02:40:c4:d9:fb:2a:e1:21:7b:1e:be:22:
12:21:d9:22:50:03:07:32:c2:1c:ea:60:1e:93:72:08:88:30:
f9:40:2f:0d:54:3d:4c:5b:2d:52:e9:be:43:f4:07:92:37:25:
90:12:9b:db:87:62:9a:45:01:2f:3e:c9:21:f6:be:4c:3c:32:
69:d5:82:b1:d4:08:de:73:9d:c7:8b:e1:02:6a:8d:62:6b:05:
8c:f0:de:ca:0d:a6:97:19:52:69:2f:6d:81:d7:01:bf:0f:50:
32:00:d8:c4:4c:3f:7f:3f:49:d4:61:47:67:1e:0a:26:2a:86:
34:7e:70:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:57:16 2025 by rpki-client