Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: rgaA7iWLWM0hl07UFtDqk7Alk4pNM8b55Ot9VuLRS0Y=
Subject key identifier: FC:1E:57:3D:9B:DF:E1:E4:DF:79:80:E9:80:2A:97:4A:3F:5B:5C:D8
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 01967BD79DD3FD717F6424E05498738D4BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 10:00:50 +0000
Manifest this update: Mon 28 Apr 2025 10:00:50 +0000
Manifest next update: Tue 29 Apr 2025 10:00:50 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: Lvej1nrzpY48rChJ2aURa/+qyWeXmxqR9mAZc/+4COg=)
2: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (hash: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=)
3: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (hash: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:9d:d3:fd:71:7f:64:24:e0:54:98:73:8d:4b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Apr 28 10:00:50 2025 GMT
Not After : Apr 29 10:00:50 2025 GMT
Subject: CN=fc1e573d9bdfe1e4df7980e9802a974a3f5b5cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:28:10:2a:cc:44:2f:79:3c:ac:b3:09:d5:
0a:b0:f3:aa:09:d5:84:fa:68:3c:04:76:50:af:ac:
25:44:cd:35:8f:56:90:3a:aa:ee:40:6b:39:1b:08:
f6:9c:08:13:a0:2c:3c:ff:ac:f7:94:c2:65:8a:24:
63:ba:f6:5d:b6:a3:11:85:59:cc:96:c7:8e:cc:c3:
f6:ec:32:95:36:ac:e5:c6:72:94:1c:55:0c:1b:26:
0d:40:a8:42:db:7d:85:84:86:4d:2b:25:08:26:11:
96:09:ea:b7:58:a0:a7:df:fa:fb:dd:bc:e9:ba:c9:
4a:b6:19:6a:67:90:57:1b:b1:9a:23:44:c7:fe:db:
c9:af:39:6b:ce:ed:4e:75:78:6d:4d:19:4e:5d:56:
bc:00:3c:ef:78:09:90:2d:2c:9a:6e:59:65:97:bb:
c0:f2:b6:4e:93:57:71:cd:e5:58:e0:ef:31:25:80:
64:fa:b9:0b:b6:87:a3:e2:06:48:1c:7d:44:28:ed:
3e:54:70:c8:93:ad:31:b6:66:c4:cb:00:44:ad:fe:
27:18:aa:ad:7e:57:5d:52:7b:14:19:15:f9:8a:fb:
b8:8a:a5:7d:56:16:bc:2c:b0:5a:13:0e:65:9f:a8:
a9:d8:61:61:74:e1:c0:84:dc:e1:67:14:b0:87:5a:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1E:57:3D:9B:DF:E1:E4:DF:79:80:E9:80:2A:97:4A:3F:5B:5C:D8
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:32:06:fe:b3:c1:9a:b5:45:11:cb:76:b2:e3:d1:50:f4:f5:
97:61:68:a3:0a:ee:96:36:0c:e7:6b:b6:16:36:8c:76:af:a7:
09:36:f7:83:da:31:47:5e:ba:08:f7:b8:db:5c:ef:65:9b:eb:
13:00:76:cf:7e:ee:94:d0:fe:e2:a4:a3:f2:91:d0:a4:96:c2:
d7:59:16:aa:a2:0f:69:5d:69:18:90:57:ef:45:8c:d3:0e:24:
2b:f6:70:27:0f:56:4d:56:c8:5b:dc:8c:8b:60:8c:f7:10:74:
a3:19:44:3e:66:89:c0:33:ca:75:c0:db:8b:fa:4e:c0:ce:be:
89:3e:21:30:32:30:fc:96:e5:30:45:db:db:b3:56:48:2c:28:
74:8d:aa:53:f2:93:0f:3e:ae:53:eb:fc:16:2c:20:eb:7a:70:
25:91:82:91:62:6c:be:00:20:da:d6:a2:a2:f0:c1:d5:b6:b4:
3a:3a:8a:ac:47:15:5c:ea:4f:0d:d2:d5:ba:87:bf:51:35:4d:
bf:52:80:34:5d:41:8d:34:af:2b:c4:ad:94:44:90:e4:e8:3e:
d9:12:12:e0:33:a2:32:7c:d5:24:9f:5f:1e:5e:9b:88:f0:43:
8c:1b:db:e9:35:da:91:93:eb:d5:32:8b:49:84:9f:5c:00:b8:
dd:4f:4a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:02:52 2025 by rpki-client