Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json)
Hash identifier: FZJaK/z9gMMUEie/VEpJdnpx6mdd4tog+SzCQLeWZKE=
Subject key identifier: 46:BC:FB:68:A0:10:17:B2:66:E0:8E:C1:6A:AF:82:E3:5D:6B:F9:23
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 01967A1FB02FDD65F330DCED65A09F233D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
Manifest number: 0EDD
Signing time: Mon 28 Apr 2025 02:00:19 +0000
Manifest this update: Mon 28 Apr 2025 02:00:19 +0000
Manifest next update: Tue 29 Apr 2025 02:00:19 +0000
Files and hashes: 1: 4FgyXjSTtWGyFOXdnX2-aAmOOA8.roa (hash: InpaFw/32Nb/Zr2vPmUWS5J9SJuIWTtmwm6Og2V6cjc=)
2: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: QYdHZtVH6yPvaJZVGunqTKi18KTjiiAEWpajc4nzBb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:b0:2f:dd:65:f3:30:dc:ed:65:a0:9f:23:3d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: Apr 28 02:00:19 2025 GMT
Not After : Apr 29 02:00:19 2025 GMT
Subject: CN=46bcfb68a01017b266e08ec16aaf82e35d6bf923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:e8:4d:1a:40:51:30:38:f7:f0:6a:ea:7a:
30:c0:2d:c6:97:f4:68:0d:2b:fc:2d:e5:80:d4:2d:
f1:41:96:5b:57:25:a0:28:0d:40:9b:2e:02:6c:e9:
00:19:68:0b:8e:10:9d:cd:48:4b:c4:29:c4:be:62:
a8:a2:61:38:aa:e0:38:78:89:bc:72:59:a9:e7:05:
a4:b6:ef:07:6c:8a:ce:ab:ff:e6:52:31:45:d8:1b:
b7:f1:73:7f:0f:86:df:99:f4:4f:ab:9f:20:b3:4e:
ea:17:b7:cf:ac:fa:27:6a:e8:00:63:d9:e2:99:f6:
75:36:1c:df:65:7f:67:b5:28:7a:52:cd:98:87:8f:
2e:12:5b:aa:53:3d:7c:f7:69:f7:c7:86:63:fd:78:
a8:1d:f9:8d:23:8e:40:13:27:ae:b9:2b:44:1e:c4:
02:f2:e9:ab:6b:dc:d1:96:51:49:d7:0e:78:b5:e7:
c8:c8:70:05:77:18:d5:6c:26:e2:e7:b0:9c:18:c5:
38:bf:30:78:29:9b:1c:9a:00:de:0f:e2:c5:77:01:
c0:f9:bd:89:14:07:c4:27:4f:be:b7:87:c8:e5:ca:
d7:c2:59:24:60:ab:6f:4e:73:34:d3:66:15:0b:cc:
a5:bc:ae:e9:26:2e:61:06:34:7a:29:9c:2f:c4:76:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BC:FB:68:A0:10:17:B2:66:E0:8E:C1:6A:AF:82:E3:5D:6B:F9:23
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:68:96:fc:00:c5:18:6b:ca:98:74:85:f9:99:43:ee:c0:c4:
20:7a:82:30:9a:45:48:d8:80:6a:20:7c:dc:8e:00:a3:f4:89:
23:cb:d1:ce:59:0b:1a:a6:c7:76:eb:3f:7e:76:7a:b2:08:fa:
b7:83:33:f6:f9:7a:f9:0a:a9:d1:77:df:40:7e:6c:f0:e3:33:
2f:d3:a8:c8:34:0a:56:8c:77:c6:49:55:45:20:30:05:b9:15:
e0:74:d3:37:f9:7f:83:23:66:25:91:7f:8e:d8:d6:0f:b7:d1:
3a:d3:0d:17:7e:1d:88:a8:f8:f8:da:fc:81:8e:62:f3:8e:58:
5c:1d:24:8d:64:88:59:22:84:9d:c9:5d:db:75:c3:e1:b2:f3:
2a:7c:6b:50:ec:1a:74:85:00:f1:0b:cd:d4:c7:58:ed:56:f0:
61:c7:55:1a:87:20:9f:77:b6:57:4a:42:a1:f2:4e:66:0d:29:
13:eb:55:a6:5e:a3:eb:19:15:2a:3b:aa:e0:c7:77:58:54:bf:
6d:cb:c2:41:9e:68:2e:59:ad:7b:82:d5:c2:d4:45:21:87:ac:
fa:69:ec:3b:c4:be:e8:6d:0f:9f:c4:fa:ed:c2:4c:0e:0e:1e:
f6:4e:9a:27:b8:47:e0:5f:bf:08:8e:e8:fa:93:14:ea:ab:5a:
49:e1:4b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:24 2025 by rpki-client