Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
File: _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json)
Hash identifier: BWx2kzt5AnosaREjYdKDO+wbUnovwXh0wZOj4hTz03I=
Subject key identifier: 3E:BB:22:3E:9F:B7:2D:40:F3:29:51:CE:B2:98:A6:A3:55:6D:E7:60
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Certificate issuer: /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial: 019674C2B303111823E1DF1DDFAECB583B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 01:00:38 +0000
Manifest this update: Sun 27 Apr 2025 01:00:38 +0000
Manifest next update: Mon 28 Apr 2025 01:00:38 +0000
Files and hashes: 1: MLpmz1Ih74d3ai6mUgS3az1JAoA.roa (hash: wPq9cbkd3gHsPqU0L1CCMHdPpNtSvMWNQxLswqIps2I=)
2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: q85B0KHzF3L30DdgZrDtAUMeEyXo6yvxN4QGnUlYyu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:b3:03:11:18:23:e1:df:1d:df:ae:cb:58:3b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Validity
Not Before: Apr 27 01:00:38 2025 GMT
Not After : Apr 28 01:00:38 2025 GMT
Subject: CN=3ebb223e9fb72d40f32951ceb298a6a3556de760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:fc:22:cf:1b:9f:2f:b8:e3:f6:7d:fa:26:
18:c5:d9:61:1d:de:01:0b:70:a3:ff:29:c2:ae:43:
c3:af:96:79:96:82:bd:eb:df:84:36:93:f9:25:41:
98:fa:2e:dd:5b:ee:5a:56:57:9d:0d:5f:33:61:84:
d5:dd:45:52:00:7a:c2:df:ab:a8:3f:3d:21:0a:d8:
b0:b4:01:e7:01:2d:b8:d2:8b:bb:6d:96:4f:13:90:
b2:33:fa:9d:13:f2:7b:18:a7:c4:fc:e7:78:c8:05:
94:8b:a6:d3:76:60:80:3b:bc:6c:c1:f3:81:b6:fe:
24:35:b4:56:79:9e:75:d1:27:31:f4:21:0d:45:6c:
7f:1b:5a:14:91:1c:e8:e9:e2:31:d1:6f:80:e2:c8:
ca:43:98:f3:06:ea:97:92:fd:4f:6b:b8:72:0c:34:
0f:e9:fc:8a:d5:91:ed:47:d2:e2:69:4b:d5:4b:83:
39:5c:38:80:45:b3:61:40:aa:8d:11:df:22:57:10:
84:10:d0:74:0c:26:a2:80:ac:46:70:ae:07:8e:2a:
ad:7e:e0:09:93:ad:95:f8:67:5a:e4:a2:2d:18:d4:
d7:00:af:67:99:e2:94:57:86:a6:6a:8c:42:df:b3:
3f:f0:1f:b6:76:b7:b1:34:f6:a2:c6:ca:88:c4:28:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BB:22:3E:9F:B7:2D:40:F3:29:51:CE:B2:98:A6:A3:55:6D:E7:60
X509v3 Authority Key Identifier:
keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:83:e0:1d:d1:30:bd:59:93:a4:08:a8:b4:e2:75:37:64:c4:
86:d8:6d:0f:53:aa:91:e3:16:02:80:7a:bb:38:6b:67:00:12:
cc:3a:3b:b2:c5:5d:9e:2b:14:f4:b6:60:1f:b8:c4:e7:a2:1a:
5b:ad:91:99:b4:63:94:8e:0d:b4:28:d0:b4:dd:47:02:5e:cd:
61:92:3b:c3:a0:7f:39:b6:e6:23:7f:f3:52:c1:ed:5e:65:87:
60:1d:11:83:7a:d5:d6:c5:a3:99:a3:fb:6f:83:fc:ed:ce:c7:
44:aa:1d:eb:b9:a7:0d:7e:4c:bc:22:46:7e:dd:09:b9:fe:af:
c0:53:0d:d0:24:48:f2:c2:d6:ae:ed:6b:a2:45:3c:f8:d5:ee:
72:25:a8:1f:72:05:0b:81:71:df:1a:cb:a5:dc:e9:38:fa:a3:
bd:a5:3e:cb:73:80:ec:0c:6a:c1:8b:76:e7:25:9b:5e:d3:15:
8b:85:b6:50:97:03:78:26:14:8c:66:1b:b5:e7:fc:d1:6a:f8:
b6:b8:b7:43:ce:84:52:30:fe:52:54:ba:8f:3e:b5:48:51:59:
1e:72:5e:7b:dc:2c:2d:3c:34:ab:50:8d:90:bb:77:44:5f:90:
87:15:e1:8c:25:6f:b1:4f:59:52:d6:e3:55:c8:9e:c2:2f:fc:
0a:f6:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:26:28 2025 by rpki-client