Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File: Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier: bZfWXK9B8ed9mTbXf7U7lF7UGfNuGJ7DIsw+AElJPYk=
Subject key identifier: A1:E8:2D:97:D9:FC:71:F5:77:6B:9C:68:F5:40:91:20:96:6B:28:A9
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 01967378E04E63BF8ED2DEACDF9002DD6AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number: 0CA7
Signing time: Sat 26 Apr 2025 19:00:23 +0000
Manifest this update: Sat 26 Apr 2025 19:00:23 +0000
Manifest next update: Sun 27 Apr 2025 19:00:23 +0000
Files and hashes: 1: 2elU8M79ZokIDRQA4FCMvXhZ_30.roa (hash: xpy/QNiCAMomRGDsG3lcQqLW5mZVYEG99RtMqAQeBgw=)
2: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: tha9a/SwqUg+vKfJfVfM3uBvCJ1PhEq643UgA1Mgv70=)
3: aivWngKJz6YVhMe876fRwO2Pwak.roa (hash: QrxS5tWIMxcDOD99WB/oU0c4ZizRW8rYWP871u28/z4=)
4: kgsIk8ju0wKKr0nkwVgHsRJydGg.roa (hash: 22cjkPvdduHGA9XlrCi4AiJihfCCZjAqzu2Hbki4taU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:78:e0:4e:63:bf:8e:d2:de:ac:df:90:02:dd:6a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Apr 26 19:00:23 2025 GMT
Not After : Apr 27 19:00:23 2025 GMT
Subject: CN=a1e82d97d9fc71f5776b9c68f5409120966b28a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:04:60:30:a6:08:02:86:83:6a:76:b8:1f:
f2:f4:76:27:4a:49:dc:68:33:01:56:c9:38:ae:fe:
29:5d:71:24:72:0c:b6:06:b7:9e:ee:f1:87:e8:24:
0e:0a:08:3a:52:83:f6:db:7c:aa:89:71:2d:e8:97:
a9:87:1d:91:94:b7:ca:fa:bc:c7:b5:48:ec:ca:be:
fd:9b:82:ef:88:f3:ca:01:29:ad:83:ce:0c:62:8a:
5d:24:b9:93:31:4d:f2:fb:85:57:a7:3e:93:f8:14:
f1:cc:f4:44:23:80:19:e7:92:6d:d0:70:70:46:2b:
04:d8:c4:48:73:1c:8f:ec:f6:59:2a:82:98:b0:cd:
da:92:67:bb:53:a9:ef:d0:ae:90:33:de:1a:c0:a2:
2d:0f:aa:65:46:7e:82:66:6c:37:b0:88:4a:20:4b:
50:d1:80:cf:bb:63:d3:53:4c:92:d2:cb:c8:35:6e:
6a:0c:ca:09:99:1f:5a:8c:f1:28:b4:05:6a:8e:d1:
c2:80:ba:81:be:d4:ef:78:03:49:4e:c9:3d:15:d5:
da:bf:3b:cc:d8:dd:38:91:ed:55:63:fb:7a:29:b5:
1f:2d:0f:fe:3a:03:5f:38:82:ae:e6:df:0b:7b:04:
99:4f:f9:3a:70:4b:2d:9a:a2:65:e1:3b:94:5c:6e:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E8:2D:97:D9:FC:71:F5:77:6B:9C:68:F5:40:91:20:96:6B:28:A9
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7d:69:d5:ca:8e:c5:25:ea:25:dd:e6:84:37:fa:ae:18:c8:
f2:e8:13:c4:23:b9:f4:33:40:2f:39:1d:5b:27:5b:37:c8:70:
ec:57:b2:b8:47:b8:8a:55:6d:60:42:74:9c:0e:cb:41:5b:49:
e5:9e:a8:11:17:6b:c8:36:8c:49:ae:ea:28:4c:68:76:ed:9c:
d0:bc:1c:49:68:59:0e:d5:86:42:ef:5c:dd:9b:41:a3:d9:d3:
38:1a:c4:b0:fc:25:b2:22:bc:eb:97:c4:4a:f4:69:d9:8e:12:
f5:f3:71:e1:ef:4e:a1:8b:79:db:7e:d7:99:cf:2c:b8:e7:30:
cd:0a:5d:41:ea:54:0c:4f:d4:f5:97:2d:e8:5b:36:15:a4:cb:
d8:fa:f2:e4:b1:2b:38:cc:2f:20:35:b9:32:9a:c3:29:61:4b:
f9:b0:9e:5b:f5:64:6a:8e:fc:b2:a0:03:11:c5:01:87:65:11:
e6:94:1d:b4:6c:80:1d:67:19:e4:85:0a:b2:81:8b:10:5b:7a:
78:1a:3f:f4:e6:1c:0e:28:20:03:27:64:a5:ab:63:c1:61:83:
ac:34:e4:9e:56:88:61:b6:ce:49:0f:06:20:ec:4e:e7:2c:41:
4c:7b:fc:cc:da:5e:e2:bd:a4:98:cd:c1:81:93:da:19:8c:d6:
5e:9c:a1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:00:43 2025 by rpki-client