Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier: zesU9/PEYpXV5ePFiHXZWL1zQ2oP7nX6JxIDokn6rHY=
Subject key identifier: 67:33:6E:3D:9A:15:53:42:13:88:20:51:EF:8B:6B:97:E3:6A:F8:B2
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial: 0196748BA0D77C826D216FF9EDA81499124A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number: 0620
Signing time: Sun 27 Apr 2025 00:00:29 +0000
Manifest this update: Sun 27 Apr 2025 00:00:29 +0000
Manifest next update: Mon 28 Apr 2025 00:00:29 +0000
Files and hashes: 1: TbMjDWj4JjSbzv98od3kf6H3oLQ.roa (hash: 6tue5GmhUL7N95x2Z4BFABU7q9BYKT3YDkCK4sofjnc=)
2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: wYGQL6J9FYY0ig0rELPByAZ8jWIce0+mIb21gB5d0s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:a0:d7:7c:82:6d:21:6f:f9:ed:a8:14:99:12:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
Validity
Not Before: Apr 27 00:00:29 2025 GMT
Not After : Apr 28 00:00:29 2025 GMT
Subject: CN=67336e3d9a15534213882051ef8b6b97e36af8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:7b:ad:05:f6:04:e9:96:72:40:4c:81:fc:
40:36:80:6f:56:bd:e0:ad:41:9c:7a:08:71:be:9a:
bc:5a:a1:28:04:ee:dd:65:16:bd:61:7f:d8:0a:96:
0a:29:d4:8a:99:a2:e9:f6:3c:7b:02:fc:e0:98:d1:
16:63:2b:75:71:96:95:a7:d8:47:9c:43:cd:ad:45:
a5:29:60:84:49:c3:1a:d5:13:b6:52:8b:01:42:22:
60:21:14:71:48:24:2c:7e:59:58:59:78:91:09:06:
a9:69:a9:bc:a9:66:cd:90:65:29:4f:43:83:21:6a:
3e:e0:b6:a0:1b:35:f5:cd:ab:43:ec:b5:63:c5:67:
e8:ff:70:aa:c8:f2:4f:d9:61:57:9e:9e:72:24:24:
1a:1d:34:68:08:6b:27:fe:31:a4:dc:c5:82:d4:c6:
47:d1:41:f6:b2:df:26:a0:1d:04:8a:ac:f6:ea:c5:
c4:bd:dd:62:a8:70:62:a0:18:d3:37:80:71:a8:4e:
6b:75:00:84:5b:9a:42:c3:8b:39:77:5e:ae:7c:6a:
db:44:cc:c3:5c:00:39:de:10:fd:fa:a3:f3:64:85:
5d:5b:93:56:4c:48:e0:71:89:4f:23:d5:a1:12:40:
2f:8d:9c:cd:51:88:26:e1:16:16:92:42:e7:30:be:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:33:6E:3D:9A:15:53:42:13:88:20:51:EF:8B:6B:97:E3:6A:F8:B2
X509v3 Authority Key Identifier:
keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4a:bd:8b:db:8d:39:73:de:b8:e6:7a:0b:e9:d9:04:7a:f7:
9b:74:5c:a8:1b:45:e3:67:4f:e1:40:43:12:26:a5:3f:eb:7e:
66:47:e0:20:2d:26:25:e6:7b:b2:47:3a:37:9e:1e:68:43:6d:
73:0d:9b:e1:47:69:74:f2:47:03:70:8d:2c:17:7f:06:67:7a:
65:22:cd:4a:8c:ae:5f:e9:af:24:52:3a:3a:4d:9e:44:3c:30:
31:32:57:31:c9:7a:3d:e0:e6:ba:8b:e8:98:6c:64:6b:5f:cd:
8a:72:43:f1:f1:f7:c2:29:55:5f:af:82:e6:5c:87:9b:6e:e5:
2c:13:2b:51:e3:f4:fb:bd:88:8c:74:72:6a:95:c7:93:4b:34:
8a:a8:3e:b5:c6:80:9a:33:b0:fc:2c:e7:09:db:a4:85:16:80:
e1:b7:25:bf:7f:24:b6:6b:13:75:ed:ad:a2:c1:8c:41:35:52:
99:dc:0d:68:df:d1:65:20:4e:42:e0:b9:4b:b4:ba:3e:cf:26:
15:1e:93:11:91:7d:0e:b2:7c:d5:b1:f1:e3:be:60:97:3f:7f:
40:4d:6b:58:b4:e2:ac:f9:de:d1:b3:4d:ee:b5:c1:26:ee:68:
08:84:15:75:b0:04:32:8e:64:ef:7b:7c:3e:59:f5:79:78:19:
a9:fb:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:45:26 2025 by rpki-client