Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier: pTz2pziTCsLR/ofyb2dBSlTPeIeux0uAYn1t02loiro=
Subject key identifier: 7A:41:0D:20:76:F4:78:DA:58:98:7F:D0:61:A7:56:C3:1B:5D:0F:A2
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 019676E7E32FDA050442D61E77258A854CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number: 10F6
Signing time: Sun 27 Apr 2025 11:00:30 +0000
Manifest this update: Sun 27 Apr 2025 11:00:30 +0000
Manifest next update: Mon 28 Apr 2025 11:00:30 +0000
Files and hashes: 1: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (hash: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=)
2: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: CRqOnTlLb7SHmVKql/Hk4+gI3pOQP4b0Z734oV/L4bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:e3:2f:da:05:04:42:d6:1e:77:25:8a:85:4c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Apr 27 11:00:30 2025 GMT
Not After : Apr 28 11:00:30 2025 GMT
Subject: CN=7a410d2076f478da58987fd061a756c31b5d0fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f7:7e:60:6a:e5:61:e7:6c:1b:6e:01:01:fb:
ef:3f:be:f1:02:3f:6f:cc:9a:49:4a:1e:a6:6f:bb:
0d:f1:32:1b:d3:b5:18:c0:e9:1e:20:ff:97:69:b9:
a0:44:a6:f3:e0:c1:5e:46:c1:16:ed:c5:72:f8:0e:
5b:c2:d7:fa:42:1d:2d:ec:dd:1c:34:bb:cd:00:6d:
e5:70:de:a8:30:fd:1c:7d:6d:25:e0:01:5e:14:a4:
83:37:a9:bf:c4:29:83:b0:a0:d6:67:23:e5:50:7d:
99:f9:d4:aa:35:e9:bd:23:c1:d0:23:cb:02:0b:77:
25:a8:bb:26:e9:5c:2c:c6:72:ee:e4:a0:2d:5f:74:
c7:fc:64:2a:d6:50:7c:89:e8:f0:71:62:b9:42:3d:
f6:44:d7:00:a6:36:c7:a7:52:67:57:9d:b1:05:a6:
71:e2:1c:55:57:a2:ef:fb:ef:cb:91:89:7a:53:7a:
bc:c1:0a:22:91:64:47:99:b1:8c:f4:6b:fe:3f:64:
3d:7d:38:27:04:e3:8a:39:55:0c:66:b9:c1:41:29:
86:6e:ed:72:7f:f3:79:22:e0:2c:95:2a:e9:57:6d:
58:5f:b4:9a:28:35:33:80:71:99:61:a7:e5:b9:83:
73:3c:da:59:d6:39:4f:ea:1f:e3:40:75:5a:2a:8b:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:41:0D:20:76:F4:78:DA:58:98:7F:D0:61:A7:56:C3:1B:5D:0F:A2
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fe:c2:9d:de:bc:be:cc:4c:f4:34:72:26:0f:98:32:28:a8:
e3:0c:b3:70:a3:61:bc:82:3a:fb:cc:6a:e8:18:8e:b8:c3:4c:
c3:1f:e8:b8:29:10:d9:de:12:54:70:4c:9b:17:cb:81:d2:3c:
be:bd:2c:8f:6f:11:bc:20:a5:7d:7e:ce:19:74:83:02:0a:e7:
ff:25:e5:c2:47:ad:a8:a9:93:2f:2f:64:e4:bb:1c:5d:09:ae:
20:42:3b:ca:fb:d5:e6:de:3a:06:0a:0e:4d:bf:7b:06:64:23:
76:21:dc:df:2d:8a:fa:9c:69:70:1f:8c:5c:24:e6:48:44:4d:
df:db:ef:67:39:09:17:2d:6e:97:85:f6:fc:b5:b1:bc:08:ee:
33:5d:e5:1d:ad:2f:ce:db:97:6f:06:05:80:9b:e2:0b:98:15:
73:b8:20:c4:e7:3d:72:34:3b:a6:4e:62:ab:70:1c:ee:35:9d:
c3:e1:3d:ff:a7:62:84:43:4b:29:d7:17:d7:b7:8e:df:09:9f:
d3:10:0a:06:0f:e4:31:d2:c3:0d:ac:ff:24:b2:5e:eb:2a:fa:
2a:62:c7:c5:23:60:f1:f3:40:af:26:80:73:9e:12:a1:53:66:
58:b3:3d:d8:49:3b:b8:ed:97:f7:ba:a0:43:65:4d:90:7e:b6:
0c:7c:29:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:18:16 2025 by rpki-client