Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File: fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier: aaEVSYh3iDBwxwaOeAsnTwPP1+w5PJqa5G8K9vBjnlA=
Subject key identifier: CE:E9:57:42:73:61:EE:22:40:BE:65:2B:0B:FD:79:A4:89:8F:43:52
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial: 019685ED20E2C859B255FC6E7BC42E5A3A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number: 0F8A
Signing time: Wed 30 Apr 2025 09:00:32 +0000
Manifest this update: Wed 30 Apr 2025 09:00:32 +0000
Manifest next update: Thu 01 May 2025 09:00:32 +0000
Files and hashes: 1: aO3R8Yo3eBCEfuvERnCJCw4GHKw.roa (hash: 0+s8Oxr+vc9N7zEky4ZV5zDnUpXVmpiBsxhTGsefbzg=)
2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: 0ghirmbeh5kF6ctoyq+Fgd118fFuhXKXk2L7mpW6xFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:20:e2:c8:59:b2:55:fc:6e:7b:c4:2e:5a:3a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
Validity
Not Before: Apr 30 09:00:32 2025 GMT
Not After : May 1 09:00:32 2025 GMT
Subject: CN=cee957427361ee2240be652b0bfd79a4898f4352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:fe:66:2f:8f:b5:c4:8c:79:81:f8:11:8a:
47:cf:2c:6b:b2:ec:83:47:e8:21:86:76:f1:e9:f8:
f2:cf:e7:4c:b0:69:fc:92:fa:ee:15:52:a7:b1:0a:
cf:ad:ea:8d:b1:63:7c:8f:4e:62:09:9d:61:0e:ba:
c7:9b:d3:2f:66:4f:77:31:76:c3:9c:af:aa:75:7a:
ad:74:6b:d4:c6:4a:67:84:61:ec:3b:78:dc:29:3d:
93:ab:05:8d:9f:e3:81:48:3f:f0:ce:87:e8:b4:80:
d6:72:8d:de:e5:4f:d1:3d:dd:4d:e6:4c:8a:58:28:
bc:0c:44:f4:3b:b9:90:7a:c4:10:55:5d:9d:fc:08:
b4:37:d5:f6:e3:a5:e9:f9:aa:5c:ef:d5:0d:72:96:
0a:48:29:e0:19:82:b0:6c:c6:55:96:7d:46:ad:78:
18:98:f9:4d:f5:95:9c:c3:7c:b3:24:8b:3a:8b:58:
ca:f0:68:e9:d2:60:04:3e:62:d2:45:41:07:3e:0c:
7c:e0:8c:f7:8c:86:d4:c3:86:a2:13:20:4d:17:3d:
d2:03:df:70:c8:6b:c8:3f:b8:fe:48:ca:8e:4b:1b:
b5:c0:5d:c6:ed:44:66:13:36:e9:fb:ff:74:70:41:
ee:4b:42:75:47:14:ed:b0:c9:f0:64:92:e2:07:4c:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E9:57:42:73:61:EE:22:40:BE:65:2B:0B:FD:79:A4:89:8F:43:52
X509v3 Authority Key Identifier:
keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:15:35:03:f2:1e:8d:18:e9:de:e8:d1:9d:7b:3d:41:b6:24:
6d:23:a0:cb:0a:ca:ce:2c:72:55:b8:95:59:47:8b:ef:80:e2:
93:c3:1e:60:29:2c:00:8a:b6:eb:25:41:02:19:a6:c2:20:58:
b3:8f:fb:9a:46:b4:cf:46:e5:cb:a1:f5:f5:f7:33:77:a4:4c:
5b:1f:93:18:4d:4d:b4:15:26:43:51:dc:2c:5a:0c:e8:77:cc:
fb:63:4e:75:ad:52:e0:5f:fd:b9:3c:d0:9e:60:e6:9a:b9:d3:
ba:4f:b9:98:5b:36:9b:31:13:56:9c:a7:b2:8a:b9:2f:99:aa:
16:95:15:71:74:08:fe:b0:ec:d3:32:56:da:0b:07:d9:39:ff:
10:26:7c:9c:de:ef:0c:89:86:95:18:95:59:3f:a7:e4:c7:c5:
0e:c7:65:48:49:d3:aa:1c:ab:ca:a1:55:0d:2f:6f:22:aa:38:
ea:21:26:14:fe:c2:7d:d5:af:d0:3d:22:5d:8b:da:34:38:e7:
3d:05:bf:96:d9:30:73:ee:7e:2f:7e:25:fa:ed:71:0a:40:06:
51:1b:c3:53:68:9a:7a:be:28:1c:85:a4:1b:6e:a4:40:dc:56:
50:06:57:5b:6f:69:9d:cb:0d:2e:7a:76:7b:74:43:5e:5d:d1:
0a:fd:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:24:30 2025 by rpki-client