Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: 538NloTGtehjam79bR2kXkz6lwJfOPRZs93a6QXnnFc=
Subject key identifier: AE:B5:06:CF:56:D2:02:59:6A:3A:4E:8B:6D:4D:73:80:04:B8:44:38
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 019684DA6640D9B8CB1D79132B80DB367F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 0D5E
Signing time: Wed 30 Apr 2025 04:00:27 +0000
Manifest this update: Wed 30 Apr 2025 04:00:27 +0000
Manifest next update: Thu 01 May 2025 04:00:27 +0000
Files and hashes: 1: JQpnjsOMpFiQQJOrjnkEWtt3EFI.roa (hash: 4t67VWbmiq9bprri9rSmGg0uFh9lfRFrW2ITm8UtRrg=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: RmWIdK2WU2HVOjr9eBuKz4cLPD0Zx5G7kKlak0Vphy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:66:40:d9:b8:cb:1d:79:13:2b:80:db:36:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Apr 30 04:00:27 2025 GMT
Not After : May 1 04:00:27 2025 GMT
Subject: CN=aeb506cf56d202596a3a4e8b6d4d738004b84438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:5d:c1:a6:6b:45:c3:9a:1a:26:f7:91:34:
bd:7f:74:38:b1:2c:56:2a:27:cb:7f:83:3c:e4:ad:
08:41:45:e0:83:da:ab:8c:ae:24:ab:6f:12:1c:56:
bb:ef:97:bc:6c:fe:fa:a5:ec:2b:3c:cf:9d:82:38:
c2:6a:83:cd:01:4f:af:11:3d:8c:8e:66:15:82:3f:
27:a8:3f:57:2c:4d:bd:c4:79:53:4f:9b:31:d5:58:
53:06:88:27:02:a8:7b:12:77:2d:d8:ea:37:aa:1f:
1b:cd:84:47:96:44:01:84:00:66:ef:44:e3:47:68:
0a:6c:39:01:eb:a4:04:93:5d:9d:51:56:b5:70:29:
42:89:00:b7:bc:08:9f:b5:82:db:d1:e8:a1:c7:4b:
67:50:d6:ae:10:6a:3e:56:01:40:9e:25:09:59:9d:
23:ba:f4:e1:e8:f2:67:12:89:60:d6:0b:21:ca:64:
60:db:5b:f1:81:a2:f3:07:d3:19:dc:c3:10:48:5d:
31:12:a2:6f:a5:7c:8e:6d:f5:f2:64:b2:07:54:30:
49:41:ff:8e:38:e2:b9:2c:5d:a8:dc:16:a5:a4:31:
13:eb:fb:ff:73:d7:72:94:5f:bf:90:f2:fa:b2:b3:
a0:c0:b9:93:10:a8:e3:d4:fc:ac:b6:11:9c:87:8d:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B5:06:CF:56:D2:02:59:6A:3A:4E:8B:6D:4D:73:80:04:B8:44:38
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e6:83:b5:ea:39:e4:26:9b:7b:26:c5:f9:0d:e3:61:83:50:
b4:3f:ca:cd:be:06:40:15:e4:73:5c:0a:e6:ba:4a:f4:ab:b3:
16:10:62:25:71:7a:39:11:74:29:6c:47:d3:41:77:3e:d3:de:
11:76:e2:84:61:0c:9f:48:b4:82:54:aa:16:2b:c1:73:8b:f6:
fa:ce:56:7e:4b:07:62:aa:14:10:35:81:a3:1e:7a:40:54:09:
91:76:6e:a0:8f:ac:bb:03:17:d7:54:35:bb:bd:4a:f4:08:a1:
e6:f3:1c:1f:cc:f2:21:9c:6b:6f:24:fa:09:b7:be:c3:f9:40:
75:a6:c4:d0:e7:5a:90:02:cc:00:df:c5:2b:c4:28:ee:a5:91:
cf:c6:56:01:ab:28:73:7a:08:04:86:cf:48:4b:dc:22:4f:f8:
ab:b1:98:62:01:5f:d2:b1:d2:dc:5a:a5:4f:5f:2e:e7:0b:d2:
d2:05:70:ec:3b:44:3b:bc:0d:ee:9f:ee:d9:d2:92:69:47:b5:
c2:57:5f:00:1c:94:5c:03:a2:28:45:37:19:82:c5:a3:d5:53:
96:2f:34:21:3f:17:28:d9:7c:d3:11:32:5e:c6:e2:49:5f:3b:
1f:69:0b:a9:44:13:7a:82:ba:bb:55:89:b0:14:99:65:97:63:
b5:d4:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:10:48 2025 by rpki-client