Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: QgE8qkpZ414sdZNYMe8BTzLus1Wnhc+BlXeBuMVgaxw=
Subject key identifier: 63:E8:FD:0C:3C:91:28:A8:B4:A7:1D:0C:24:9A:59:56:96:1C:86:2E
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 01967679D8475C823FA2FE3FB377DBE6C323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 0205
Signing time: Sun 27 Apr 2025 09:00:18 +0000
Manifest this update: Sun 27 Apr 2025 09:00:18 +0000
Manifest next update: Mon 28 Apr 2025 09:00:18 +0000
Files and hashes: 1: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: i0VHcZJiVidY9sDr9kcq7TaZ0NLzpJiCCCFta6SKWXc=)
2: pTTtPKmhE713zQ-lNSyfapckqck.roa (hash: Z4OXgVLMtdMbDgwAv+QfBL8XpAweOau33nbHajpmsxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:d8:47:5c:82:3f:a2:fe:3f:b3:77:db:e6:c3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Apr 27 09:00:18 2025 GMT
Not After : Apr 28 09:00:18 2025 GMT
Subject: CN=63e8fd0c3c9128a8b4a71d0c249a5956961c862e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:0f:a3:93:2b:cb:db:4b:f4:e6:69:d6:5c:
d6:91:72:6f:d0:57:09:1f:87:a0:6e:fa:01:38:24:
35:d4:28:1a:3b:e6:fb:26:13:ab:b6:6a:95:c2:4c:
2a:26:3f:81:12:2c:87:d8:bb:b4:c7:a9:9a:3e:a6:
4a:8d:af:40:e5:ed:33:a3:bd:82:37:16:42:06:3a:
d2:32:b9:1f:de:45:44:fe:12:b3:6d:c0:21:9b:98:
72:57:f6:28:86:cf:86:00:29:13:fd:b8:3c:4b:97:
6f:be:3b:8c:5e:70:e7:53:db:b0:08:67:2a:bc:13:
db:0d:a2:27:95:fd:ce:3f:30:83:43:5d:98:40:c2:
b6:f9:e2:99:5d:ff:17:87:be:96:f9:16:83:63:e0:
8e:37:be:75:bf:29:ce:61:ce:17:47:13:ae:0f:77:
61:61:ab:18:44:48:6d:ca:8a:fa:4e:5a:d6:f1:5f:
9a:42:cf:9b:ec:c5:9e:bd:57:fa:94:55:9a:eb:d0:
a1:14:76:51:a8:e4:af:ca:1a:72:28:bb:9e:1e:de:
eb:f0:a8:34:bd:c6:b8:dc:17:33:98:c0:52:f5:dd:
5f:41:da:6f:9a:01:c4:5a:b1:b2:e1:39:6b:3f:8e:
87:b9:d2:ef:3d:f4:22:fe:0b:dd:96:93:4a:08:3d:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:FD:0C:3C:91:28:A8:B4:A7:1D:0C:24:9A:59:56:96:1C:86:2E
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d9:59:a9:84:6a:dd:54:d5:bf:0a:4a:8f:57:ca:56:60:c1:
dc:ba:49:c1:0d:2a:64:63:0c:71:fb:4e:ca:f2:e0:94:1b:fa:
c6:28:dd:cf:53:35:91:37:20:12:91:34:19:50:0d:fe:74:7b:
99:b8:f7:57:9c:12:ff:e3:0a:ac:c9:c8:be:07:ae:43:00:37:
a2:02:95:bb:bb:cc:f0:87:7e:44:1a:cb:50:b2:1e:f9:1c:8f:
a6:4f:af:72:9b:29:3d:de:e3:54:a9:de:ca:70:20:cf:5e:f5:
ef:49:f4:b8:3a:fc:1a:b6:b5:54:81:32:e1:fd:63:a0:cb:e2:
dc:6d:f9:9c:8b:2c:b1:73:bc:b7:bf:c6:d9:87:f9:bf:80:f2:
03:7f:fe:f8:1a:76:e7:1f:ea:3a:0d:83:94:29:8c:68:a4:fd:
6c:c3:2e:d9:18:ac:90:ac:5e:80:8d:f9:50:f0:c9:79:76:bd:
84:4f:57:d2:e6:0e:4c:7d:ab:e9:ab:be:75:81:82:6b:fb:05:
00:55:bd:31:9e:3b:bc:26:f9:fc:dc:8a:64:33:e8:d3:ef:fe:
b9:06:33:2c:25:af:27:0b:cd:c9:64:57:e1:79:fa:92:d6:d7:
cc:2b:bd:da:c5:f0:c5:c8:45:4b:75:0e:ab:66:e0:ee:13:9e:
37:c9:85:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:08:59 2025 by rpki-client