Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
File: fewnmwUBcwaYowvNzqOuR3yVczE.mft (raw, json)
Hash identifier: dSMqRHE8QIe5sPbLsnFT0kEoUPPEwZUrYuLYGNEaPiw=
Subject key identifier: CC:15:2C:9C:AF:D6:CB:5A:B0:8E:17:7C:4F:48:B4:1D:BC:6F:16:F5
Authority key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
Certificate issuer: /CN=7dec279b0501730698a30bcdcea3ae477c957331
Certificate serial: 01967E34329878D2C4AE9F92F47985D73B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 21:01:12 +0000
Manifest this update: Mon 28 Apr 2025 21:01:12 +0000
Manifest next update: Tue 29 Apr 2025 21:01:12 +0000
Files and hashes: 1: 8vkkegr96IBMHB6BFhag_SmFnOI.roa (hash: h5/oEq8rbYbckXXTNVYfhI/okuKJEZpt0WvLrdLeyGw=)
2: fewnmwUBcwaYowvNzqOuR3yVczE.crl (hash: HGbZQrDBIaBtOfd/Y5mDiTvd485CTtqzYT9UgpnBvtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:32:98:78:d2:c4:ae:9f:92:f4:79:85:d7:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec279b0501730698a30bcdcea3ae477c957331
Validity
Not Before: Apr 28 21:01:12 2025 GMT
Not After : Apr 29 21:01:12 2025 GMT
Subject: CN=cc152c9cafd6cb5ab08e177c4f48b41dbc6f16f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:4a:6d:ea:d1:b0:eb:4c:67:9a:cd:d1:c7:
22:57:19:b5:c6:6e:cb:dd:59:04:8b:2c:40:22:f4:
7e:f1:c0:1d:51:58:0b:66:88:68:af:af:09:9f:53:
b9:0e:f6:56:5c:d1:e2:06:d7:92:92:95:a1:5c:5c:
01:90:40:04:a4:72:03:0c:4a:96:82:48:d4:29:34:
2f:5f:f8:99:7f:6f:68:f6:f2:34:99:90:46:98:3d:
b1:af:d4:62:28:16:9d:9b:76:5a:a9:45:3a:6c:c1:
cf:28:ce:2f:94:e1:65:00:79:f4:f6:17:ec:e4:6c:
33:a7:64:d0:fe:b0:c6:71:92:76:39:37:20:d1:68:
3f:72:0e:fb:e0:29:5d:96:f2:16:38:ef:09:d5:a2:
c1:74:1b:d5:71:60:76:e3:cd:73:e7:58:e8:73:c1:
12:7c:d9:69:0a:6d:44:d6:89:8e:1e:c0:b0:6d:5d:
2e:2d:c4:79:f7:ec:82:fe:8e:8c:16:a9:1d:db:e7:
2b:57:40:6f:e1:f7:60:eb:72:6f:40:eb:3f:1e:ee:
b1:b6:4e:06:98:00:e3:5b:f8:b3:01:e8:d3:37:90:
f6:ca:75:3a:23:81:9c:9b:d9:c7:ff:0d:03:1c:f1:
72:48:fe:74:b3:a7:35:b4:3c:89:2c:cc:b9:aa:4f:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:15:2C:9C:AF:D6:CB:5A:B0:8E:17:7C:4F:48:B4:1D:BC:6F:16:F5
X509v3 Authority Key Identifier:
keyid:7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:16:da:02:16:b8:79:4a:bc:f4:b3:92:f5:c0:a0:de:3b:4f:
7f:da:ea:b1:dd:76:38:7e:85:ec:7a:1c:36:aa:c0:6c:52:84:
7b:2c:7e:bd:95:b6:c5:3a:47:c8:87:95:b9:7d:fc:4b:62:b3:
c8:02:70:fd:83:31:77:ef:19:0e:12:a6:37:bb:bc:3c:58:7c:
b3:94:ff:2e:e4:6a:6b:24:54:bb:14:ec:a3:a0:48:87:f3:5e:
d4:ac:cf:62:cb:16:86:8f:30:cb:a0:0a:e6:67:9f:48:ab:07:
9c:c1:f8:86:5f:ab:17:57:71:2a:ce:91:c8:59:d7:ce:10:a9:
13:71:0b:8f:37:f8:5b:7d:10:c3:f0:11:90:0f:1b:3b:72:6d:
88:41:b2:01:74:f1:44:69:b5:c3:b3:cf:c0:5d:42:be:82:b2:
e3:78:07:78:d6:7c:7b:a3:2b:e6:46:aa:f4:72:7b:04:52:6f:
52:bd:4e:18:0a:44:3d:f2:b5:e5:9b:6e:12:f0:f2:f1:9a:58:
bc:b6:21:26:93:e4:a5:50:94:ee:75:b7:44:7c:f2:1b:cd:06:
84:03:34:77:5e:62:52:f0:7b:f4:b7:72:e4:a6:96:5e:0d:b7:
1b:64:71:4e:21:f0:ef:37:4d:20:42:ff:23:a3:2d:37:c5:ab:
ce:51:35:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:34:11 2025 by rpki-client