Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
File: FO-9HV4axzX28jUJzyoOtKH5tOk.mft (raw, json)
Hash identifier: EIwoi7lU6fzmJVPTRamQjrmyk8dAdio8LTnh7SQ30lU=
Subject key identifier: 7A:5B:37:2E:29:4D:B9:8E:30:52:D3:2D:62:E6:F8:F4:78:2A:18:37
Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
Certificate issuer: /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Certificate serial: 019688EDE8BE7CF28EB8D162D4917DC69651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
Manifest number: 14A8
Signing time: Wed 30 Apr 2025 23:00:15 +0000
Manifest this update: Wed 30 Apr 2025 23:00:15 +0000
Manifest next update: Thu 01 May 2025 23:00:15 +0000
Files and hashes: 1: FO-9HV4axzX28jUJzyoOtKH5tOk.crl (hash: uyEdY6VbHf/x1spFzfJEG7EzcCXoTFeSTG4cFmMJ//Y=)
2: O3vVokpmMILfLuCvtK11xQ6QzgQ.roa (hash: QJ033XApjs5jTBUXlpnVdiwOxF+/6PemalcFTFglCaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ed:e8:be:7c:f2:8e:b8:d1:62:d4:91:7d:c6:96:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Validity
Not Before: Apr 30 23:00:15 2025 GMT
Not After : May 1 23:00:15 2025 GMT
Subject: CN=7a5b372e294db98e3052d32d62e6f8f4782a1837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:fa:ea:7d:66:41:55:41:78:63:e7:46:e7:
f9:96:b1:6f:95:a2:1c:e7:c8:28:66:d1:18:f8:8a:
38:f3:1a:8d:50:ff:b3:0d:11:ec:36:a7:1d:95:d1:
3f:98:42:9e:b4:0d:41:b4:6f:e5:5b:58:0b:3d:bd:
2c:66:ce:af:e6:2f:66:45:ba:37:7a:8d:3a:7c:7a:
f2:24:0d:c7:85:67:44:2e:90:47:60:c7:1b:04:9d:
1f:a3:e8:95:03:b4:54:99:82:fa:1a:24:62:1e:d2:
c0:1f:b6:12:c6:5e:0d:1b:39:e9:05:48:f6:40:db:
18:4c:ed:b3:b8:ce:80:63:e8:c2:0c:8b:87:7b:2b:
45:4b:a1:6b:c2:16:1a:3b:f5:d2:31:d7:2a:3c:9e:
b8:0c:ac:99:99:ea:34:66:b3:83:f3:08:b9:ba:b7:
dd:5f:45:a9:78:0d:8b:48:20:58:aa:5d:8f:e1:83:
75:b4:e6:9b:0e:5e:bc:24:e1:66:15:d2:61:d4:22:
fa:69:0a:37:fd:73:06:a2:7c:ac:1e:40:02:3f:9f:
91:b3:44:10:24:59:e0:6e:5b:68:f0:80:df:95:b9:
ec:dc:54:ca:81:38:5f:7a:b9:f3:b2:1a:b0:2a:15:
9a:46:c6:0f:fe:74:fe:72:60:9a:68:7b:32:6f:e7:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5B:37:2E:29:4D:B9:8E:30:52:D3:2D:62:E6:F8:F4:78:2A:18:37
X509v3 Authority Key Identifier:
keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:53:b5:9d:39:df:3e:5b:73:b4:8c:72:0b:08:c2:b7:ad:4e:
73:53:96:83:b8:1f:d2:17:22:70:16:88:32:fe:47:72:e0:36:
df:b8:76:1d:df:02:89:6a:e0:c9:51:7d:69:db:80:cf:de:7c:
32:80:cd:60:ee:a9:af:33:47:51:df:ab:e2:4c:48:55:41:58:
08:c5:5e:39:78:fc:c9:6f:82:a4:3a:e7:f8:d0:a0:49:12:66:
0b:a6:19:5d:33:61:fc:d2:a7:cc:8c:9d:0b:56:a8:c1:12:a7:
f5:2b:5c:59:09:54:e2:85:bb:8b:0e:33:de:53:f7:42:d2:ed:
90:16:21:04:61:a9:7d:7c:59:c8:e3:7a:1f:a1:e1:c7:a5:cc:
1a:8f:e0:0c:68:8c:7d:95:a8:70:6d:1b:f5:31:ca:98:22:7d:
2a:e8:35:32:12:b2:c9:72:01:07:bd:db:28:02:23:67:31:32:
1c:ca:f8:cd:e0:12:d6:5b:f2:77:46:b4:5f:1c:0c:fc:b3:44:
bd:a3:5e:2e:69:8d:2f:c8:4e:cf:14:03:b1:ff:c0:94:b5:42:
8e:dc:18:3f:7c:8f:e1:f8:e7:78:5a:40:01:b0:97:3e:bc:af:
cc:a6:42:b0:1d:6b:6a:0d:21:77:7c:43:38:7f:3b:a0:03:d8:
0e:d3:d4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:16:17 2025 by rpki-client