Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
File: fDUy5S6q_vlIxCyLHVEUXKydTJY.mft (raw, json)
Hash identifier: mQ2D0aCCUCLEEzbvmPHfr+gN3mj8CrCJJquSAAwZ+qU=
Subject key identifier: 9C:49:28:14:D9:FC:AE:50:80:C2:1B:4D:2C:6B:75:08:DB:8A:FC:11
Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
Certificate issuer: /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Certificate serial: 0196952933410F25C4AFD9CE352471CE67FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
Manifest number: 0B0E
Signing time: Sat 03 May 2025 08:00:27 +0000
Manifest this update: Sat 03 May 2025 08:00:27 +0000
Manifest next update: Sun 04 May 2025 08:00:27 +0000
Files and hashes: 1: XCHPvb-EkH1zGNPsBprEZBKSmdE.roa (hash: Sji1HnCVrncrNibsWO7N88ENDvFcUSSKPSq/SoaOpWI=)
2: fDUy5S6q_vlIxCyLHVEUXKydTJY.crl (hash: iN93gwyz8VXKOyqi7GjavaxioQ9VopAirogktX4+Cyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:29:33:41:0f:25:c4:af:d9:ce:35:24:71:ce:67:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Validity
Not Before: May 3 08:00:27 2025 GMT
Not After : May 4 08:00:27 2025 GMT
Subject: CN=9c492814d9fcae5080c21b4d2c6b7508db8afc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:b2:81:0d:dd:20:a0:9e:91:38:bd:55:40:
fd:f4:c3:3c:33:47:a1:fb:59:52:07:c9:65:d1:eb:
0a:e6:3d:f4:14:15:e8:d2:3b:c3:3a:5b:c2:e6:82:
39:48:4a:fd:52:19:3a:8a:2a:ee:ac:91:0a:28:e3:
1a:e1:9b:07:b9:79:f1:ad:c6:d2:5f:1e:c9:4f:3e:
5e:a8:0d:f9:75:3a:a5:44:d5:35:4e:ed:d9:0a:39:
a6:bd:53:31:2b:9c:c3:20:01:33:ce:87:32:5b:e5:
9e:d2:27:d2:d7:2f:7b:b1:ba:ec:85:3c:f8:06:1e:
c4:7b:52:e4:b4:2a:8c:5b:ed:20:0d:63:de:3a:55:
2b:83:48:f2:0c:48:38:7e:b0:a6:b7:1c:88:e3:a7:
4f:c1:54:0e:33:87:0f:1c:2a:51:d0:bf:ba:5b:f8:
39:e9:3d:30:81:4f:75:f5:07:7b:2f:a8:bf:a0:07:
35:9a:d9:24:2f:e3:c0:12:04:4a:76:aa:98:8f:34:
88:7d:ce:dc:a7:2b:3c:13:3f:fb:d5:0e:65:66:99:
1e:8c:d9:ca:dd:26:a7:e0:61:c6:86:0b:e3:99:10:
a6:9d:e5:d0:3d:43:07:47:2d:c1:a8:64:26:10:dc:
4e:c2:e6:6c:bf:21:82:c6:9c:b9:d8:66:19:e4:ae:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:28:14:D9:FC:AE:50:80:C2:1B:4D:2C:6B:75:08:DB:8A:FC:11
X509v3 Authority Key Identifier:
keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dc:0f:61:c9:19:1e:db:ce:02:9f:aa:29:3d:82:a8:e2:e3:
a5:76:e2:1d:f8:e3:a6:28:e5:db:57:cf:9d:9b:3c:9e:66:72:
47:70:6c:d7:f5:78:ab:36:16:14:b5:20:b6:58:53:c9:94:0e:
95:f5:ff:f0:4d:7f:13:73:f2:72:1d:78:87:e0:7d:63:a0:39:
3f:b0:7d:7b:30:dd:a2:f6:c0:83:e9:23:9a:51:5e:b2:05:57:
29:ca:bb:ed:6b:c5:b5:72:b1:f9:fc:1e:c5:84:08:eb:b9:cc:
90:df:9b:4b:1d:75:70:0f:7b:01:6f:84:ed:58:66:40:6c:92:
0e:67:d3:8e:f9:68:a7:44:77:e0:f9:c8:73:6f:6b:70:d4:3e:
e9:52:d9:b9:b1:10:49:46:d1:28:7b:11:62:1f:fd:98:c7:6f:
da:ec:8a:12:84:39:4e:75:da:1d:f6:7d:29:af:fa:46:3d:38:
96:d1:1a:78:42:e3:7a:b7:83:ad:1e:a4:21:cf:1d:f5:ad:a4:
de:bb:97:bd:91:49:24:09:bb:f9:33:70:52:73:99:9e:48:6c:
53:77:e9:2c:fb:a1:21:0b:b8:22:50:d3:13:e6:7d:06:98:a3:
3f:04:df:e9:a3:db:de:cc:99:6c:d4:ed:af:a5:09:6f:83:7c:
d0:4c:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:18:35 2025 by rpki-client