Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
File: _o6FIymApj8NTfWwSRY-P9AvVLM.mft (raw, json)
Hash identifier: 9RIx8p2F1/I7nqNIrh75n1IZU5uikAPAjAFryvaLdXk=
Subject key identifier: 01:7C:02:AA:92:9F:41:19:A7:8C:A4:A6:5A:68:28:5D:B1:66:6D:38
Authority key identifier: FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
Certificate issuer: /CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Certificate serial: 01967C45B578788060B5A54D54CB612AC3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
Manifest number: 098A
Signing time: Mon 28 Apr 2025 12:01:05 +0000
Manifest this update: Mon 28 Apr 2025 12:01:05 +0000
Manifest next update: Tue 29 Apr 2025 12:01:05 +0000
Files and hashes: 1: 7IkFNxuEd7zYMJ5GFmWYCrb0D3k.roa (hash: EbQqPJKQBhTvoE7/qrp3Wi8FH8cq4X28q+E9y9x/db0=)
2: _o6FIymApj8NTfWwSRY-P9AvVLM.crl (hash: 33G3z7MMyIEhxabglOBhL2nzuqAA8q0u+kfyLp9L+mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:b5:78:78:80:60:b5:a5:4d:54:cb:61:2a:c3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Validity
Not Before: Apr 28 12:01:05 2025 GMT
Not After : Apr 29 12:01:05 2025 GMT
Subject: CN=017c02aa929f4119a78ca4a65a68285db1666d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:e3:12:d7:2c:11:4d:de:4e:b8:17:2b:d9:
04:ab:ad:f1:48:b6:7c:c0:7d:60:0a:42:b1:ab:05:
24:a4:38:ab:3f:37:bf:00:4e:d4:49:09:4d:b5:d4:
76:57:2b:c8:99:10:f8:f5:89:cb:ce:7c:fc:ff:12:
6f:e8:ad:89:b1:cb:71:0a:b3:d4:5a:76:ea:d3:1c:
6e:94:4f:0c:ca:dc:6d:f2:7e:5a:2b:fc:ad:7a:94:
15:ee:b2:6d:ee:e4:9f:36:32:c3:fd:9e:06:7b:d8:
d5:fa:19:e0:00:f8:38:27:27:0c:34:40:9a:71:a6:
21:60:c7:2b:60:72:8d:56:60:2b:c9:28:0d:ac:a7:
8e:a3:20:cf:8c:0a:23:96:28:f3:4a:a1:72:24:69:
af:6e:ac:cf:ae:0c:4f:5e:7f:3f:e4:4a:23:f1:de:
4b:d6:36:48:8c:30:64:63:cd:fa:10:67:c8:4b:62:
8c:f1:a1:e7:c9:19:3c:a1:c3:50:2f:e7:53:7b:d3:
34:33:d2:90:a0:d7:73:39:84:a3:ac:7e:e2:8a:23:
f2:65:85:cd:d6:62:ba:f1:4a:88:7f:a5:e2:33:77:
8b:19:64:4a:3f:cc:c4:4a:9a:e4:d1:73:e8:6f:e4:
51:a9:e7:9d:23:73:aa:64:ba:4d:ef:ba:d3:48:f4:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7C:02:AA:92:9F:41:19:A7:8C:A4:A6:5A:68:28:5D:B1:66:6D:38
X509v3 Authority Key Identifier:
keyid:FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0c:51:6e:14:4e:5a:c3:9a:df:fb:53:52:b2:e7:99:c1:71:
68:eb:26:7e:3f:62:e2:8c:39:94:ac:ad:98:2d:e1:48:87:22:
f2:c3:31:e9:e3:c6:ec:33:4a:33:60:c5:53:13:1a:26:71:8b:
b1:0f:ee:28:d3:96:34:e6:c9:e1:05:26:e7:ee:ce:e1:64:b2:
27:bb:af:b3:e9:11:8b:64:8b:45:27:10:64:ac:49:0a:0e:fd:
3d:1d:7b:45:eb:6d:61:43:b9:ca:05:23:e2:82:cc:57:0a:96:
af:56:72:71:3e:eb:3e:56:8e:e8:d6:1c:30:a4:66:2b:15:77:
77:3e:34:69:d2:4f:f3:c0:55:b2:19:89:da:30:10:62:8c:a0:
5b:9f:bf:91:d3:41:2b:dc:37:d0:d2:8b:de:f0:91:2d:c6:72:
40:e5:28:75:e9:5d:52:7a:a1:cb:6e:d0:af:66:27:3c:4a:c6:
79:12:58:af:f3:04:26:9d:19:e2:ba:19:5d:2e:e7:61:97:55:
10:23:a8:d1:e8:b1:5d:73:cf:26:5a:d1:ad:be:97:96:88:a2:
11:ed:af:2e:66:b4:c4:a0:b0:65:64:e2:5a:89:f0:fe:26:2c:
6f:9c:c8:6d:2e:5f:86:c1:20:51:f7:15:bc:7f:8b:1b:af:1c:
f7:ec:c9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:44:35 2025 by rpki-client