Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File: fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier: XDu8e5FNUVg33/eEzCR9R2/H0J4qUBFJQwG1zzPoURE=
Subject key identifier: 3A:B8:07:F5:D6:F2:75:D5:2C:7C:F0:B9:B6:17:AC:A2:CB:43:F8:0E
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 0196827E1053D5DEE855039072FC7D505FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number: 1417
Signing time: Tue 29 Apr 2025 17:00:21 +0000
Manifest this update: Tue 29 Apr 2025 17:00:21 +0000
Manifest next update: Wed 30 Apr 2025 17:00:21 +0000
Files and hashes: 1: EIKOgQFi5mojMPucev_-8ewm_-E.roa (hash: a2bhdKBZ8yPIzwYvUQAAVhbdMilJSR3ugkNV2LMmk80=)
2: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: xvSPm6mjfaIJsCXVZtNT980DOcEpB8KxW2VXJyVUngw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:10:53:d5:de:e8:55:03:90:72:fc:7d:50:5f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Apr 29 17:00:21 2025 GMT
Not After : Apr 30 17:00:21 2025 GMT
Subject: CN=3ab807f5d6f275d52c7cf0b9b617aca2cb43f80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:e4:a4:6f:04:4c:2f:ad:2f:5d:cc:5d:4c:
76:43:e5:e3:8c:f1:29:0b:9f:cf:d5:c0:0e:d5:2d:
55:34:e7:69:2f:b5:fb:2c:27:e5:58:fe:9f:da:be:
6b:01:23:71:8c:d8:c1:bc:db:e0:33:2f:2e:9f:7a:
f0:61:cf:d7:a5:73:8c:e4:d1:74:1f:7c:d7:8d:89:
83:64:db:bc:90:a6:ed:db:ff:51:1f:6e:d9:5b:f5:
35:49:f4:7d:a6:d4:6c:8f:25:1b:31:5e:a0:bd:4a:
83:55:e4:a7:ad:17:7c:cf:60:85:5f:3c:fb:2c:fa:
64:22:9a:61:34:dd:80:aa:e9:d7:9f:47:bf:bf:47:
b8:65:bd:f2:9e:71:78:7c:ee:fb:ad:51:0d:82:10:
65:aa:55:01:2a:09:73:19:1b:ff:26:57:2d:43:08:
68:24:87:0f:f4:2c:60:b1:88:a5:20:23:41:2b:3f:
b8:52:0d:f3:b1:3c:02:5d:66:d7:24:1e:b1:84:f1:
0c:44:29:38:55:f5:16:33:0b:8d:2f:f9:8b:d5:b2:
4a:c5:2e:bd:76:0a:19:9c:6d:63:46:9a:78:ab:71:
f3:3c:7a:71:49:79:0d:93:9d:cd:0d:0f:3f:6f:43:
ba:16:e8:3b:e3:fd:29:59:29:56:a3:eb:1a:7b:36:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B8:07:F5:D6:F2:75:D5:2C:7C:F0:B9:B6:17:AC:A2:CB:43:F8:0E
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c9:57:b5:e8:35:2f:83:03:93:c4:58:43:18:04:f2:9a:72:
04:4c:3b:00:9b:16:e9:81:9f:e1:d4:d0:8f:38:38:17:54:e7:
41:41:8e:02:68:37:7e:d9:81:a6:94:69:ce:5d:01:76:79:5c:
e0:77:17:fd:d6:df:18:63:ab:e3:2a:e3:85:b6:31:e2:73:2c:
22:97:b9:c7:a6:1e:a6:af:49:af:da:fd:6f:a5:04:74:3f:95:
8f:b6:08:9b:14:f7:08:1a:43:19:cd:5f:16:5d:3f:15:fe:01:
22:70:86:87:d1:76:85:8e:6d:83:0b:de:a6:f4:1b:e1:f9:00:
29:68:c3:fd:d6:32:46:ab:48:79:7b:a4:f0:d1:f1:ab:45:14:
2b:eb:95:f6:72:65:16:be:5c:2c:fc:78:68:d1:c4:e3:14:14:
b9:08:44:de:23:a3:4b:7f:4f:f1:15:f0:b8:c6:44:b0:2f:d4:
e9:e0:8a:58:0b:d6:b9:64:0a:2a:f0:a8:70:85:a7:a4:70:dd:
6a:e4:8b:93:35:1d:33:9f:59:db:84:8a:0a:4e:a0:9d:3c:9b:
d0:3c:ba:72:53:ad:0e:f1:9a:62:ee:18:c7:2f:8d:ae:51:d2:
16:48:e1:54:d9:8c:02:b8:09:f5:55:34:a5:8c:7b:8f:01:22:
5f:cb:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:06:18 2025 by rpki-client