Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier: Y4CkCac/88ALENoYkSYklY0ntLC6gypOnndUG0uuLFA=
Subject key identifier: D3:0F:AC:2F:BA:4B:16:B2:46:BB:08:BB:AC:79:3D:B1:99:B7:5B:0A
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial: 01968058E829C6D97A8EE5A162203A45BCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number: 04A5
Signing time: Tue 29 Apr 2025 07:00:32 +0000
Manifest this update: Tue 29 Apr 2025 07:00:32 +0000
Manifest next update: Wed 30 Apr 2025 07:00:32 +0000
Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: pscCFoWkhXOZEh0dOl3OPkss7/+wd+mTJygHmYFBC7Q=)
2: wVdARfy8kyS2yygCe6VeSrxjsrI.roa (hash: hDzrF6MC+t3cfKHXPCsVlZtlykkOSNtAuETj7zQp0RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:e8:29:c6:d9:7a:8e:e5:a1:62:20:3a:45:bc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Validity
Not Before: Apr 29 07:00:32 2025 GMT
Not After : Apr 30 07:00:32 2025 GMT
Subject: CN=d30fac2fba4b16b246bb08bbac793db199b75b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:33:5c:77:07:47:20:38:4b:2a:99:b8:84:
b9:50:85:2d:cf:8d:5a:2a:13:48:cd:dd:37:13:e6:
eb:40:ff:85:a5:f8:3b:83:b7:66:be:02:af:c9:ee:
af:c9:4b:ba:9d:fc:76:f3:ad:33:95:7f:42:b6:4e:
8b:fb:f7:79:d7:46:47:cf:ae:6a:44:ff:c3:cf:4b:
43:db:e1:c4:2f:a4:61:b3:c7:77:34:61:21:46:89:
0c:37:b0:3f:d9:be:93:83:20:b3:cb:df:a7:59:0d:
60:84:64:17:9c:b4:21:23:11:0b:d3:ec:31:74:21:
37:5d:b6:67:60:ca:db:d9:f6:73:22:4a:cf:d9:d1:
56:7f:4c:d3:11:bb:b1:23:30:cc:15:ce:b7:4e:6c:
dd:c5:6c:d2:17:e0:fc:c4:06:ba:3d:f5:e0:de:e7:
fb:ed:ec:6c:f8:be:22:66:44:ba:75:7c:e5:65:53:
1d:bf:9f:55:6a:79:c2:cb:ad:30:07:ac:44:3a:e3:
b4:24:d7:52:93:73:ee:13:5b:a3:69:fa:27:37:68:
86:ce:12:61:d3:f2:8a:37:4f:41:7d:37:ec:db:89:
75:94:2c:b6:ec:83:99:fa:3f:40:59:83:74:3a:6b:
74:f7:fc:35:b3:f4:22:ff:6e:a0:22:b3:5f:bc:96:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0F:AC:2F:BA:4B:16:B2:46:BB:08:BB:AC:79:3D:B1:99:B7:5B:0A
X509v3 Authority Key Identifier:
keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ae:4d:74:03:6b:ec:ba:83:fe:7a:b9:6e:d7:d8:d2:c6:f8:
7d:2b:a6:77:2d:44:8c:86:33:53:75:d8:b0:3a:f6:65:5c:6a:
97:df:2c:bc:9b:b1:d2:47:b0:fb:2a:19:2a:72:6e:16:a3:4f:
b6:4e:16:51:2d:fb:c8:3b:fb:a9:48:f6:23:b1:06:c0:46:4b:
a9:8d:d3:2a:bd:24:a9:80:e1:81:ce:f4:b2:74:d2:0a:0c:38:
86:ce:37:9b:ef:d3:27:5c:1d:4a:d7:b4:f5:b7:e4:18:dd:4f:
f0:cf:1e:f8:78:db:c3:af:70:01:d4:ae:0c:be:f0:bc:e1:13:
d3:ab:fe:c6:d7:fe:ea:03:a7:f2:44:fd:89:fe:93:b5:99:52:
08:44:4d:e4:fd:77:13:39:4c:4c:1f:0f:32:70:2c:7e:75:b2:
e8:64:7d:55:c6:87:81:b1:6e:9b:61:0c:fa:25:a8:9e:7e:40:
02:29:68:fd:b3:9f:bb:29:b9:bb:3f:5f:f6:44:30:43:7c:f6:
4a:63:51:2e:77:47:dc:1d:f1:00:5c:14:a7:04:e5:12:b6:c6:
46:66:e5:d8:b1:a1:11:01:80:d7:7b:31:93:a2:a6:e9:92:08:
2e:55:e9:e1:50:7d:3a:8d:83:4c:f2:e5:9b:77:6d:df:41:33:
d8:cc:84:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:18:31 2025 by rpki-client