Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: ZSaG66mxdeOOMPVsYiuw+mpsgYhTRVZPn3cZ0gxdjB8=
Subject key identifier: BF:AB:B0:6F:07:75:26:E5:DC:EF:42:DA:F5:AF:15:C3:B4:C4:1D:06
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 01967530997E4B7B6FE2EDCFF08D860C5EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 097D
Signing time: Sun 27 Apr 2025 03:00:41 +0000
Manifest this update: Sun 27 Apr 2025 03:00:41 +0000
Manifest next update: Mon 28 Apr 2025 03:00:41 +0000
Files and hashes: 1: ACD72rE-jioyxPH9RAuGb5mC6oU.roa (hash: QtFylWnulCc2yQBn+mtJTIcyYgVI68tUvXBBF4rKnVc=)
2: _4IIJhtFlJdrkjSOppTsaFBNkrg.roa (hash: r5hI609ZhZ4xyXvkrk1Z26XwV02QOdDJJ0CIfMyhg7s=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: uNkkLohOaYPtVMb4jq6i53uTZK5miY4zk/JWDR1TKsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:99:7e:4b:7b:6f:e2:ed:cf:f0:8d:86:0c:5e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Apr 27 03:00:41 2025 GMT
Not After : Apr 28 03:00:41 2025 GMT
Subject: CN=bfabb06f077526e5dcef42daf5af15c3b4c41d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:b5:1d:82:a8:d6:08:93:91:b7:e3:9f:ea:
bd:59:17:ff:db:78:17:93:80:c5:35:54:e0:1b:0a:
e3:ca:3d:74:25:9b:8a:72:0d:a1:6c:7e:77:7f:f2:
db:54:43:c7:d5:1e:38:1e:13:ef:9c:fb:82:57:dd:
c4:c5:98:d8:f0:73:b6:77:78:3b:b3:55:c0:31:cc:
81:63:ad:30:a5:de:4b:5a:3c:d1:d4:d2:38:7f:15:
e6:4d:73:98:75:ae:f7:6b:18:11:d8:d2:23:8d:c8:
b2:14:c2:b8:c9:76:ec:62:b0:5b:e9:ad:3e:9f:ae:
18:86:b1:ce:40:ea:16:40:5a:8b:38:d0:93:6f:ee:
08:49:16:85:c5:e6:7b:9c:a6:42:72:05:e7:5e:36:
d6:b9:b1:84:64:d7:4a:84:d5:40:3d:67:26:a0:b9:
85:26:07:5a:8c:c7:5c:c5:4b:94:b8:6e:46:d7:42:
48:bc:f0:38:a3:12:b8:85:09:b1:99:31:c6:93:7f:
37:44:65:5d:db:59:6a:b0:c3:b9:a4:b4:68:91:86:
d0:51:50:2e:fc:4d:a2:95:0e:c1:68:12:38:f2:fa:
fd:e2:4e:b3:08:e8:54:11:c2:90:74:60:35:fd:34:
93:ab:7a:36:4c:b7:ec:4f:38:21:9e:c7:72:e1:66:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AB:B0:6F:07:75:26:E5:DC:EF:42:DA:F5:AF:15:C3:B4:C4:1D:06
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7a:60:b7:75:32:03:b2:5f:1b:5c:73:fd:8a:eb:eb:66:58:
c8:f2:e8:90:12:3d:21:b1:4f:21:e2:e9:f1:af:d7:30:ec:78:
ef:33:17:0f:a5:a3:b2:d7:df:09:65:26:87:9f:27:25:03:8e:
ae:2e:b6:89:19:06:dc:ce:c1:f3:1f:65:20:b0:60:35:a9:7e:
bf:f6:af:f2:80:e3:27:96:51:76:b8:7f:4f:82:ea:b0:19:67:
a2:f2:f4:6e:86:94:60:a0:fe:1f:05:52:d1:4b:c0:c7:a1:f2:
41:3e:fb:87:cc:3d:a6:6a:99:d9:10:70:c0:4b:90:23:15:5c:
9a:2a:b5:57:f6:0c:01:78:ba:75:ac:80:eb:d3:78:26:3f:f7:
c1:99:e2:13:e5:3d:ee:c7:4a:55:fb:14:4e:7c:55:a0:ee:b7:
96:94:72:ab:68:d6:4c:92:08:ec:9d:e1:0d:4d:67:df:9d:3e:
57:f4:32:0f:1d:66:3b:87:ea:a2:6e:c7:a9:c8:7e:d2:f3:96:
b2:fd:f8:0f:98:a6:8e:09:f7:c1:09:61:d5:8e:f1:f8:02:80:
a5:b5:b2:79:be:d5:54:26:1b:65:60:b1:97:cb:4b:cb:51:32:
3c:69:d7:18:19:18:f5:cc:f7:f3:78:a1:2c:bc:4a:52:ff:34:
1d:e0:9a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:04 2025 by rpki-client