Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
File: frsTAxu1qUujKTO0JdyRUBYclSg.mft (raw, json)
Hash identifier: /plcJH6NIOON4iDvnNFOer0iLW9kNbwvPv+eIq2m5WU=
Subject key identifier: FC:2A:60:93:85:7B:25:64:52:34:C3:24:0C:D7:8B:92:D1:C7:E6:E7
Authority key identifier: 7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
Certificate issuer: /CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Certificate serial: 0196741DB4E69E8AB5A58C0A9391AB4BDB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
Manifest number: 0172
Signing time: Sat 26 Apr 2025 22:00:25 +0000
Manifest this update: Sat 26 Apr 2025 22:00:25 +0000
Manifest next update: Sun 27 Apr 2025 22:00:25 +0000
Files and hashes: 1: 1GrjD_MVlSSqPSOTstmSZn6OW-8.roa (hash: 0bCgzOJOxNfXuOJ/KwofBbHHt3oNngCqpnJt0zyGNL8=)
2: frsTAxu1qUujKTO0JdyRUBYclSg.crl (hash: 6XXrD0KHYDC9r/eoC3RCA4uLP8IJpghiXR86cp/kJgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:b4:e6:9e:8a:b5:a5:8c:0a:93:91:ab:4b:db:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Validity
Not Before: Apr 26 22:00:25 2025 GMT
Not After : Apr 27 22:00:25 2025 GMT
Subject: CN=fc2a6093857b25645234c3240cd78b92d1c7e6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:57:fe:ab:49:65:72:cd:10:de:af:34:6e:
26:04:ce:22:e3:07:52:16:5b:82:c9:64:96:eb:09:
a9:b9:6b:0b:85:57:1e:47:7a:ac:74:e7:14:e3:f5:
4b:2e:7a:50:43:a3:e5:dd:2e:8f:39:0d:e0:c6:87:
24:1c:e9:ba:d1:f0:c7:0a:5f:3f:7d:ae:aa:b7:e8:
9a:80:ee:c4:0a:93:aa:89:c1:f2:33:cf:f6:48:41:
f2:a3:26:56:08:49:0a:41:4a:13:05:99:6d:17:56:
8f:02:5c:bd:f1:1c:9f:9e:9d:b6:37:61:15:29:b6:
22:22:e5:9c:2d:9f:88:7e:7c:94:ab:5f:49:fd:0d:
89:a2:a6:12:13:9e:9e:d9:6e:b4:81:b8:2a:ad:41:
bc:94:94:78:35:10:2a:51:dc:6e:07:b9:e4:7e:63:
04:19:53:71:17:84:8e:13:04:54:db:83:5e:02:d6:
78:e5:e0:f9:df:f6:08:fd:ec:e1:be:45:2c:96:36:
52:74:fb:a0:2f:06:19:bf:e9:b6:11:be:e3:b7:bb:
35:40:a7:31:a0:60:5f:9d:d5:4c:d0:a3:df:c3:80:
35:ae:67:4f:5b:9f:f4:fe:9a:c6:73:78:9d:13:91:
06:e2:9c:43:b4:32:fe:1f:e1:2e:95:08:15:0c:04:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2A:60:93:85:7B:25:64:52:34:C3:24:0C:D7:8B:92:D1:C7:E6:E7
X509v3 Authority Key Identifier:
keyid:7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:13:a0:91:63:a5:ee:3c:c6:95:41:68:30:33:ce:f1:93:48:
96:9f:6d:c7:87:4a:c4:88:4b:24:48:10:e3:f7:d0:15:71:4f:
d4:fd:7d:a0:e1:61:c0:e3:80:86:8b:10:ea:d6:f6:99:18:ce:
fe:2f:87:50:cb:c5:54:db:90:1c:8c:f2:ea:1f:90:4f:4a:2b:
c9:b7:a7:dd:04:6a:62:41:3f:42:cb:4e:86:1a:bd:10:5c:d6:
4d:af:38:1e:09:57:c2:0f:4c:1a:ce:6a:cd:ea:9e:4e:16:9a:
5d:57:41:63:aa:f3:01:e0:fa:e8:6b:c0:bb:00:a0:c3:74:24:
9b:86:0a:51:8c:06:50:ca:8f:c3:00:25:48:ae:bd:43:61:53:
46:cf:a0:23:aa:5b:46:6c:9e:bf:6c:2c:ba:8d:7b:e7:7c:4b:
83:a2:4c:9b:40:90:db:07:a2:c2:bc:4d:1e:25:fc:f2:1f:59:
82:ce:43:66:86:06:5c:b5:e0:30:85:a1:e3:f3:ba:51:cc:e9:
83:20:95:84:eb:f7:27:57:15:fa:ae:99:70:8c:0e:7f:1e:c2:
42:86:b5:2d:c2:2a:2e:b6:74:65:6d:a0:8a:fe:14:ec:38:49:
37:bf:08:49:76:4b:de:d4:3f:60:02:6a:57:a8:89:71:4f:da:
4b:6f:ed:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:08:37 2025 by rpki-client