Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
File: fbrLH8LCBjBCeBYxtRfOR1Izor0.mft (raw, json)
Hash identifier: hoLa9rdngqAiouquDxiyyOzcmhaaS1r+nbAe7U5pgCE=
Subject key identifier: B5:6A:36:EE:A6:59:8A:BF:36:60:92:81:E7:84:5E:68:70:A0:EC:4C
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 0196789F1B7A8B66FF2CF8C90B885B28EDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
Manifest number: 1516
Signing time: Sun 27 Apr 2025 19:00:15 +0000
Manifest this update: Sun 27 Apr 2025 19:00:15 +0000
Manifest next update: Mon 28 Apr 2025 19:00:15 +0000
Files and hashes: 1: M9qNJvC_kcwpwY04nD9scW455qU.roa (hash: 3RMJRIwbxzvUUPiZWVxoeQuqeF3pwso/hbH6wuXsN8I=)
2: fbrLH8LCBjBCeBYxtRfOR1Izor0.crl (hash: pB7K9tgJo4dtD0kbGMeFa5uex3jetChluaL0bavf0yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:1b:7a:8b:66:ff:2c:f8:c9:0b:88:5b:28:ed:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Apr 27 19:00:15 2025 GMT
Not After : Apr 28 19:00:15 2025 GMT
Subject: CN=b56a36eea6598abf36609281e7845e6870a0ec4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:9c:b7:c2:3c:32:7c:7b:0d:9d:fb:e7:e6:
cb:0c:42:3f:fd:ed:1a:c5:00:7e:06:3c:7e:f8:2d:
73:6b:ef:14:b4:41:33:29:d8:ce:bd:de:56:41:87:
20:3c:a0:22:d0:f5:60:92:66:7c:c4:f6:2a:25:de:
1e:e5:a7:61:3d:d1:c7:4e:40:26:0c:64:39:ba:9a:
80:77:a0:6c:cf:06:9c:31:ff:bb:f0:97:79:53:bf:
32:32:e3:7e:e2:2f:38:5a:25:f9:89:df:6a:12:49:
10:cf:1d:5d:1d:d1:bc:2e:1f:85:7d:d1:87:ff:b4:
37:c0:e9:68:23:34:70:ea:83:99:a0:40:01:e2:34:
fa:b9:f7:57:8c:82:f0:cc:34:57:36:19:86:79:b7:
13:1e:8a:59:c5:7b:44:2d:cc:ef:1f:18:65:4a:28:
04:ad:b4:88:de:a2:ec:54:ff:cc:0b:33:c4:d6:ba:
70:ad:3a:5f:6c:ac:1a:ce:18:b1:1c:81:78:a6:9a:
b7:ff:21:ed:e3:89:9b:29:ec:91:04:9d:dd:9d:74:
54:63:17:e7:0b:b1:6a:00:26:ee:5b:8c:be:af:23:
95:86:de:99:f6:be:32:3c:a2:95:0d:64:ea:cb:8c:
1a:d1:af:eb:30:75:41:8f:cc:08:04:f1:82:3e:5b:
56:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6A:36:EE:A6:59:8A:BF:36:60:92:81:E7:84:5E:68:70:A0:EC:4C
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2a:21:b5:83:63:08:6b:ad:f6:28:f0:98:8a:49:26:15:31:
49:b7:25:ba:6a:f2:b8:74:44:ec:48:93:f3:49:8e:3c:fe:9a:
70:1e:21:5f:f9:22:a8:e8:3b:68:53:5a:bf:78:41:9c:10:40:
c5:8f:9a:a8:61:26:6f:82:ec:56:76:1d:2c:5d:da:88:a7:2e:
d4:ff:62:11:8a:fd:97:98:b3:0b:fb:30:a4:9f:d4:23:ef:5c:
25:d0:42:2e:4e:2b:9f:3c:2b:c6:38:16:c2:c6:63:0d:af:d5:
d7:d9:ad:be:58:ac:7c:8c:83:cc:23:37:3d:0f:bf:d5:89:d0:
64:51:a9:94:ef:65:a0:c5:00:da:e8:a0:7d:be:40:21:9d:1e:
29:d6:55:cc:9f:ba:f8:70:35:d8:22:62:24:37:bd:8b:df:d4:
0c:35:bc:5e:17:ff:f1:e8:33:11:cd:72:73:5a:4c:50:fb:e2:
ac:ee:33:bd:49:c3:68:10:b7:c0:a0:0d:3d:5c:f5:c9:a8:6a:
14:58:9e:90:61:a2:7b:73:c5:0e:22:3b:10:13:f0:e5:9a:82:
4d:94:0f:a0:82:b8:af:79:66:b8:69:27:59:57:88:74:ca:ae:
2e:c3:86:d4:0d:88:6e:0a:37:da:eb:8b:f9:2f:e1:86:a9:ad:
f1:26:9d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:15:45 2025 by rpki-client