Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
File: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json)
Hash identifier: NXiY4A9+Go01RX1sSkhNYI+OdDpxa5Sh/i/fjM3Lp10=
Subject key identifier: 52:F5:54:89:B1:C5:BA:7A:7E:6D:46:CA:77:D8:36:11:47:B5:FF:D2
Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
Certificate issuer: /CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Certificate serial: 0196767A961AD36CD468AD2085E6840EA6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
Manifest number: 0344
Signing time: Sun 27 Apr 2025 09:01:07 +0000
Manifest this update: Sun 27 Apr 2025 09:01:07 +0000
Manifest next update: Mon 28 Apr 2025 09:01:07 +0000
Files and hashes: 1: OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa (hash: cxXlIHKPRbElTrIxapfIyNaAYnC9ppfTzQIGpRQ/AhY=)
2: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: JYUOYtXr2EMvokUqwSKiuQcVPuTNqiCtYeDue2s4YP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:96:1a:d3:6c:d4:68:ad:20:85:e6:84:0e:a6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Validity
Not Before: Apr 27 09:01:07 2025 GMT
Not After : Apr 28 09:01:07 2025 GMT
Subject: CN=52f55489b1c5ba7a7e6d46ca77d8361147b5ffd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:19:92:d7:ff:4b:c8:5b:0e:23:e4:96:b4:
fc:81:e7:85:7b:2c:24:dd:41:c0:75:f5:3e:af:90:
ec:b0:2a:85:c9:69:c8:bf:b9:83:8c:dc:95:7e:cc:
82:bd:77:ca:02:30:c0:a2:14:a4:1a:3c:58:e1:5f:
04:ea:d9:9b:e0:c1:08:73:e7:cf:e3:60:0f:9f:c7:
70:8d:5c:79:49:bd:80:a0:0c:86:e9:00:84:d4:8f:
5e:e7:79:9b:cc:62:d8:c9:f5:f3:e6:b0:e6:18:40:
5d:52:39:cf:b8:b2:db:92:58:be:bd:59:bf:53:35:
9b:63:b0:06:b7:c0:a6:f0:27:2b:22:0e:15:68:f5:
6b:bc:be:e6:f0:05:ef:82:00:7d:d2:28:2c:70:57:
55:3b:2f:62:20:4a:ab:8c:d5:2b:ea:0b:8f:36:48:
63:17:b5:44:ec:16:24:d4:cb:1a:fe:8c:f1:5c:2e:
f7:69:e7:43:36:5e:ac:a2:76:53:ab:35:c5:53:2c:
6f:7e:3f:18:de:ab:fd:61:ca:2b:93:e5:7b:e6:9c:
f5:e1:c0:2c:e9:7e:f3:bc:fa:1d:53:47:f5:5f:52:
a0:e3:7c:4c:a0:b5:a5:f9:64:bb:88:57:3d:6f:4e:
d1:87:cc:27:0f:c6:23:54:e7:a1:8e:97:be:af:28:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:54:89:B1:C5:BA:7A:7E:6D:46:CA:77:D8:36:11:47:B5:FF:D2
X509v3 Authority Key Identifier:
keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7c:32:cf:46:3c:eb:78:b5:b7:58:5d:76:3b:9f:ee:71:04:
06:8b:da:4f:d0:ab:ff:d4:a1:c2:ad:f5:66:3d:bd:52:ae:b1:
06:03:29:32:9d:b5:29:7f:79:e6:5d:18:2c:c9:ce:b7:88:eb:
d5:c1:10:52:f8:86:d4:b5:4b:0c:8a:99:90:ac:a4:55:12:e9:
88:10:3f:12:9c:79:ca:fb:9f:a9:90:8e:5c:a9:9e:7f:5f:1c:
ab:78:be:55:fa:fa:87:81:04:c9:6c:9d:20:77:e3:eb:da:1a:
15:b2:00:ef:97:2a:b6:ba:4e:74:42:75:ed:a3:a9:85:3c:c6:
8c:5e:d1:fe:d5:52:27:a9:bc:61:79:ef:ab:10:fc:9c:78:bf:
8a:a4:ce:e7:be:5b:05:da:09:a6:f0:ac:23:dd:d3:5e:c9:0d:
71:45:ff:16:e5:37:b5:aa:f6:32:55:15:94:4e:61:7e:c7:f3:
cd:2c:df:1b:6f:55:e5:24:33:a7:f5:76:fd:ba:0c:45:ec:c8:
38:85:da:01:13:1e:e2:f2:ea:2f:a6:52:5e:54:32:93:01:6d:
a5:d7:8d:ff:4e:e2:a7:40:56:36:c5:83:4d:75:5d:86:27:61:
b2:11:d0:cc:5a:6f:94:75:ed:e9:39:16:b5:2e:13:63:3c:b3:
31:19:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:42:16 2025 by rpki-client