Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: fIbYGggIlg3yaddrJvaN3/R1yMba8KbY6m41sKo5hhI=
Subject key identifier: 8A:22:20:8B:23:54:A7:94:EE:88:56:11:A2:E8:E5:AD:D9:5E:FC:0C
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 01967D8EA9180080107C9CBA263527840361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 1393
Signing time: Mon 28 Apr 2025 18:00:23 +0000
Manifest this update: Mon 28 Apr 2025 18:00:23 +0000
Manifest next update: Tue 29 Apr 2025 18:00:23 +0000
Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: f24vJ6vjdENgyTnHWsS6ryOO7dtWWeRqSSTNUgUp4w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:a9:18:00:80:10:7c:9c:ba:26:35:27:84:03:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Apr 28 18:00:23 2025 GMT
Not After : Apr 29 18:00:23 2025 GMT
Subject: CN=8a22208b2354a794ee885611a2e8e5add95efc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:d8:33:b8:44:42:7c:e4:4b:b1:70:10:89:
9f:dd:ec:40:a6:2a:a0:16:af:bc:3b:cd:a1:c0:29:
08:fa:c1:ec:26:9f:78:d8:17:2d:53:ad:a6:2c:59:
d0:8b:ec:9b:3c:17:60:e8:e9:e3:b6:b3:0c:d2:98:
d4:50:cd:75:bc:75:f9:83:36:a2:c7:85:3a:ee:a5:
16:e9:5d:ae:35:75:1e:fa:5a:0f:05:73:82:fb:b2:
81:24:d3:be:6c:b9:8f:c9:01:87:90:91:06:4a:05:
f3:3e:6a:40:f8:95:51:bb:21:f3:33:f1:d8:a7:89:
25:e6:af:5a:ab:98:f0:b4:30:0e:d5:de:d9:34:7d:
1e:f9:92:16:a4:09:b8:c8:cd:46:9e:a4:51:c9:ab:
a1:c0:5f:8d:6e:17:85:7e:11:ae:40:8f:b4:25:ad:
50:10:ba:5f:3b:cb:df:68:ea:54:1a:c5:fe:99:d2:
ab:d2:4c:66:6a:4e:a8:59:ea:b1:9c:ef:25:39:3e:
09:6f:eb:8e:36:cb:ce:f5:a1:d1:9b:3d:3d:0b:77:
3a:62:73:26:81:8a:8d:a6:36:40:1d:e0:7e:93:1b:
4b:13:4a:51:a9:b4:d4:a6:67:ed:b0:f6:7a:32:c4:
02:da:7a:07:9d:96:c0:8e:ff:d8:0a:70:b0:53:3e:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:22:20:8B:23:54:A7:94:EE:88:56:11:A2:E8:E5:AD:D9:5E:FC:0C
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bd:c2:a6:32:84:1b:bc:df:fb:f2:c5:e9:c2:e2:e5:79:da:
0f:84:94:b8:9b:81:2e:7f:41:35:19:22:07:ac:dc:fe:d2:7c:
93:bb:ba:00:51:30:5c:32:d2:06:b3:02:5f:9c:37:da:d9:1e:
54:81:f8:57:44:95:5e:fb:47:44:f9:35:df:93:c7:94:f0:94:
37:44:17:55:6d:96:e7:4e:2e:0d:d6:d9:e4:fe:c1:e0:b1:1c:
b9:80:d6:34:c5:9d:7d:96:db:b3:7a:1e:4b:ad:b5:e6:c1:89:
1d:ef:40:b1:a6:cc:cb:08:7d:81:95:6b:5b:a1:8e:a6:23:8c:
fd:ea:ef:b0:a3:2f:cd:30:9e:a4:b9:ff:ee:07:00:e5:51:8b:
20:95:f5:56:8e:72:70:c3:b8:fa:d0:e0:3c:f6:c2:12:72:24:
22:f1:4f:af:85:88:b9:06:e5:9a:9c:ae:28:18:74:77:e0:e4:
26:48:b6:3b:15:aa:89:54:db:8d:81:53:19:b8:3f:0b:6a:ba:
15:25:2b:c7:7e:1f:76:ac:64:3f:d2:13:a7:e2:2f:50:ce:f5:
a0:b2:61:29:7e:1d:58:56:da:7a:bf:64:8c:3b:b6:f4:0d:c3:
e6:4b:b5:d0:75:2b:72:f8:d5:33:83:05:95:42:09:da:7d:f0:
6f:e8:98:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:27:57 2025 by rpki-client