Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: BtoZ8n3ZasIg/ruExSUq8aE+rjF8J7ceVOo2OONB6ng=
Subject key identifier: 96:A3:08:9E:44:E7:59:A9:93:B2:38:54:C9:CC:BE:69:D7:D7:E3:B5
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 01967C7BD2A809AA1C2F2A9F159601FE841A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 13:00:11 +0000
Manifest this update: Mon 28 Apr 2025 13:00:11 +0000
Manifest next update: Tue 29 Apr 2025 13:00:11 +0000
Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: cSjiMQewd2yq8XupYR9ZajkO2xdDAnM2yTgT+0XUA5U=)
2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7b:d2:a8:09:aa:1c:2f:2a:9f:15:96:01:fe:84:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Apr 28 13:00:11 2025 GMT
Not After : Apr 29 13:00:11 2025 GMT
Subject: CN=96a3089e44e759a993b23854c9ccbe69d7d7e3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:ba:c7:05:c7:91:b1:74:08:72:48:23:05:
1c:db:21:f8:86:32:9b:91:ae:60:5a:21:11:2a:db:
be:14:1f:d9:29:16:42:32:f0:aa:82:13:79:fd:f7:
b4:f0:fc:ec:52:49:24:de:5e:3c:04:b2:59:4a:92:
63:93:90:a0:f9:3e:4f:22:8a:b5:31:56:56:4c:09:
9a:b1:ab:9b:ce:70:9e:9a:e9:f0:7c:e5:d1:c9:75:
59:9e:73:93:f6:0d:53:f5:a0:14:5f:09:83:1e:c2:
bd:7e:76:a0:81:95:03:63:80:fc:38:a4:e8:98:6d:
0e:77:00:55:96:62:a8:39:7a:d4:fd:5d:6e:e4:a1:
77:fc:b3:fd:aa:0e:4c:03:33:d4:94:7d:dc:7b:80:
2b:01:d6:45:e6:c3:08:b1:ad:9d:cd:f2:5d:e6:8b:
28:f0:cc:47:4a:72:fa:4f:7d:0d:80:1c:b1:61:71:
7f:1a:5d:f3:e9:b1:c2:51:40:92:a8:a9:ee:db:d2:
bc:fa:de:03:1a:64:5f:b7:c2:b2:91:23:7b:d6:fe:
4b:42:00:0c:f9:0f:c0:cf:a3:f7:b2:e4:30:60:93:
55:02:5c:0d:88:6f:d2:da:33:fe:5f:5a:11:c8:5d:
01:f7:e9:c0:77:63:35:9f:9e:87:6b:fe:62:ff:2a:
ae:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A3:08:9E:44:E7:59:A9:93:B2:38:54:C9:CC:BE:69:D7:D7:E3:B5
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3f:c4:a6:a9:61:60:34:e8:2f:18:07:71:34:26:ed:e9:f7:
71:e0:e1:40:7f:30:b7:4a:5c:d1:e8:c9:9f:ce:9e:8d:24:54:
84:f2:57:37:71:d2:8a:4f:c8:4b:e6:f9:fd:87:24:ac:36:4e:
a8:21:a0:65:bd:07:88:0b:8c:42:e0:65:7f:ac:01:ae:d0:de:
15:14:0b:d6:42:cc:f7:da:3d:0c:45:29:8e:4d:0e:3a:5f:3e:
03:53:1e:f7:93:ee:6b:2e:20:49:f9:90:bb:f7:71:9c:ae:7c:
76:0a:18:10:23:cd:a4:62:66:fd:45:53:03:fd:1a:ab:da:63:
63:91:04:38:bc:26:98:82:f9:07:21:a9:8b:6e:57:1b:ab:f5:
70:c5:5e:82:81:7f:7c:43:f1:25:83:c3:16:cb:8a:95:ea:1c:
4a:d3:62:dd:7f:7d:ff:62:d3:b0:e5:97:04:96:a7:b3:62:4e:
85:cc:ed:d2:19:1c:d6:aa:93:da:f5:2d:ef:a8:c3:8d:e4:1c:
e1:ca:7e:0a:79:9e:b9:68:ff:db:5f:97:69:51:97:93:eb:80:
dd:04:9f:ad:b1:ba:28:ce:c9:d9:59:5d:05:57:61:72:a9:8d:
ef:36:c5:c1:e9:7a:03:d4:99:b3:b7:c8:70:a6:6b:a9:9d:b2:
32:9a:aa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:31:45 2025 by rpki-client