Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: 8njZWnLB1fjlfjDsoBQo9hyf8CVuhY0qUKJFujUpmEQ=
Subject key identifier: FE:BC:9F:75:0D:80:0F:E9:9C:69:35:23:CC:07:FE:45:79:F5:D2:08
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 0196756762B2AFD9F459415B992DA81EAA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 0F0C
Signing time: Sun 27 Apr 2025 04:00:31 +0000
Manifest this update: Sun 27 Apr 2025 04:00:31 +0000
Manifest next update: Mon 28 Apr 2025 04:00:31 +0000
Files and hashes: 1: 8Wti1PH3KuI5W3Ps9JfxSql0m7Q.roa (hash: CpKe22p+vfF1GPX/Ydl6oGQUK80PsEj4zMJRNQ1KdVw=)
2: ON3iIV_oOMJOwBGtDykVdsbeibU.roa (hash: 9WvGCqlVAIcwLRzryj0uvMHkAzQLE90GQaNR429D0NE=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: mRuJK9YRkgj7BiyaczRYrLD5NzwgOoWMvoYz0wKrA3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:62:b2:af:d9:f4:59:41:5b:99:2d:a8:1e:aa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Apr 27 04:00:31 2025 GMT
Not After : Apr 28 04:00:31 2025 GMT
Subject: CN=febc9f750d800fe99c693523cc07fe4579f5d208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:ad:1c:f3:ab:d2:26:de:86:20:0b:79:44:
60:db:ed:72:4d:ea:ac:60:15:f7:de:01:b1:5e:72:
b0:6c:0c:40:f0:cc:13:42:65:eb:92:3f:a2:64:8e:
44:58:5c:69:1e:86:e2:fe:24:9a:0b:8c:69:20:02:
aa:72:53:0c:52:f3:2e:85:02:fb:da:a3:9c:14:40:
3d:45:77:32:a4:27:6c:3a:7b:fe:1a:9a:8c:d2:17:
4f:ab:a6:ea:0e:c5:df:54:f6:46:56:37:3a:3f:4b:
bf:81:3c:af:94:38:bc:a8:04:50:ca:22:7a:2b:67:
4c:af:dd:9a:f2:a1:85:5c:31:d1:16:7b:aa:ae:5c:
fe:9b:2c:5c:59:ef:c7:09:67:11:93:ea:f4:e7:9a:
fa:58:5e:61:88:43:98:d9:a6:6a:7f:d1:ea:da:50:
b7:b8:5d:fa:eb:bd:fa:21:d9:77:97:e1:32:66:dc:
ce:5b:1b:6a:ab:f0:47:f4:81:68:30:5b:e0:8d:fd:
bb:13:cb:84:d2:2d:24:4a:b8:8a:04:12:20:64:71:
cb:59:a6:c2:1c:4e:e0:37:60:b3:00:5f:9b:92:a7:
6e:9e:28:e3:a4:dc:ad:d4:d3:9f:51:ce:e0:ee:fd:
ab:b1:11:95:ae:2d:88:b4:2f:07:8d:33:2b:84:6f:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BC:9F:75:0D:80:0F:E9:9C:69:35:23:CC:07:FE:45:79:F5:D2:08
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:43:fb:95:cd:c0:6d:cd:8a:09:ab:5d:25:59:2a:0c:7e:75:
b3:06:c8:a2:1d:b5:8c:55:66:0b:1d:f3:78:be:39:54:18:77:
3c:d9:7f:42:e1:cb:0b:e0:a0:73:d7:55:1b:02:b7:1f:cd:75:
81:e6:dd:32:82:44:66:dd:4c:bb:28:4a:d4:c6:b6:97:2c:62:
d5:b2:62:8a:61:fa:1e:50:c4:3f:44:b2:b5:b2:25:d8:d6:3c:
aa:2c:c5:a0:4b:06:f9:bb:fa:1c:81:9b:e0:82:e5:f9:2e:3b:
f9:d2:e6:ab:c6:dc:a2:24:aa:d1:77:c8:4f:bf:72:33:57:55:
46:a1:f4:84:e5:cb:7d:e2:5b:d6:7d:61:48:b5:d4:20:88:bd:
05:de:e9:48:cc:1e:f5:b3:00:6e:3d:3b:3e:7e:6c:04:55:b9:
f1:78:57:fc:87:84:52:00:6b:60:a5:ce:ce:38:d6:4f:38:f5:
27:da:bb:f9:1a:8b:6c:40:f5:72:79:37:09:a6:18:4f:65:1c:
d1:2d:8f:22:1e:f6:d1:00:b4:85:c0:c4:e4:f9:b0:7b:4b:25:
17:26:cd:b8:c1:5a:c1:9a:8e:b6:8b:da:2f:22:c1:ca:3d:4a:
8f:d0:c3:7c:37:c3:95:7e:df:ee:2a:35:5b:e2:33:c6:a0:8a:
e3:3f:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:01 2025 by rpki-client