Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: yBkGXDKlm5dInDUUxEvZmR2BZkewQmdMB7UWqcICoAA=
Subject key identifier: 62:92:F9:14:BF:92:46:1A:FA:72:A0:A9:02:2D:B7:8E:EA:D9:D3:0D
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 01965B70DB4F55233795A8234800292670CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 0F63
Signing time: Tue 22 Apr 2025 03:00:44 +0000
Manifest this update: Tue 22 Apr 2025 03:00:44 +0000
Manifest next update: Wed 23 Apr 2025 03:00:44 +0000
Files and hashes: 1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: 2K8ge7isgtqaFDDoKDrvqKKCC0w9Wmjy/fI/pCmUXJY=)
2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:db:4f:55:23:37:95:a8:23:48:00:29:26:70:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Apr 22 03:00:44 2025 GMT
Not After : Apr 23 03:00:44 2025 GMT
Subject: CN=6292f914bf92461afa72a0a9022db78eead9d30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d0:88:d9:00:63:63:3d:ef:a5:6f:3f:e7:41:
51:ae:1c:c7:1a:50:db:c8:f2:23:73:c3:b9:d2:f1:
07:ec:2b:8e:42:62:64:d1:f3:47:3b:e5:74:1e:aa:
4f:15:1a:5b:1a:db:9d:ca:b3:a4:50:2a:84:d1:3a:
89:08:ea:fa:17:ef:e3:dc:5b:64:d1:51:bb:c8:dd:
29:c2:01:3d:99:f5:35:ba:4b:10:dc:14:8e:2b:14:
a0:1c:a1:58:f7:1d:a0:08:2e:65:1c:0a:ff:de:bd:
a5:57:5b:0e:79:b2:0f:8f:6e:c5:6e:60:77:72:08:
5c:25:cc:ac:3b:34:3c:52:96:cf:16:ec:9b:f4:9d:
72:dd:ed:94:41:13:4d:de:05:8b:07:bf:01:e3:55:
e0:d8:1e:8b:9b:30:22:57:16:a1:4e:75:75:7e:80:
1d:8e:0d:0a:ec:89:3c:9b:86:f4:d3:3c:23:aa:9d:
b8:13:6d:35:fc:ee:d0:13:17:ff:d1:42:c1:67:47:
31:64:9c:ff:9e:98:89:76:cd:88:57:83:a1:e7:61:
6e:5c:05:db:a6:42:28:de:03:84:11:17:1f:0d:3c:
aa:98:b1:2d:71:bd:45:3a:34:34:b1:5e:ca:be:8d:
9a:39:eb:42:1c:61:5b:0d:c6:02:a0:41:6e:28:80:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:92:F9:14:BF:92:46:1A:FA:72:A0:A9:02:2D:B7:8E:EA:D9:D3:0D
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:10:71:ae:7d:05:1b:ae:05:21:5c:f0:d7:c3:6e:1f:f0:b4:
60:b9:4a:03:e5:3c:85:73:39:f2:a6:4c:c0:e1:cc:65:5a:a0:
cc:30:e8:8f:96:44:b7:29:ca:f2:1c:20:14:fa:fc:ca:97:9f:
6e:11:57:45:d5:6f:60:4e:39:0f:40:77:d8:84:8b:60:eb:2c:
65:30:57:f0:86:8f:2e:bc:4c:e8:72:7f:4f:32:e6:a2:77:1c:
43:92:90:49:eb:0d:63:c9:00:52:5b:73:fe:3f:7c:88:e3:ec:
75:54:bc:e4:b8:9c:4d:a0:38:aa:37:f9:3b:53:0c:ac:03:2d:
f4:f9:f0:fe:95:df:61:24:43:74:ce:c8:d9:ff:9f:41:ea:c5:
01:7d:de:0b:15:05:16:d6:d2:99:72:93:b2:2a:40:f9:e8:35:
0c:34:f5:b9:d3:d2:2b:96:72:6e:39:8f:a3:ad:27:92:0f:e5:
ef:6b:85:5a:8e:44:9b:d1:fe:6b:41:70:96:9f:98:d8:be:1c:
a7:8c:de:f8:98:82:88:9d:32:50:18:07:8b:4c:02:66:3f:13:
27:3c:f9:8e:fa:99:99:a8:d8:83:f4:3f:7b:d2:22:8b:fd:8a:
cb:d7:c0:9c:7d:26:19:0c:f1:49:ef:38:dd:77:10:88:ef:42:
fa:ca:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:20:12 2025 by rpki-client