Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: H4iuX5PxJIZYuMUDfdOVGZhZMxbk7mIT7FL8fKT/SRk=
Subject key identifier: 69:62:20:2A:99:07:29:05:CB:26:60:3B:4B:C6:DD:63:03:87:E2:41
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 01964B8F767B79DB0908058C946FB37D65ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 01:00:15 +0000
Manifest this update: Sat 19 Apr 2025 01:00:15 +0000
Manifest next update: Sun 20 Apr 2025 01:00:15 +0000
Files and hashes: 1: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: 8DD5xn4wP2KCI/9p95AlznbXTuiMaBCyMcjlmaQeOJs=)
2: tIBVHEbpT3B92jmv17nHEdfPfME.roa (hash: F4q9q1phtloOjlG43lA2x7BlugORaBByvlUxXUgAa14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:76:7b:79:db:09:08:05:8c:94:6f:b3:7d:65:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Apr 19 01:00:15 2025 GMT
Not After : Apr 20 01:00:15 2025 GMT
Subject: CN=6962202a99072905cb26603b4bc6dd630387e241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:bd:93:75:e1:5b:7f:c0:96:f3:a7:7c:28:
80:e9:49:de:a9:a4:4d:ee:81:84:0b:70:16:94:bc:
15:b0:81:37:1f:d9:4d:2b:32:dd:a8:67:ed:59:a0:
18:4e:a4:1d:52:10:20:46:ed:89:49:a8:9c:1f:b4:
b5:cc:f2:ad:ac:0d:a4:16:37:58:5e:ac:b1:b0:ce:
10:9b:22:e2:b0:41:55:76:de:e5:10:b0:51:bc:14:
7d:64:1c:99:0a:34:7f:e1:a6:77:48:cc:1c:a0:cf:
47:d6:92:81:85:c4:f6:1b:dd:77:31:da:5e:0f:f6:
00:1a:77:b1:91:23:3d:3d:ad:3f:e2:ab:98:20:48:
61:b4:00:7a:e6:22:ec:4c:e0:58:e0:35:4e:60:cb:
2f:d6:a3:56:4d:32:85:ce:ec:f9:ee:f9:86:36:d1:
b3:40:6a:9a:86:0b:6f:33:d4:90:45:1f:c2:49:ac:
5e:eb:b8:7d:d6:1f:92:dc:ac:59:62:5b:a7:87:5c:
36:7a:9a:16:99:5c:b2:17:9f:84:1e:dc:b1:29:f0:
f3:64:36:e8:f6:3a:7a:ff:73:46:ff:e9:7f:cd:89:
ee:06:5a:eb:2e:09:9f:f1:6e:be:fb:db:af:67:80:
1b:2e:d5:bc:7e:fb:b3:19:9b:7a:09:21:00:96:4a:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:62:20:2A:99:07:29:05:CB:26:60:3B:4B:C6:DD:63:03:87:E2:41
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4f:62:89:d1:e8:84:a2:55:cc:cb:64:0d:d7:f5:f1:25:25:
11:09:04:f1:41:09:07:0b:77:5d:b0:1f:63:6b:11:02:87:76:
c9:ed:74:eb:fa:90:14:5a:9b:ea:99:35:bf:1d:2e:82:d7:87:
b7:52:29:8e:f6:a5:c1:82:4e:97:f6:26:24:ba:06:bb:1e:9d:
13:d3:d1:3e:d0:da:79:6f:eb:94:a7:ab:42:cf:95:67:b7:4a:
1d:c1:a6:dc:a9:c8:12:8b:8d:94:33:f3:9f:ff:02:10:f0:57:
82:e5:3f:20:01:4a:e9:47:4f:53:f1:28:a2:6b:59:f9:8d:0a:
a1:1a:5f:79:c1:f4:40:4d:90:b8:ed:d5:c4:16:24:5f:7b:f9:
8b:2f:76:98:77:f9:1b:59:80:0a:f9:ef:8b:6e:c8:9b:eb:54:
e4:09:29:93:8b:b4:b2:4e:0e:07:5b:a3:bc:2a:d3:58:d6:05:
7b:bc:29:55:10:5b:38:28:a1:0c:dd:3c:7b:f1:ba:86:f5:cb:
19:17:48:ef:c8:4c:12:15:c3:d6:dc:32:48:14:46:1f:c4:36:
49:5a:26:62:b2:7d:91:73:46:b2:bf:e9:ef:e2:1b:f5:66:f8:
85:2e:c9:33:f6:4a:6c:c2:d7:c9:fc:e8:ee:94:99:29:3c:25:
22:0b:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:37:59 2025 by rpki-client