Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
File: f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft (raw, json)
Hash identifier: wrb9GRDnqBtRL9d7WXNbvdf+rzjVPKB8mybrvHBHkO0=
Subject key identifier: 20:CC:1B:73:D1:9C:26:36:19:A4:CC:01:D4:C6:01:7C:27:56:28:86
Authority key identifier: 7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E
Certificate issuer: /CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e
Certificate serial: 01964A7CD79B18AABC11B6EC5716DBFD2D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
Manifest number: 0DF9
Signing time: Fri 18 Apr 2025 20:00:17 +0000
Manifest this update: Fri 18 Apr 2025 20:00:17 +0000
Manifest next update: Sat 19 Apr 2025 20:00:17 +0000
Files and hashes: 1: f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl (hash: 0v5xLS1Rf/Y3Od4Ky1EX8VPLap/v6YETpU3ThBYSQWM=)
2: uqH7vaJE3PXnQyRjphQi0vNIcTA.roa (hash: 43GuWr72hhzBtb+xvMSJfj29iARrwWk3XD88vNRHObQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:d7:9b:18:aa:bc:11:b6:ec:57:16:db:fd:2d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e
Validity
Not Before: Apr 18 20:00:17 2025 GMT
Not After : Apr 19 20:00:17 2025 GMT
Subject: CN=20cc1b73d19c263619a4cc01d4c6017c27562886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:6d:b2:b8:bf:6c:89:f1:f0:d4:b9:6f:e6:
cb:40:3c:e1:89:1e:fa:a9:9f:ed:58:db:2e:b1:fe:
6a:cf:ad:3a:17:84:7c:06:90:79:ca:ea:a6:49:a8:
eb:b3:37:9d:d9:f2:a3:45:14:cc:cb:9d:18:59:06:
35:82:97:30:09:78:d8:ff:27:67:f7:da:5b:5a:cb:
78:04:42:aa:e9:2d:99:69:d5:86:2d:ff:4b:e2:40:
c9:c9:d2:36:24:b9:0a:6b:bc:8a:3c:e9:0f:8f:ff:
82:9b:da:c9:16:0e:3f:20:8b:24:d7:f9:34:d3:67:
83:ab:db:83:80:f2:47:23:bb:53:c6:e8:fa:0c:94:
b2:01:a1:6f:d3:05:25:a0:da:71:ea:3a:ef:01:77:
cd:5c:a3:15:51:bf:ce:27:fd:ce:6d:b2:78:e3:e3:
56:ec:c9:14:4a:b2:6b:a0:6a:81:d5:fe:00:9f:9d:
a3:c2:2d:35:81:b5:18:58:19:f1:16:75:30:cf:9e:
e3:c6:67:f1:67:d5:5b:85:0b:a4:53:2b:0a:79:2d:
9b:fc:18:dc:ff:a3:eb:59:2e:c3:01:1d:bd:d3:c3:
e6:dd:fa:8f:c4:40:49:b3:48:f8:15:c6:1c:2c:c9:
0c:4f:2a:88:db:cf:a0:18:05:7d:d7:a6:33:6c:9c:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CC:1B:73:D1:9C:26:36:19:A4:CC:01:D4:C6:01:7C:27:56:28:86
X509v3 Authority Key Identifier:
keyid:7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a9:54:44:56:18:1f:87:b6:08:7e:dd:88:a3:5b:b4:34:33:
d3:6d:e3:df:b7:f4:6e:4b:2d:c5:ea:38:43:e9:b9:48:80:ec:
77:45:29:56:b1:5d:c7:0d:ef:a9:90:d8:23:69:e8:ab:de:85:
9e:fe:32:41:19:f0:08:81:1b:35:b6:83:47:55:68:2b:52:37:
f2:17:0e:17:13:80:6f:98:1b:02:d5:3a:7e:8f:ef:39:1a:a2:
c2:b2:a8:21:18:52:c9:fb:6f:b6:eb:90:f7:54:01:11:75:67:
cc:3b:44:eb:86:bf:0f:ec:3f:63:8b:c8:bd:ee:3a:fb:db:03:
70:1e:87:92:ed:70:39:10:83:d8:03:06:4d:4a:db:58:93:f0:
f1:69:86:11:d3:73:6a:1b:da:e0:3c:26:07:a6:f4:5c:f7:5a:
26:03:87:a4:f1:bb:85:f0:68:94:08:ce:ab:68:55:e2:82:9a:
16:a3:2b:5a:49:ec:17:86:76:78:c7:28:65:3f:39:72:47:f9:
75:5d:21:42:dd:c9:25:86:d0:dc:d2:98:a6:c9:de:2e:d9:f0:
b4:13:a3:8b:05:0d:e4:f5:7a:5e:d6:78:0e:32:38:6d:12:0f:
cc:48:72:59:d4:90:4a:c2:b5:c2:3e:8b:93:fc:34:a5:17:13:
33:aa:b0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:22:07 2025 by rpki-client