Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
File: fySblURiBoP5SziKdVGmimST7RI.mft (raw, json)
Hash identifier: X1aSArJFETmLCoAz5tR3wqSsymHCMO8T7Ri9DcOOsNw=
Subject key identifier: D1:3D:26:9B:93:83:BD:E3:16:75:E9:0A:78:58:3F:E1:E8:06:27:C9
Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
Certificate issuer: /CN=7f249b9544620683f94b388a7551a68a6493ed12
Certificate serial: 01965492EC2905DF6A5C0A6D8290334CD96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
Manifest number: 012D
Signing time: Sun 20 Apr 2025 19:00:36 +0000
Manifest this update: Sun 20 Apr 2025 19:00:36 +0000
Manifest next update: Mon 21 Apr 2025 19:00:36 +0000
Files and hashes: 1: fySblURiBoP5SziKdVGmimST7RI.crl (hash: BS8cDCmGMBfgCA25GNlk+Wf4VRpTAcVLWdEPRebojtQ=)
2: h7ETLfyQmL_b22CUnmqfJbv8XcU.roa (hash: GvscP45iqYd2rs4fdmtdGUU7bJ6EyKUaKDdAzQiywgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:ec:29:05:df:6a:5c:0a:6d:82:90:33:4c:d9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12
Validity
Not Before: Apr 20 19:00:36 2025 GMT
Not After : Apr 21 19:00:36 2025 GMT
Subject: CN=d13d269b9383bde31675e90a78583fe1e80627c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:91:fa:0a:a7:2e:8c:9c:e7:48:de:45:c2:
4b:60:3a:d0:35:19:22:7d:a7:ea:5c:d5:d4:fe:fd:
13:ad:6c:53:e2:0e:3a:de:e6:be:59:e7:d1:91:7d:
61:9c:48:8a:db:37:cb:43:e9:6c:45:50:75:58:d5:
fd:ca:0c:dc:b2:2c:b2:3f:9d:ed:3c:66:8d:b8:35:
82:fb:79:2b:66:74:96:d5:b2:dc:12:b0:24:ad:ac:
62:15:0e:dd:68:76:43:70:bc:ad:eb:71:5e:21:07:
96:72:1f:2f:13:44:6b:df:ff:45:fa:19:fa:53:b8:
0a:b6:f1:55:5b:1a:aa:81:b4:d2:c5:e8:25:68:98:
d4:a7:75:93:63:e1:92:e7:cc:f3:73:85:d2:58:41:
69:13:b0:35:d3:30:23:d0:38:b8:ca:99:53:78:e3:
41:d5:d2:ef:04:2c:af:3f:b0:31:26:b8:26:54:a9:
bd:e1:92:9d:ae:18:62:4c:77:b4:5c:9d:7a:84:2d:
b7:00:ed:52:8c:66:7c:89:04:cc:ba:57:66:c0:c1:
d0:09:20:1b:ac:27:ee:c4:8c:59:d6:c0:75:25:d5:
6f:a7:21:b6:ad:3b:c1:28:db:f5:3e:b3:e5:da:56:
d8:34:56:cd:99:5e:91:e4:8f:2d:69:06:37:77:90:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3D:26:9B:93:83:BD:E3:16:75:E9:0A:78:58:3F:E1:E8:06:27:C9
X509v3 Authority Key Identifier:
keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:79:16:28:92:e0:46:09:40:ad:1d:2c:f6:1e:3d:5a:f9:3e:
f7:a3:9b:52:38:f7:81:f9:33:23:69:8d:20:c1:48:42:37:70:
89:ef:24:29:c7:e0:05:ba:37:d0:b2:11:a2:33:26:9e:e2:50:
0a:56:57:db:4b:37:63:56:7e:d6:5d:a2:e2:30:bd:1c:47:01:
20:4d:01:44:36:50:30:56:8d:6a:35:68:99:4f:86:b8:b4:73:
54:e2:fd:8c:fc:97:5c:db:9b:7c:9d:5f:c5:2d:5e:bc:ab:59:
ba:04:d6:b4:37:97:3f:7f:73:c9:c9:27:cb:4a:76:51:bf:be:
60:85:22:ad:db:92:10:a4:25:db:2b:47:60:73:57:15:3d:f8:
bc:0f:64:e5:fa:46:d9:13:6f:6a:1a:1a:de:13:46:b8:86:e6:
e0:fb:18:b1:24:32:6e:cd:61:9f:64:2c:6d:58:d5:de:72:5a:
3a:a0:86:41:61:4e:6b:61:74:a3:7e:96:97:85:ba:8d:95:a2:
8d:a5:65:b8:cd:30:0d:c3:ee:38:25:78:b1:9f:94:b6:1d:ee:
38:58:1b:8e:af:d4:4b:04:bc:23:18:6e:ea:60:7c:f0:72:4a:
34:7a:1e:b7:c8:4b:ce:2f:61:97:4b:91:d3:ec:9b:98:70:11:
e3:17:da:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:29:39 2025 by rpki-client