Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
File: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft (raw, json)
Hash identifier: KslATB1TW3hRZY+lI0nFzreF0sdDFh6nzdqLA0I+aVk=
Subject key identifier: 65:7B:D6:36:3F:33:6C:F0:8E:8D:D5:41:8A:C2:41:D0:88:20:68:66
Authority key identifier: 7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
Certificate issuer: /CN=7dad62180863d722aaa4f0881e44378e3c808372
Certificate serial: 01965500D492E1F7E882AA23E4C5126CE988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
Manifest number: 0E
Signing time: Sun 20 Apr 2025 21:00:39 +0000
Manifest this update: Sun 20 Apr 2025 21:00:39 +0000
Manifest next update: Mon 21 Apr 2025 21:00:39 +0000
Files and hashes: 1: C7GNqkgz9p0zOIQbq1hmHpb1k10.roa (hash: Ih5IZ06o7j/AaerWpaiGsplGlhC586fD+XGd+HNQexM=)
2: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl (hash: AFRuM/4xj9tJsExMCmUvnbRAPHAlixPqu3vlUntyYs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:d4:92:e1:f7:e8:82:aa:23:e4:c5:12:6c:e9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dad62180863d722aaa4f0881e44378e3c808372
Validity
Not Before: Apr 20 21:00:39 2025 GMT
Not After : Apr 21 21:00:39 2025 GMT
Subject: CN=657bd6363f336cf08e8dd5418ac241d088206866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:26:bc:52:b5:fb:dc:37:8d:ae:67:c9:8d:
e9:bf:90:4e:8a:ef:ef:68:c4:f4:db:2d:7f:e7:dc:
7c:79:01:72:e9:2b:d8:de:19:84:df:2a:8a:40:be:
80:0b:b6:82:cc:2e:da:71:9d:b3:df:b2:0f:4c:4e:
bf:21:88:b4:40:f7:be:d5:d2:cd:b5:5f:5a:21:00:
24:e2:13:fb:f5:cb:06:a6:e3:00:d9:b8:a8:a9:2d:
cc:f2:c5:3b:ac:f3:c0:83:4f:89:c3:b8:57:e9:b2:
ea:5f:87:ba:33:9e:0f:43:57:f7:2c:c2:61:4e:7c:
a7:f9:90:8a:b1:06:9c:7c:9c:d4:ba:4b:8f:3e:98:
b9:62:6b:0c:e3:a9:96:f2:8d:f6:52:88:7d:4c:72:
e4:68:f8:a4:3b:e5:e2:01:b1:ec:5f:71:a0:9e:a9:
ac:37:29:47:ff:ac:2b:b9:d5:cf:ae:7d:7e:9b:ae:
ed:af:33:69:68:5b:9d:09:b8:1b:f1:a9:be:8e:6e:
c4:8b:77:99:99:1a:ff:16:8a:e4:34:8b:9f:43:79:
f4:74:eb:9b:96:18:a2:60:41:23:02:f7:b1:92:71:
03:b2:8f:00:80:04:8c:86:a9:63:b9:d5:47:5a:35:
1b:dd:0c:c4:a9:b7:b9:ea:6f:65:7d:74:eb:48:14:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7B:D6:36:3F:33:6C:F0:8E:8D:D5:41:8A:C2:41:D0:88:20:68:66
X509v3 Authority Key Identifier:
keyid:7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3c:a3:d0:0f:97:4a:fe:f7:ce:b1:b8:92:d1:40:e2:e2:86:
12:84:f5:fd:7f:fa:ba:d3:3c:36:ea:24:cd:e4:b8:2d:5e:6c:
cf:d1:2a:54:6f:66:36:ee:74:a1:97:8a:a4:47:f8:30:5f:77:
c2:b0:6b:22:fa:ca:35:b6:7b:23:9e:d9:eb:36:29:c8:15:88:
18:8d:d8:6a:e5:cd:5f:95:74:50:fd:7d:5e:86:b9:1b:b9:c7:
90:84:3f:05:6a:78:5c:b9:3c:ac:70:cb:50:33:bc:ba:e6:2d:
b7:61:e4:c6:04:75:14:e5:57:32:7b:a7:ab:0e:68:20:98:2e:
48:84:19:cf:06:3a:82:cc:8f:32:5a:74:ab:dc:81:0a:52:fc:
0b:b0:f0:91:7a:05:21:35:d5:b2:98:dc:59:80:23:22:c5:fc:
cd:8a:ce:04:42:fa:e0:a4:d6:0a:75:f9:6c:a7:e6:ff:ca:ad:
f2:90:32:5e:be:a8:b9:9f:38:4b:90:52:75:1e:b9:ff:d1:0b:
8d:76:38:22:ef:fa:dc:76:a0:91:80:86:f7:01:bc:22:11:77:
47:36:13:d2:4e:23:05:b9:7c:3a:70:c8:44:8a:d5:f9:3e:cb:
54:35:27:d6:ab:6e:a0:3c:c4:21:16:4f:b9:80:40:21:24:f2:
3a:98:09:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:16 2025 by rpki-client