Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File: fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier: pIA87HKfOmKV7WcoSjhfee4C+Z5fE9audK/WkyNLQUE=
Subject key identifier: 35:2B:92:24:97:B9:D7:24:88:F4:19:C3:8E:28:90:67:2B:4A:85:1E
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 01965613856B555B17C1A1E813A9C78699DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number: 1400
Signing time: Mon 21 Apr 2025 02:00:41 +0000
Manifest this update: Mon 21 Apr 2025 02:00:41 +0000
Manifest next update: Tue 22 Apr 2025 02:00:41 +0000
Files and hashes: 1: EIKOgQFi5mojMPucev_-8ewm_-E.roa (hash: a2bhdKBZ8yPIzwYvUQAAVhbdMilJSR3ugkNV2LMmk80=)
2: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: 0azu171Q1BfnKYfLBqoJwdz4SaG/YxGtWP7M2acOVoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:85:6b:55:5b:17:c1:a1:e8:13:a9:c7:86:99:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Apr 21 02:00:41 2025 GMT
Not After : Apr 22 02:00:41 2025 GMT
Subject: CN=352b922497b9d72488f419c38e2890672b4a851e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:53:0e:c1:1f:17:17:1f:24:c1:16:f4:c4:
79:e5:b9:20:fc:06:e3:b1:50:fb:17:02:70:fe:8d:
92:9c:ab:f8:d5:47:78:cc:46:e6:38:0a:e9:67:02:
71:02:4f:c8:f7:fd:f3:06:04:36:45:46:da:2a:17:
8a:9f:5b:ee:b4:44:13:77:41:48:12:4c:71:27:7e:
37:58:7d:21:dd:7b:5e:cf:7f:58:de:4e:03:08:d3:
d1:b8:82:27:5d:6e:71:b1:15:64:58:69:d8:59:89:
0e:c0:34:5b:5f:7a:0e:70:e5:f2:63:cb:d1:4b:87:
3d:7f:f7:73:e9:dd:c4:d6:1b:db:c0:31:8c:6e:8f:
93:d0:e7:7d:94:fa:60:c1:7f:6d:7c:be:bb:0f:b1:
3c:5b:87:29:d7:31:3f:16:e0:77:fe:13:48:09:fd:
ab:b9:3a:07:ab:93:85:86:60:90:6f:01:b0:56:af:
30:a3:8e:3c:a6:a0:9e:38:62:ac:a2:b5:bc:25:bc:
cf:47:9b:fb:66:6d:78:23:dc:71:15:56:39:d0:1c:
bf:2d:a1:b5:78:af:b3:94:10:5d:59:2f:b7:e6:c1:
3b:b9:41:c5:d9:c2:07:66:52:d4:fc:9a:99:84:15:
f5:8e:32:43:59:c4:2c:de:90:7e:43:a2:30:18:2e:
c5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2B:92:24:97:B9:D7:24:88:F4:19:C3:8E:28:90:67:2B:4A:85:1E
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ae:4b:82:66:52:f0:18:df:cc:ca:04:9d:f9:ac:0e:71:f0:
31:6b:8f:91:49:31:59:07:b1:25:78:13:72:d9:21:c1:e7:c0:
6a:18:6d:09:9a:9d:41:c4:b4:0e:c6:41:2c:9c:c7:7b:bf:08:
4c:69:6e:63:ee:11:01:b3:f2:ef:53:1b:a5:ed:3d:32:c5:de:
2c:fb:c4:f7:38:c4:d9:7f:08:c2:71:92:53:df:64:08:88:e2:
61:78:7f:ea:2e:1d:2c:02:37:00:92:f8:fd:06:9b:f0:3e:c0:
19:f0:51:63:df:8b:78:5b:ce:c8:31:ad:ff:22:76:b8:cc:52:
10:60:d6:a8:ab:47:d9:7a:d2:51:00:5b:07:8d:42:50:30:b9:
28:11:4b:9a:c8:2f:1f:a1:71:cc:04:5a:c4:ec:40:38:c7:da:
34:f3:0b:7c:a6:0c:cc:51:32:60:ed:09:92:80:cd:70:64:2d:
3b:43:eb:37:53:21:ef:8a:30:ff:1c:e9:ba:a9:dd:e9:91:60:
4c:93:3f:51:d7:a2:0f:a9:4c:89:77:92:04:82:03:a6:56:a2:
8f:b3:e4:c7:ee:44:ae:1f:17:d0:0d:1a:6c:ec:43:49:32:af:
03:76:f3:ab:9c:50:ba:78:fb:94:71:db:d7:3f:65:86:8b:f4:
2f:57:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:09:16 2025 by rpki-client