Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
File: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json)
Hash identifier: 3fH6s0PfrmtHKQVxRlEX54FRo8B7NqbhRtVvGFPuWw4=
Subject key identifier: 83:F2:79:D4:F6:27:49:E3:9A:1D:8A:03:3C:6A:B3:76:4B:4C:D6:37
Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
Certificate issuer: /CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Certificate serial: 0196579415A30D4707D19E4CEB09C32AC639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
Manifest number: 0334
Signing time: Mon 21 Apr 2025 09:00:44 +0000
Manifest this update: Mon 21 Apr 2025 09:00:44 +0000
Manifest next update: Tue 22 Apr 2025 09:00:44 +0000
Files and hashes: 1: OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa (hash: cxXlIHKPRbElTrIxapfIyNaAYnC9ppfTzQIGpRQ/AhY=)
2: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: mrRRiHS4iZijYvIVqZvQKQUv/hYFA62JE8dRG5eA5lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:15:a3:0d:47:07:d1:9e:4c:eb:09:c3:2a:c6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Validity
Not Before: Apr 21 09:00:44 2025 GMT
Not After : Apr 22 09:00:44 2025 GMT
Subject: CN=83f279d4f62749e39a1d8a033c6ab3764b4cd637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:57:2e:fa:2b:22:30:69:ff:3a:c7:8e:d5:
a8:b3:98:c6:b4:cf:e0:51:ac:ed:2e:40:ba:86:53:
ec:45:d3:3b:1d:79:ab:66:1e:48:e6:b3:d5:b3:67:
3c:cc:d6:ac:d8:7c:c7:cc:0f:bb:2c:78:58:ca:32:
ee:d1:3c:fd:8b:61:67:cb:60:93:fb:01:5c:8e:4c:
af:43:af:ca:c3:2b:1c:e9:83:d5:90:9b:78:03:d4:
27:0f:aa:a6:59:d1:ed:b5:de:79:5c:1c:ae:a4:33:
61:5c:57:55:69:41:34:fc:ea:2d:9d:ae:16:23:a9:
1c:a9:25:bf:13:cb:46:00:12:75:b5:a8:04:86:b0:
6a:a9:82:41:c1:c8:16:16:7f:e9:90:0f:9e:04:ea:
81:ac:9e:ea:bb:c1:13:e3:29:3b:6e:4f:f0:6c:68:
0e:c4:ed:5c:c5:e4:d3:25:57:d3:0b:6d:bc:28:0f:
3f:94:97:b6:8e:05:e2:92:95:b0:62:78:0c:c1:e7:
70:42:bd:fe:b6:53:d7:4b:f8:48:61:78:3d:f0:63:
aa:c3:7f:d3:32:dd:19:b4:05:99:20:a2:d4:a2:78:
cc:56:f8:63:54:81:9c:8d:ab:ed:ac:95:ec:c1:f1:
2c:df:00:f9:57:b1:f0:b4:ec:11:9e:57:61:a0:ea:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F2:79:D4:F6:27:49:E3:9A:1D:8A:03:3C:6A:B3:76:4B:4C:D6:37
X509v3 Authority Key Identifier:
keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8f:40:1e:20:03:72:b7:be:2a:3b:54:15:89:69:a5:18:17:
ef:24:6a:23:f5:89:4f:e2:f7:e6:56:3d:27:89:a1:66:79:2a:
f1:dc:2e:2d:2d:93:2c:89:5b:fe:f4:1e:61:dd:ae:41:cc:86:
84:46:bf:99:95:90:90:b3:d2:9e:7f:36:3c:10:57:ca:db:7e:
b1:4c:23:cf:32:fb:35:6a:bb:cc:01:8d:65:e0:6d:e4:48:58:
f1:43:21:05:b3:47:fe:c0:b8:da:5d:33:79:8f:48:8c:6d:c9:
60:8a:03:ba:d1:58:9a:47:76:b0:74:5a:74:29:ef:f5:7e:5b:
ad:30:88:db:52:78:04:3f:f2:7e:7f:f8:30:cd:2e:38:13:98:
06:b4:f1:91:cf:26:9d:e9:ed:4c:2f:c8:f1:70:0f:52:cf:53:
9f:e6:05:3b:17:20:5c:4a:6f:4c:d0:0c:43:b5:38:0b:33:b5:
af:b7:b8:35:d0:c1:4b:1f:a8:93:f6:e7:1d:6d:15:c5:b2:a7:
39:7b:af:12:5f:94:da:5d:3f:15:e3:ea:07:24:f1:3d:bf:59:
0a:9e:b5:6b:a3:c7:8b:f9:bc:1a:c0:50:9d:c4:4c:c7:9f:73:
d6:ad:1a:da:b9:fb:a6:83:ac:dc:c5:b2:ce:62:7d:c9:c9:34:
e5:85:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:12 2025 by rpki-client