Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File: fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier: R5GAgeHzSkh2YKvSb0mJmBmavA+xgR6tnf1wv8Rx7qc=
Subject key identifier: 66:DA:3B:DA:07:DB:17:72:3F:5A:13:7D:62:9B:AF:42:41:68:ED:8D
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 01964A462D196C79CA9DBA11C782CD2698B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number: 0AED
Signing time: Fri 18 Apr 2025 19:00:35 +0000
Manifest this update: Fri 18 Apr 2025 19:00:35 +0000
Manifest next update: Sat 19 Apr 2025 19:00:35 +0000
Files and hashes: 1: 2ez8zuMs85e8CXlTRW23szM974M.roa (hash: nEbfOX8jy17dtiQ2QC4585/p7vP/7oJdRyNgTQoPp+0=)
2: 55jh7ZUXwY_9NSAWp4_RLJkLobk.roa (hash: q93ZDaiBje1HE/Gb640AQrHdK3FIANVFUxJnhDp/M4A=)
3: AUDMpjmCaKaksbx4oZ86HO931ng.roa (hash: GZOJzUdAkTOPDEQqYNkLxv9JD+varoxKqavWfC1fFBk=)
4: FamIa9uVUsnSTLirzZic8UQVhs8.roa (hash: VPd/bG5XgZdRuDgLlun3vA0o7NYvRU74hM05UOQs9Vk=)
5: LOq11mgZFBK-hn7LapkShT7_1UU.roa (hash: 5l/RFDsIvL3DcLZxVz11YBnw24k04mQy9SpCW1HGWwA=)
6: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: PWxmIM77zuspFUqPKUsxTSHm9kUXafD7+vMKmN5NLyE=)
7: jxRp3LItg7j8erDJ8R0T2aCXCr8.roa (hash: QeV/DuJmi0XOn6jKXthG6G1yFldJpvp3sThreaYeCPA=)
8: wJH2YhXqksjsanF0KbJBwlYiZcc.roa (hash: n/0BTqFTsqTUVEvotziQ7CPQtrqIst9qVSVCHNt1hJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:2d:19:6c:79:ca:9d:ba:11:c7:82:cd:26:98:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Apr 18 19:00:35 2025 GMT
Not After : Apr 19 19:00:35 2025 GMT
Subject: CN=66da3bda07db17723f5a137d629baf424168ed8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:8f:48:70:ab:02:fe:9f:c2:e5:68:3a:69:
73:61:6f:cd:19:48:b7:4d:c6:c8:d3:df:c3:ec:59:
8c:82:98:32:d4:3d:04:bf:58:ff:66:8f:5d:e1:41:
05:97:8e:db:c1:18:81:9b:78:95:da:4c:cb:0c:cc:
88:d9:b7:16:87:ab:06:16:c9:9b:4f:b4:e2:f1:9e:
c5:88:d9:aa:e8:8d:ae:cc:71:a2:80:2c:e9:da:e2:
10:e6:3c:1d:76:7d:12:ec:cb:20:a7:05:6f:62:b3:
97:5e:35:11:c4:d8:b5:9a:a4:2a:6c:16:1e:fe:2c:
c4:15:ba:5c:32:1e:f6:32:94:b9:6b:35:14:d3:be:
03:15:1e:63:21:0b:0a:60:8a:23:84:f1:51:ba:d8:
b4:40:be:08:7f:65:06:3e:59:5b:55:0d:b6:14:7f:
9f:3f:c0:55:cb:db:5c:13:d3:a9:6b:9d:94:76:26:
94:2b:05:f8:6d:95:7c:be:c1:25:a6:ad:fc:bb:a3:
bb:65:05:41:31:88:bd:d3:6a:90:9b:64:dd:a8:6d:
63:9e:58:00:5f:8e:e3:09:ba:db:cc:a9:af:c0:c8:
cf:05:36:de:39:d9:ba:22:d2:db:c9:16:73:f3:0a:
ce:bd:c0:a6:0c:c9:24:eb:73:f4:df:38:2f:7d:ec:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DA:3B:DA:07:DB:17:72:3F:5A:13:7D:62:9B:AF:42:41:68:ED:8D
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d8:e2:a7:38:09:ce:bf:6f:ba:5c:f4:d7:58:c4:a2:ec:35:
fc:3b:b6:9d:d8:c1:64:fc:b3:ac:00:db:51:ea:c9:76:0d:8f:
80:c9:29:0c:57:c3:be:74:84:d2:3c:a5:69:73:7b:96:3b:0e:
02:a0:bb:04:05:46:7f:3d:67:28:ec:2f:89:4f:43:36:af:fb:
57:c2:d5:be:fa:2d:9a:ec:68:24:be:5b:b1:dc:0a:fd:cd:b6:
46:9a:2a:84:51:ed:57:14:45:a5:71:37:cb:4d:15:89:e8:61:
7c:c7:e2:5a:e7:f9:1f:7c:0d:82:7a:83:ca:d1:3d:88:d2:ab:
a5:5c:59:64:d1:a4:c5:26:86:5f:75:4c:25:33:da:6a:9c:de:
2e:47:ae:f9:45:27:ce:c5:47:30:8d:a2:4e:77:bd:1c:a3:70:
f8:b7:82:a8:f8:f8:b4:27:cc:e0:96:e0:ae:3c:a5:27:3c:ac:
bb:31:dc:e1:74:db:d1:c9:d7:63:3f:1d:48:20:db:2e:59:f4:
77:2a:2c:07:bd:5e:ca:bf:b8:d8:0b:75:32:57:c0:20:32:5a:
37:c4:57:c1:6d:17:f9:ae:61:33:de:69:e9:5d:25:88:d8:5f:
d1:6b:72:7c:eb:63:f2:71:9a:51:ce:db:8d:4b:be:64:7a:6f:
ab:2b:38:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:53:31 2025 by rpki-client