Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
File: F263G9VVdvRXY7retnbtWZkNOWo.mft (raw, json)
Hash identifier: 7j38k9ibSnetL7+YWnCEqgerNfpO9XGnD6hesU0HzCc=
Subject key identifier: 02:F6:15:9A:E2:EF:9E:C4:09:C1:40:65:86:34:9A:C0:0C:EB:ED:5C
Authority key identifier: 17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
Certificate issuer: /CN=176eb71bd55576f45763badeb676ed59990d396a
Certificate serial: 019655007B050F3848203A89866AC9EFB63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
Manifest number: 0C0E
Signing time: Sun 20 Apr 2025 21:00:16 +0000
Manifest this update: Sun 20 Apr 2025 21:00:16 +0000
Manifest next update: Mon 21 Apr 2025 21:00:16 +0000
Files and hashes: 1: F263G9VVdvRXY7retnbtWZkNOWo.crl (hash: ZAkD4+YdxXlPnXYEdIR9paayf/XQkb/lrBtr9cbj5Gc=)
2: kQBDlI9AJTPDOANcbfub1qPVjs0.roa (hash: ws3dJ8ac8FYqQSPBpJu2ZxPrhp444gx9gUkFmi10lLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:7b:05:0f:38:48:20:3a:89:86:6a:c9:ef:b6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176eb71bd55576f45763badeb676ed59990d396a
Validity
Not Before: Apr 20 21:00:16 2025 GMT
Not After : Apr 21 21:00:16 2025 GMT
Subject: CN=02f6159ae2ef9ec409c1406586349ac00cebed5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:b3:80:ab:cc:ad:ef:9f:44:dd:90:2a:e5:
ff:7e:b2:fd:af:1a:52:d1:61:bb:05:7f:4c:cc:75:
c4:07:78:64:aa:7b:bc:d9:21:f3:d8:cd:c3:23:2b:
a1:c5:65:d3:65:67:6f:3d:63:ce:3a:97:13:e4:06:
c3:a7:49:f1:ec:3c:c2:77:28:63:53:97:8d:8c:65:
11:48:97:e3:2d:f0:0d:24:32:50:20:91:7c:d6:e0:
7e:84:34:5c:f0:38:76:3a:1f:32:9b:c7:27:16:d8:
0d:36:3a:a0:ba:0c:4b:6e:13:b6:73:81:96:2e:aa:
b6:89:17:9f:2f:bf:55:59:ea:80:93:e6:0f:43:96:
bf:22:a7:45:40:76:32:72:c5:a7:49:29:d4:1f:2b:
89:06:1e:71:84:73:af:d9:42:8a:9c:52:49:c7:21:
ee:28:bf:46:1e:3a:2e:cb:af:f0:e8:b4:f7:cf:7d:
2a:21:ab:a2:98:b2:76:70:7c:86:db:ed:a5:c1:15:
29:92:05:71:f9:63:69:a3:b4:76:31:9c:26:81:36:
d6:c0:0c:e5:94:3b:ae:21:97:08:2c:f8:d7:45:db:
15:58:b3:73:df:fe:4b:b4:e5:dc:47:bc:07:95:94:
5c:2d:a8:93:da:3c:cb:9b:0e:ec:3f:2c:ea:7f:54:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F6:15:9A:E2:EF:9E:C4:09:C1:40:65:86:34:9A:C0:0C:EB:ED:5C
X509v3 Authority Key Identifier:
keyid:17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:13:e0:83:e3:4b:b1:ba:ba:6e:e2:b6:16:92:19:01:a6:bf:
4e:1a:31:c1:74:4b:8b:7e:b4:c6:8d:1d:94:8b:98:6e:5f:d5:
42:c4:f8:09:ed:5f:86:82:65:9d:98:7c:db:9e:65:ce:8f:7c:
24:f3:09:06:63:96:30:68:05:64:8d:74:42:06:ad:80:84:a4:
f0:4c:44:75:1d:ff:94:d4:a4:65:76:f9:4a:c9:2a:0d:f0:b4:
5e:ce:58:c4:3c:b7:ee:d9:20:24:84:74:d7:a6:11:c9:fb:62:
19:40:c7:51:29:de:fc:21:94:0a:bb:54:d5:da:1e:7e:1e:65:
e2:5e:2d:53:aa:0e:19:a4:ba:eb:db:98:a1:e1:01:0c:cc:11:
42:d7:ba:c0:ff:d0:d7:68:10:25:77:61:64:30:78:f3:14:0c:
2c:08:0e:02:0c:4e:5a:96:ad:2a:a8:d0:62:fd:cc:64:34:58:
4b:9e:05:e1:5f:b4:97:cd:cf:1d:5a:fe:b6:43:f3:53:3b:65:
ad:24:55:9e:5f:9f:43:c2:2d:e5:c0:91:4e:f8:9d:11:00:f4:
fa:3f:f9:2a:a7:9e:77:c6:55:00:bf:a0:6e:1b:2e:8c:78:d4:
2b:ed:8a:32:4c:01:cf:03:29:10:f6:62:64:97:d4:d5:68:1b:
05:e1:79:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:29:16 2025 by rpki-client