Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier: LfpfquR6n0EU2ZavbmnU23KqHUqxat8baFOE/fg23nM=
Subject key identifier: 0A:55:0E:9A:B6:AC:D5:C1:8D:94:C8:99:F2:6B:7F:59:73:E8:02:63
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 0196531238C677652403EE2F8EDC63E8D611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number: 0DCE
Signing time: Sun 20 Apr 2025 12:00:25 +0000
Manifest this update: Sun 20 Apr 2025 12:00:25 +0000
Manifest next update: Mon 21 Apr 2025 12:00:25 +0000
Files and hashes: 1: 7fUo-oGUyRn9-9ANdyLLV4IAEzs.roa (hash: WPPCtKBHs3yDruufjrRdI5i0kryHgilSWp2pBoxruxg=)
2: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: nH5lsqN3Ij/Q/T4hxFhwu8H6nApCIEE35mGb5xH3tLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:38:c6:77:65:24:03:ee:2f:8e:dc:63:e8:d6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Apr 20 12:00:25 2025 GMT
Not After : Apr 21 12:00:25 2025 GMT
Subject: CN=0a550e9ab6acd5c18d94c899f26b7f5973e80263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:71:3a:c1:79:69:87:35:e7:b9:b6:76:49:
f1:3d:e4:76:bd:ac:26:c0:08:02:b7:71:b6:19:4a:
ca:00:62:7c:6f:65:ee:e0:18:1a:19:60:2e:a1:61:
46:39:c3:23:a3:5a:40:43:a3:bd:c7:8d:98:fd:51:
bc:f9:df:cb:e0:f5:57:2d:36:af:a6:09:8c:29:61:
40:3d:f7:a6:e1:24:7c:96:43:86:86:78:2f:31:ff:
be:fc:4d:0f:ea:04:e2:20:21:2d:bf:77:b7:2e:43:
e3:72:10:88:db:e3:ef:3e:5c:d5:2a:ee:92:f7:e3:
95:36:ba:3f:40:65:05:d8:1a:ee:78:ce:9c:83:09:
18:2d:e8:f7:2e:75:c9:62:23:3c:5f:1a:3a:34:2e:
d2:b4:f6:88:31:40:7a:0a:cf:84:6c:79:88:03:cc:
bf:a7:2b:ef:00:7a:88:b1:f6:4d:5e:0d:0d:7e:6e:
26:d8:23:98:0c:d6:a3:4e:84:f5:7d:61:77:c7:c2:
a9:8b:35:62:29:a8:65:12:b9:c6:6d:1b:44:2a:01:
ce:70:51:51:75:94:37:38:b9:fd:e2:73:37:f8:bc:
c1:44:37:0c:51:8c:19:51:0f:6a:96:9d:a1:86:6e:
22:48:3a:fa:c0:4b:a0:3a:c8:76:9b:1e:29:d8:84:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:55:0E:9A:B6:AC:D5:C1:8D:94:C8:99:F2:6B:7F:59:73:E8:02:63
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f4:79:38:58:eb:ce:88:76:d3:3b:86:94:1c:bc:c8:2f:ab:
95:56:30:65:30:1d:86:38:a2:8c:de:85:ab:d6:63:b6:ff:16:
9c:35:21:f4:a7:6c:34:a0:67:28:d4:84:a8:ee:05:4b:d6:68:
4e:c3:28:cf:2f:55:6d:75:f3:d6:cb:43:43:07:2f:32:97:07:
fb:b4:e0:00:65:45:41:32:25:17:4d:8f:47:be:6d:b6:56:95:
09:02:29:2f:59:73:6d:65:a5:fc:9f:6c:10:09:8c:aa:d6:93:
32:9c:72:f4:b6:2c:78:72:8e:74:50:c8:7a:b5:e2:3d:5c:90:
78:39:fb:a6:05:e4:2a:56:29:b8:ca:5e:5e:68:f1:db:84:7e:
96:0a:b6:e3:56:78:7f:6c:5a:af:c6:78:bf:18:31:78:d0:3e:
96:48:00:58:52:64:8b:d9:b1:91:d7:1c:e6:a5:8a:3a:b0:89:
50:af:6c:f6:f7:b9:46:95:51:b0:2b:04:cf:a1:c8:e0:ba:3b:
fc:d1:e1:46:eb:26:b3:ad:fa:6e:6e:e8:a1:f4:85:67:44:92:
9f:30:0f:f0:94:5e:6b:48:be:dd:78:ca:f4:4a:ec:cd:c8:74:
cf:62:68:cd:d3:bb:dc:36:16:76:82:9c:42:a5:5b:95:6f:ee:
2f:31:6c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:23:05 2025 by rpki-client