Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier: 2mo3me8OrbAHik2vUL9/jGZvfK9yifOU4NJWnIHWIsM=
Subject key identifier: 72:0E:D2:11:D5:A1:42:4F:99:3A:7D:F6:C4:D0:BA:ED:BB:2B:B0:6B
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 019640303EC10BA6CC93EADE89E455641623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number: 0919
Signing time: Wed 16 Apr 2025 20:00:25 +0000
Manifest this update: Wed 16 Apr 2025 20:00:25 +0000
Manifest next update: Thu 17 Apr 2025 20:00:25 +0000
Files and hashes: 1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=)
2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: LUEsZol0lhziME8P51XvSnCKMRaEN4Zk8v5p1d7Qkhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:3e:c1:0b:a6:cc:93:ea:de:89:e4:55:64:16:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Apr 16 20:00:25 2025 GMT
Not After : Apr 17 20:00:25 2025 GMT
Subject: CN=720ed211d5a1424f993a7df6c4d0baedbb2bb06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:7f:05:96:c7:17:33:11:9d:a6:d4:de:52:
93:4e:ab:41:4d:a5:e6:d5:21:e8:d2:96:7c:ad:df:
2f:53:92:1d:78:82:75:88:ad:76:d7:7c:86:13:66:
95:9f:c5:d1:f6:16:3a:38:41:3d:d1:f6:b9:fa:48:
5f:5f:0a:0c:28:1f:1b:fd:0c:39:51:24:89:44:22:
28:d7:65:f0:a9:0a:38:70:f7:d0:5f:bc:77:ba:23:
5d:38:c4:12:03:a1:0e:03:17:ed:ce:45:4e:4e:b0:
bc:7c:19:a4:c8:3b:23:5c:e3:54:19:8d:16:11:b3:
b0:5e:05:38:39:63:25:3e:b6:c2:6e:e2:da:16:38:
eb:89:75:8d:af:b7:55:e1:3c:91:fa:92:67:d6:d6:
88:a3:ca:6b:54:36:94:67:76:ac:33:a0:4c:50:fc:
51:17:41:6b:5d:08:1f:68:0d:0d:9e:a5:f3:2d:16:
72:0f:e6:b3:65:45:d7:4a:28:85:cc:d2:ee:41:08:
51:dd:2c:87:9b:3b:c1:67:02:09:24:30:59:1e:dd:
ac:5c:01:b3:75:1a:40:7a:05:6d:48:0e:66:e1:cb:
b8:71:95:c9:a7:99:7e:5f:c2:20:ae:02:17:59:57:
f2:e5:31:ec:53:92:aa:4d:ad:18:88:bc:ac:30:9d:
81:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0E:D2:11:D5:A1:42:4F:99:3A:7D:F6:C4:D0:BA:ED:BB:2B:B0:6B
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2d:40:4f:7b:49:41:ac:68:d6:5c:71:2a:6d:f1:2c:44:65:
ad:f4:ee:7c:e1:c6:21:94:75:1e:30:91:3e:32:1a:e8:f3:df:
c6:63:9a:40:77:d5:1b:b4:27:17:d1:c0:9a:5b:8c:ad:aa:de:
37:8b:af:6c:c7:ab:af:e9:39:60:ae:57:15:ce:7f:55:61:a3:
05:89:5b:24:8a:08:8b:aa:96:ef:36:14:45:8d:74:55:15:e1:
1e:2c:05:82:54:40:6f:64:04:f9:0e:96:83:99:9d:ff:f9:22:
70:42:a5:c2:b1:22:31:79:26:5e:fe:34:de:e6:56:aa:3c:c4:
fd:6a:ae:ce:13:35:f0:38:20:90:63:05:10:13:1a:71:f8:0b:
40:94:72:b4:3d:71:17:e7:19:15:c7:71:c9:47:89:27:aa:b2:
8e:dc:6c:3c:67:b2:ee:dc:0d:0e:44:ff:48:be:7c:da:0f:7d:
c3:6c:de:dd:aa:05:9c:b4:a9:c5:2a:0a:7d:d0:21:9a:94:da:
a4:b2:08:c3:09:7b:0e:33:81:62:a6:e0:64:90:9e:8f:12:6b:
bc:26:39:02:e7:03:4f:a0:73:b8:3b:4c:d7:8e:79:0c:4f:ca:
47:d7:5c:01:eb:7c:d8:3b:91:f7:4b:e4:e9:12:df:95:2c:39:
ce:fe:fd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:24:41 2025 by rpki-client