Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: 4NJVMxGKGUnD4DEwyNFJcitWFFxIsK4VtU6Vx5obEbA=
Subject key identifier: 03:7C:7C:3E:C9:4D:67:99:3C:C0:0F:CF:46:1E:AB:60:08:D9:1F:18
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 019648582A0225A2F3A33E9C195D9672EA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 05A9
Signing time: Fri 18 Apr 2025 10:00:59 +0000
Manifest this update: Fri 18 Apr 2025 10:00:59 +0000
Manifest next update: Sat 19 Apr 2025 10:00:59 +0000
Files and hashes: 1: J1p4HbSx9YoNvjErHtTwAUyVgDo.roa (hash: umKZAeg8WGSa+fZsQuR2FqJchnQHVyD2NsdZFLjN3sU=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: 6u9rpXzKsmOUQIfvdd2EJaU7IyXctMGMbo7tlSOFOS4=)
3: hnd60PCb7MPrkZCil3KA8PAN_Es.roa (hash: tL22gGuXB6lbd7BTXfGRxTYYeMYRJxuhGpU4/ThPHe4=)
4: jbpo7UEJqge335LMUeNSgvCaNTI.roa (hash: MZqdVSw/apK3pc3ZeATkJS+ETEBWZhP6yk5oDbnCI8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:58:2a:02:25:a2:f3:a3:3e:9c:19:5d:96:72:ea:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Apr 18 10:00:59 2025 GMT
Not After : Apr 19 10:00:59 2025 GMT
Subject: CN=037c7c3ec94d67993cc00fcf461eab6008d91f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:61:8b:c6:16:17:4d:66:d0:b1:c6:c4:67:
d9:30:c6:68:ca:7a:c1:c9:4c:62:92:97:d0:26:a8:
d4:d7:15:cc:52:82:9e:dc:bd:a9:3c:b5:93:9d:d9:
78:6c:43:81:db:0a:ab:fe:22:9f:25:5e:c8:80:06:
2b:7d:57:02:b8:31:a2:00:62:ad:20:e8:b2:90:ba:
f3:90:71:71:d6:f0:a6:67:8a:cd:b4:51:a3:7a:49:
c1:cc:73:7d:89:cf:c1:ab:a9:36:86:c3:66:f4:fd:
b4:27:39:5c:10:14:45:32:41:73:8b:2d:71:90:a8:
17:be:ab:89:9a:41:6f:4e:0c:57:87:51:50:0e:90:
0c:2a:6d:79:25:16:9b:d1:34:f0:5b:43:bd:42:6f:
a0:5c:c9:55:5a:52:6a:c4:12:01:be:62:ec:99:7d:
41:6a:8f:94:40:07:2b:6b:71:29:ea:8b:3d:5f:ff:
d8:d1:3c:5a:24:3e:ba:6a:0b:55:94:fc:82:44:97:
1f:85:87:13:ce:43:20:0b:aa:6e:b1:e2:fb:88:c8:
f4:ab:93:b7:9d:57:78:45:d2:6e:d7:78:7c:97:e9:
fe:78:33:ed:71:73:db:79:eb:02:72:97:a8:86:17:
22:1c:9d:7e:21:ba:c8:bc:94:fc:81:d3:3b:c9:d9:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7C:7C:3E:C9:4D:67:99:3C:C0:0F:CF:46:1E:AB:60:08:D9:1F:18
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:39:46:a5:31:54:96:49:bd:bf:4b:3c:e8:fb:5a:e1:69:d2:
02:98:15:c1:a6:e8:44:02:0e:91:26:f2:4e:7b:ef:23:63:5a:
c9:71:77:64:cd:a9:83:66:49:9d:91:1d:0e:2f:4e:fb:1f:cf:
ba:67:ff:78:e1:7b:7b:39:a1:33:42:9b:56:fa:62:f4:fa:eb:
fa:14:f7:58:b4:f0:85:ca:14:45:79:a4:da:2b:79:f0:a9:46:
22:3c:1c:d7:56:c9:d5:d8:29:77:99:ad:7c:1f:38:b1:7a:4b:
47:85:ee:50:8c:cb:e0:ca:b6:4e:5f:df:1b:46:14:14:ca:f9:
9a:8e:0a:60:3b:a5:97:43:f1:72:13:a0:eb:e9:66:06:4d:b8:
4e:20:15:f8:ff:ef:2f:85:b1:1a:fb:c1:ed:be:dd:e5:93:40:
a2:57:5c:bf:44:f4:71:33:fa:17:9d:19:c2:d5:30:ba:e8:ed:
0c:17:44:4e:fc:ab:91:7f:52:42:1d:25:05:36:cf:af:4b:a6:
cf:bb:c7:3d:0f:7a:43:4e:10:61:e6:31:75:0b:ac:d2:fc:ae:
f9:78:46:a3:e7:9b:f4:c5:2d:71:12:53:dc:4d:ba:47:6b:8a:
e7:00:aa:9e:cc:09:77:88:bd:dc:8a:cd:b2:1a:c7:cd:6a:84:
7c:8d:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:16:51 2025 by rpki-client