Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
File: fQDvTzv2W4fPoC73tKZYm6LeT_c.mft (raw, json)
Hash identifier: PV4fpoBbYb+k2ty/T/2UVu5tCwiHYhX8+U2NuT0TKT8=
Subject key identifier: 68:71:7D:18:E5:18:9F:03:A8:1E:06:AC:18:9E:23:47:69:98:2F:C4
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Certificate issuer: /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial: 0196439F13063129FB2D32D483219FD0673F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
Manifest number: 0CFA
Signing time: Thu 17 Apr 2025 12:00:20 +0000
Manifest this update: Thu 17 Apr 2025 12:00:20 +0000
Manifest next update: Fri 18 Apr 2025 12:00:20 +0000
Files and hashes: 1: 8c_-JJSRaWAdlgvn5HbEMrKvRfI.roa (hash: KpvO8IWbSGTOfjfycUgdrrf84glELyn27WOsA9sqcQY=)
2: fQDvTzv2W4fPoC73tKZYm6LeT_c.crl (hash: xmWMI9dAqVRJDh3QHrgOquKk+GTaelKbT4ysyVmp3/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:13:06:31:29:fb:2d:32:d4:83:21:9f:d0:67:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Validity
Not Before: Apr 17 12:00:20 2025 GMT
Not After : Apr 18 12:00:20 2025 GMT
Subject: CN=68717d18e5189f03a81e06ac189e234769982fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:76:6b:ce:07:6c:ef:72:87:71:b1:fa:2a:
3d:98:e5:6d:df:4d:84:3e:b7:90:d0:85:5b:77:fd:
50:f3:39:87:50:bf:c2:4c:b9:f7:c9:20:16:a9:3f:
8f:f3:b2:a8:38:de:35:ef:8d:f2:d7:fa:a6:35:dd:
d8:9a:79:8d:62:de:da:bd:da:27:48:89:75:a2:e8:
a4:04:16:a3:99:73:18:95:1a:b3:56:3f:41:1e:3c:
3f:6f:3d:7e:1f:1b:39:5f:88:4b:5c:b0:f0:cf:4a:
9e:0c:85:cb:7f:a1:a5:cb:1d:61:29:64:ed:db:c3:
54:8b:99:8a:9f:70:1c:ca:84:11:56:25:c8:76:d1:
2e:86:77:87:51:31:7e:3a:93:bf:0a:b3:16:07:f9:
56:f9:8d:54:0c:1b:a7:83:f5:21:77:2c:8b:79:ef:
ad:04:43:18:2e:91:43:b4:dd:d4:c7:35:e7:c5:80:
3f:98:c6:be:52:52:f1:e1:75:c3:fd:d0:51:0f:15:
3a:22:59:d6:7a:96:0f:13:a0:93:2d:80:65:07:9d:
6f:12:2a:d0:a8:14:27:f4:7b:c7:a6:cf:7a:e3:35:
7f:21:ef:d1:f1:5d:ab:47:83:5d:87:92:73:95:0a:
b2:cc:70:4e:0a:3c:b9:8d:f0:4b:f2:03:64:b5:4d:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:71:7D:18:E5:18:9F:03:A8:1E:06:AC:18:9E:23:47:69:98:2F:C4
X509v3 Authority Key Identifier:
keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7e:26:b7:fb:72:17:db:3d:ae:c6:a3:07:ad:95:a6:b6:b0:
f2:d0:42:fa:25:49:be:f2:3b:4f:a7:65:eb:23:0c:10:6b:70:
8c:09:a1:83:c5:70:aa:bc:72:7f:25:8f:5a:35:e3:68:d4:65:
87:91:35:37:2a:65:19:54:a9:b3:a3:fd:e5:f3:4b:0e:9a:fa:
86:d6:c5:6e:1d:32:e0:5e:cc:45:d3:0d:5f:ca:6e:cd:fa:9d:
85:6b:5a:c2:d2:eb:48:ab:44:f5:fd:82:a1:94:2c:e7:50:12:
58:6e:74:b2:03:37:41:98:ce:3c:35:11:a7:a6:32:ec:3c:17:
8e:a5:a6:5d:a8:c9:e0:fa:dc:3a:3b:2d:84:60:58:d9:49:e0:
3d:fa:49:05:c9:cb:6e:57:0b:20:31:22:4a:c9:a0:5b:b7:e8:
d6:63:10:dd:c8:de:e4:fa:19:a9:28:87:58:42:42:a8:42:9f:
c7:5d:26:43:56:fb:46:06:2d:e8:6e:02:2b:b8:40:f6:83:eb:
7e:95:ba:b5:9e:43:cf:59:37:9a:f3:5b:c7:61:df:ef:58:bb:
8c:ff:36:cc:b6:1c:8f:e8:cd:43:a1:be:e6:46:f2:cb:22:0d:
2d:6c:d7:6d:3c:86:c5:b6:b7:18:c5:76:e4:7f:0c:7e:74:85:
98:68:9c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:26 2025 by rpki-client