Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json)
Hash identifier: yuEnnSrXj8TLBSi7t9cSQkk6osIRNMRMIhNlCdCFJWA=
Subject key identifier: C6:AD:8A:18:A8:AC:28:6E:A2:21:D8:A6:32:07:40:9D:F4:02:AE:10
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial: 019644E8C2F527EB54C2843A1EAD7FC2AD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
Manifest number: 0F3E
Signing time: Thu 17 Apr 2025 18:00:26 +0000
Manifest this update: Thu 17 Apr 2025 18:00:26 +0000
Manifest next update: Fri 18 Apr 2025 18:00:26 +0000
Files and hashes: 1: _J2QkiOT3wZXiv-kIeQ1vzDjGQI.roa (hash: ieQbUeSA/ZnjcXq9UchtsLIMyHxTCALoQIa6C87a8+U=)
2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: PSyB0WDgjhOlnJko438+FePUm/LHgb6mrg+c2l7mad8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:c2:f5:27:eb:54:c2:84:3a:1e:ad:7f:c2:ad:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
Validity
Not Before: Apr 17 18:00:26 2025 GMT
Not After : Apr 18 18:00:26 2025 GMT
Subject: CN=c6ad8a18a8ac286ea221d8a63207409df402ae10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:30:85:09:70:3e:87:a6:d5:c8:9b:02:18:
20:66:06:7f:e7:6c:db:c0:86:34:7c:7e:29:1a:13:
a0:d8:30:09:7e:2e:f4:72:bc:9b:2f:62:f6:c9:5d:
66:fb:24:d1:73:bd:2b:2d:91:dd:2d:4e:2a:91:8c:
9c:f8:ef:a8:8b:41:53:c3:c9:28:e1:3a:48:d8:80:
42:f4:9d:21:ee:92:b6:c9:01:da:b9:f0:2c:e8:79:
cf:88:a9:5d:bc:27:6b:4c:5b:bb:5c:8b:c5:0b:42:
50:5d:ee:19:b0:f4:a5:f3:d6:77:dc:65:c5:4e:1c:
a9:b0:16:aa:08:a1:ae:6d:60:33:a0:eb:f3:d6:b3:
d6:b2:cc:ca:b3:d7:57:0f:f0:9a:58:a7:63:5f:72:
1e:9f:08:55:60:ba:00:86:1b:73:39:0c:aa:4e:a6:
06:6a:3e:08:ae:47:a3:2a:1d:97:27:16:c1:ce:dc:
97:bb:58:72:1c:d4:b6:76:ec:a2:8f:28:7c:66:6c:
da:f0:f6:61:47:6e:ac:05:fd:90:4e:f3:22:04:63:
73:ee:14:b1:7f:30:8a:b5:9e:87:c9:f4:64:24:ec:
06:bd:91:e6:1a:69:ff:86:64:93:aa:e1:93:46:b3:
01:38:02:a7:af:b2:a8:65:c8:0d:6e:7c:1a:86:ef:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AD:8A:18:A8:AC:28:6E:A2:21:D8:A6:32:07:40:9D:F4:02:AE:10
X509v3 Authority Key Identifier:
keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5b:03:71:02:ee:e4:6c:5f:54:82:84:0b:df:be:9c:65:c4:
4b:45:85:15:fe:7e:3c:13:33:53:80:f8:fa:de:66:74:fc:b0:
2f:22:ba:ab:55:76:52:e6:9e:62:7f:72:6e:f2:1e:18:5a:ad:
58:f0:99:2e:3a:97:dc:2a:0c:7e:f5:41:46:95:ea:45:a1:d2:
0a:82:d1:42:fb:2b:f7:7f:9d:27:c6:05:c8:b8:a3:4e:08:9f:
36:69:05:92:ea:fc:21:0d:03:c0:9e:90:00:08:8f:7d:da:e5:
d6:f6:74:3b:ae:27:bd:b4:90:92:2a:df:32:0f:2c:ce:c3:0e:
5b:ce:82:74:92:de:31:02:66:77:d0:ca:20:5c:46:d9:30:eb:
69:2a:2e:67:77:82:bf:da:44:83:a7:f1:a5:9d:9b:07:17:66:
c2:c7:00:33:11:b1:1b:3d:24:82:9c:0b:3a:27:08:e8:5f:7f:
66:f9:5d:a4:aa:b1:da:07:92:cd:26:4f:8d:14:21:14:78:f0:
b9:23:73:58:15:91:f9:4e:4f:38:f4:19:eb:c1:39:e4:10:c1:
e2:4f:75:52:51:9c:53:f1:50:fd:3c:11:1b:50:6f:d9:87:03:
1a:bc:08:90:4e:7e:a0:5c:46:be:e9:fa:f8:2f:62:42:2c:20:
79:52:01:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:35:01 2025 by rpki-client