Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: Re2r40pzzB0CY/pClCBZm78tp7NTSmvoA3kSTLIfh1g=
Subject key identifier: FC:FA:96:22:3F:6F:44:40:54:F4:37:96:0D:13:59:49:1E:F8:CB:40
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 01965725E8124389DB89CB02DADF5D4BE38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 0C86
Signing time: Mon 21 Apr 2025 07:00:24 +0000
Manifest this update: Mon 21 Apr 2025 07:00:24 +0000
Manifest next update: Tue 22 Apr 2025 07:00:24 +0000
Files and hashes: 1: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: dO1FFAcmuvIa7k8c0huIzXI3WvoFsTLDN7+6bhU//XM=)
2: rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa (hash: 7bO/x3Y8T7RLGoQjkYeWq/YNgP20ufR1tvp53Z1/QaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:e8:12:43:89:db:89:cb:02:da:df:5d:4b:e3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Apr 21 07:00:24 2025 GMT
Not After : Apr 22 07:00:24 2025 GMT
Subject: CN=fcfa96223f6f444054f437960d1359491ef8cb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:dd:55:f0:95:7e:ed:be:5f:f2:e0:ec:99:
35:b5:3e:e3:d7:d9:c8:16:da:de:63:ea:46:a2:33:
e7:b4:64:e3:a6:2e:41:45:9e:1e:da:76:db:63:dd:
9e:a2:b4:71:39:1f:81:55:ae:f4:6b:17:d2:9e:d4:
41:22:64:b5:9d:4d:ba:32:e7:d3:52:9b:bd:7e:5d:
0a:e6:e9:05:06:ac:c8:c7:45:92:f3:85:33:30:dd:
61:6a:8b:01:77:ac:56:ff:f9:54:0c:69:22:18:87:
8a:c3:df:6a:5d:c3:99:c4:cc:ad:3d:f3:b2:85:f8:
91:b4:77:c5:a5:2e:ae:2e:b8:31:63:47:0f:90:f6:
61:52:3e:d1:06:7f:2d:e6:87:3c:b8:fb:d3:fd:0f:
64:01:1a:ed:4b:ed:95:b8:b5:01:78:80:e5:2c:51:
00:60:97:d1:2c:1b:b8:19:81:c8:60:4f:1d:43:ca:
af:0a:c3:b6:2a:7b:1e:8a:05:2d:e7:6f:23:f9:0b:
b8:6b:8d:46:30:f0:6c:89:a2:1c:d5:d6:7f:05:d9:
18:b7:ef:df:a4:c2:02:cd:a3:1d:f8:3c:df:d8:d7:
45:fe:6e:39:31:e4:41:a2:e6:49:17:33:5f:16:0d:
29:01:19:36:a7:4e:67:31:98:47:92:9b:ed:80:21:
cc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FA:96:22:3F:6F:44:40:54:F4:37:96:0D:13:59:49:1E:F8:CB:40
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:30:9e:78:ab:db:0c:6e:8d:a9:01:72:41:7a:a9:87:f9:41:
43:f8:c7:f4:eb:32:e7:f2:67:91:84:b7:e4:81:6b:35:2c:13:
39:d8:e0:dc:b4:d1:18:58:dc:d5:bd:f5:00:be:b3:55:17:14:
e5:71:dc:b6:00:10:3b:6e:72:be:e2:39:78:88:b7:17:12:3e:
c0:16:06:21:fe:a7:04:4e:1f:21:36:16:7b:12:d4:30:e6:3a:
bb:02:eb:af:e8:bc:02:58:fc:76:50:18:79:3c:8b:a7:2b:16:
56:9e:32:30:ad:78:b9:fa:a7:1a:51:fc:2f:43:33:8e:8a:e2:
32:89:18:78:3d:69:f0:27:cb:b9:5e:3e:56:88:e9:6f:a6:7c:
2a:ea:bf:8d:6e:c3:64:d7:95:f2:2a:3a:9a:58:a9:e3:bc:a7:
a2:de:79:72:cd:0c:bc:2e:6e:9c:60:5a:ba:be:be:a5:41:e3:
0d:ec:3b:a5:fc:11:4d:cb:b9:df:f8:bd:a1:09:3e:f5:ed:01:
7d:8b:19:03:ee:f4:40:0f:4d:c1:f1:64:a6:85:cc:ed:8e:90:
c7:fb:fb:cd:b9:3c:68:c9:32:cd:16:72:fd:0f:92:23:0b:74:
36:df:5e:2a:6d:3c:5d:9a:3f:b9:1a:dc:27:f0:ef:8b:53:86:
77:b0:0c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:38 2025 by rpki-client