Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: yH8hYVhNvzNNuayMOR8W8GnnyWzT8S9rseNkWWdTYTY=
Subject key identifier: 1F:18:C0:C4:BE:0E:DD:2F:A8:BF:AD:DB:F0:34:58:72:C0:7B:66:E6
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 0196572714EE7157E3C1B438FF512E182668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0A34
Signing time: Mon 21 Apr 2025 07:01:41 +0000
Manifest this update: Mon 21 Apr 2025 07:01:41 +0000
Manifest next update: Tue 22 Apr 2025 07:01:41 +0000
Files and hashes: 1: XDbrvNT86ISN_spCbo4xvAzpVp4.roa (hash: VdcMI142dXyMiD8Y0gV4McGw1NiqJuUGtwcS5l0geTI=)
2: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: WhDLGHT3tNJl98y+MHTazYIpSfdy1Nvs4T15z/iRn5g=)
3: ziT1KvRp4nclVM5reU3sOFNH1x4.roa (hash: Q4C5iLbiXkuuyYxp+dYvmqYFnNUxA4NFMnWPDomm2KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:27:14:ee:71:57:e3:c1:b4:38:ff:51:2e:18:26:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Apr 21 07:01:41 2025 GMT
Not After : Apr 22 07:01:41 2025 GMT
Subject: CN=1f18c0c4be0edd2fa8bfaddbf0345872c07b66e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:1c:d5:67:9b:39:fd:57:06:5b:b9:09:8f:
7b:85:c4:e1:87:34:1c:59:08:3a:9c:32:8f:bf:f7:
66:84:44:4c:de:fd:50:3d:ec:64:87:5c:b7:c4:2e:
5d:39:f3:94:f2:71:55:22:17:04:9a:de:95:c0:41:
59:34:09:1f:f0:10:34:8c:89:e5:26:6c:24:0c:a8:
b2:3e:49:77:79:d9:4d:5a:8c:c7:e9:26:86:ed:a7:
88:1e:5d:84:59:48:24:d1:47:2c:f8:df:8a:0f:f5:
b3:2d:4d:a1:17:8f:3e:66:ad:0c:07:04:69:cc:ec:
65:08:33:71:1f:82:89:27:58:3b:3d:79:4c:89:cf:
5f:a7:df:43:99:cb:cb:3c:11:4f:6a:5f:c4:6e:7e:
22:1c:59:8f:73:3a:b7:bf:4b:84:71:a6:6e:fb:21:
aa:20:3a:c7:01:07:02:56:02:12:21:ad:12:66:fe:
6c:a3:90:cc:8b:fb:8f:ee:c4:62:c5:26:8e:f7:42:
da:b5:f6:e7:be:e7:f7:23:c6:66:0d:c6:f4:c1:ca:
2f:2a:2e:89:0a:49:88:0e:c3:1e:47:6e:b2:da:c6:
ed:ad:7a:0e:df:20:a8:d0:dd:b0:1a:a0:26:09:8c:
f3:87:6d:6c:cc:5f:4b:00:6e:33:e8:01:5d:3b:7c:
b2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:18:C0:C4:BE:0E:DD:2F:A8:BF:AD:DB:F0:34:58:72:C0:7B:66:E6
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7f:f1:ef:06:f7:4e:30:23:e7:30:d0:85:92:bd:d5:ed:29:
63:77:88:fa:f4:6f:d7:dc:41:93:10:43:b6:dc:9f:61:25:02:
18:0a:d8:ea:1b:c5:ab:43:01:96:c9:63:bc:8e:eb:82:2e:70:
6b:ec:4a:75:13:c3:85:18:fc:ba:5f:71:41:1a:3d:49:46:31:
e2:03:ee:f7:80:0d:4e:f6:a9:3d:d5:21:e1:dd:73:54:66:f3:
17:c6:78:18:50:09:83:7a:43:63:4b:c6:86:1c:ab:5d:2d:74:
fb:28:5c:7e:5b:f8:d0:05:5a:2e:d9:16:15:1c:83:6c:17:c0:
60:c3:f8:fb:69:03:c4:3d:b0:15:cd:11:03:88:2e:55:45:f0:
dd:05:b6:fc:14:1b:70:7d:61:5a:03:f4:4d:6d:ff:bb:d0:f1:
1b:8f:83:93:74:27:18:20:e4:a7:05:09:0c:3b:09:ad:77:83:
e5:1b:98:62:e3:a2:37:f0:65:14:22:2d:83:bc:ca:e5:9e:b4:
fd:13:d3:1f:63:91:e2:d1:66:d5:d8:e8:32:d4:5e:5a:41:01:
c0:3f:5f:88:6a:2e:1c:d0:f1:1d:7c:d1:00:36:40:45:44:48:
ad:47:03:28:b3:09:9e:0f:c4:c6:e1:ae:eb:8a:0f:e5:ca:2f:
dc:72:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:48 2025 by rpki-client