Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
File: f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json)
Hash identifier: VeFoQ2zIwmJG/flg1otV0wcb6lcsq84SdqL5448Gi/k=
Subject key identifier: A7:7C:DA:3E:91:F5:06:6C:B5:A5:B8:96:83:C8:45:4E:23:7E:7F:14
Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Certificate issuer: /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Certificate serial: 019656B833416E9D38DFE54AFAFDD7F38CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
Manifest number: 0358
Signing time: Mon 21 Apr 2025 05:00:34 +0000
Manifest this update: Mon 21 Apr 2025 05:00:34 +0000
Manifest next update: Tue 22 Apr 2025 05:00:34 +0000
Files and hashes: 1: FBjUV3haJWMHiHYLmmKX3BoInLo.roa (hash: oKEaDRSFjba7izBu4ZUdfN2GUSpLeb9v8sA33inleqs=)
2: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: n7o/RnyWNk2BPDSR1pmDSK4KeKgNFSAmriTH1tM522U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:33:41:6e:9d:38:df:e5:4a:fa:fd:d7:f3:8c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Validity
Not Before: Apr 21 05:00:34 2025 GMT
Not After : Apr 22 05:00:34 2025 GMT
Subject: CN=a77cda3e91f5066cb5a5b89683c8454e237e7f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:cc:c5:17:c2:16:d2:2b:17:a3:98:06:d8:
56:6c:0d:df:97:9d:27:46:33:cc:a5:97:71:02:d7:
58:56:ef:00:8f:72:e1:f0:01:e3:81:92:fa:90:43:
0d:61:be:1d:0e:29:b4:5a:5e:5a:9b:d7:1e:c2:95:
5d:01:46:d8:1e:fd:ba:fd:fd:94:77:9d:05:56:99:
5f:fc:ae:0e:49:a8:d0:cd:6d:2a:c3:d3:45:3b:db:
b3:b0:7b:7e:a7:2d:70:75:c1:45:1a:4e:0a:ac:fc:
f3:88:49:e3:5e:30:eb:83:d3:19:a9:0c:d7:0f:7c:
16:50:76:d0:68:49:b9:e1:fe:6b:e1:51:b4:24:2c:
8d:98:e7:82:ca:2b:de:da:55:d5:b0:3c:f3:a9:43:
b8:e5:ee:44:cd:b3:7e:13:8c:e5:9e:35:74:65:9a:
40:fb:c1:47:c5:b4:c8:73:36:98:09:42:dc:98:65:
42:83:4e:42:19:05:7a:a7:24:35:99:06:de:79:8f:
b2:a0:18:04:e1:44:2c:b4:69:81:99:a7:45:6b:82:
9e:0b:e8:1d:20:d9:31:57:f2:06:2e:52:60:a8:b7:
82:78:cc:cc:36:a1:8e:dc:6c:72:86:7b:1f:26:34:
f0:63:67:07:c5:2a:0f:a4:7f:1d:d1:12:d3:c8:17:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7C:DA:3E:91:F5:06:6C:B5:A5:B8:96:83:C8:45:4E:23:7E:7F:14
X509v3 Authority Key Identifier:
keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a3:64:a2:7b:b5:8b:a2:09:7b:69:07:c0:ec:35:69:34:a3:
94:78:c3:47:ba:fb:aa:25:77:16:fb:39:97:4c:7b:17:fa:ff:
9d:73:1f:52:c2:5b:38:04:4a:ca:49:28:9b:b5:d4:aa:0c:31:
19:52:20:c4:2f:be:51:db:0e:11:0f:d2:de:84:74:5c:65:34:
d2:68:c2:b1:97:c1:2d:3c:64:0b:f8:d8:b5:60:67:2e:14:67:
b8:1c:8e:02:f5:3f:03:5e:7b:66:0f:81:04:02:c4:ff:1a:de:
e6:88:0d:d7:68:a2:8c:b6:29:b0:de:26:0d:52:dd:e8:93:6d:
c1:3c:e6:ca:94:d9:35:65:7a:df:f3:fa:f1:1c:b7:53:15:6f:
dd:1d:c0:27:59:93:ac:50:81:4b:12:36:95:65:85:1a:33:e3:
40:42:68:6c:17:9b:38:3e:9f:be:8a:86:94:6a:4b:69:42:5c:
ba:70:b2:f4:fa:0c:b5:c3:ba:8d:1c:41:ca:49:31:49:4e:49:
da:21:a4:01:26:b6:4b:29:0f:0e:b5:b3:6b:59:3d:20:7b:0d:
41:f3:f2:7f:68:65:be:5f:64:de:3a:d8:62:86:35:64:c0:ee:
bc:68:98:a3:2f:01:cf:77:e9:61:ad:0e:99:cd:3c:41:5c:ad:
1d:2f:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:29 2025 by rpki-client