Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
File: fh10krjoNfLk4q3k0sVNqat4r4w.mft (raw, json)
Hash identifier: rx4zp3yVsrgHwWQerkpwJeIIQB3GLQ6CPzqzVVIMObA=
Subject key identifier: 4F:AE:F3:AA:37:82:14:27:A7:11:2C:39:CC:1F:48:8C:70:5F:35:90
Authority key identifier: 7E:1D:74:92:B8:E8:35:F2:E4:E2:AD:E4:D2:C5:4D:A9:AB:78:AF:8C
Certificate issuer: /CN=7e1d7492b8e835f2e4e2ade4d2c54da9ab78af8c
Certificate serial: 01963F546B3AB8D5EE2BC24097ADBE80745F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fh10krjoNfLk4q3k0sVNqat4r4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
Manifest number: 064A
Signing time: Wed 16 Apr 2025 16:00:19 +0000
Manifest this update: Wed 16 Apr 2025 16:00:19 +0000
Manifest next update: Thu 17 Apr 2025 16:00:19 +0000
Files and hashes: 1: PgE9BW67Hzl1H_iUdCM9hiaWebE.roa (hash: /s5fkdZBUcDDsN3IZL7N+u3huKwHv5y1+anQQJEUKPw=)
2: fh10krjoNfLk4q3k0sVNqat4r4w.crl (hash: 6wkVDoALQYNBh7RiThTZrqWh/sYyrzPGRuMGbvfB0F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fh10krjoNfLk4q3k0sVNqat4r4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:6b:3a:b8:d5:ee:2b:c2:40:97:ad:be:80:74:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1d7492b8e835f2e4e2ade4d2c54da9ab78af8c
Validity
Not Before: Apr 16 16:00:19 2025 GMT
Not After : Apr 17 16:00:19 2025 GMT
Subject: CN=4faef3aa37821427a7112c39cc1f488c705f3590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:a2:df:d8:87:79:e2:36:0c:47:08:38:09:
3c:b7:00:3d:0e:7f:c5:fc:53:50:5b:13:86:5c:2b:
7e:6c:4b:9b:66:1b:52:cd:50:0e:48:83:f4:7f:82:
91:38:33:2a:92:5d:39:c8:05:64:e6:6c:dd:c9:ec:
12:14:93:6a:b5:ea:d5:cd:a6:ba:4e:91:2e:95:99:
06:b5:e3:ec:6f:24:81:14:30:7b:ee:0b:38:90:9c:
5c:ee:c0:98:f4:6b:fe:66:34:10:73:79:e0:f8:ad:
64:d7:62:b0:e5:0c:04:e5:b6:9d:86:d5:e1:d6:2e:
3c:9a:19:a7:0d:a9:c1:7b:9a:72:c1:4b:64:92:1d:
a9:21:e1:13:9d:f6:41:b2:0d:99:cc:d4:17:d1:c0:
b8:ca:31:71:79:d8:0c:94:ea:ca:e1:30:44:05:89:
f4:9b:10:67:76:76:50:9b:43:44:f0:b0:f4:c6:dd:
39:b2:a1:5b:c9:6f:ec:1a:d0:9c:42:15:27:7f:f5:
7f:8c:91:e2:e4:b9:e7:ba:38:7b:e6:a1:3f:98:94:
3c:d1:82:90:e8:db:a1:f6:c1:34:d2:21:27:21:f7:
3e:b3:d7:58:05:76:59:74:16:95:3e:fe:27:c2:a2:
a7:a9:56:d4:8d:cd:3a:3b:f4:cd:fe:42:e1:5b:9b:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AE:F3:AA:37:82:14:27:A7:11:2C:39:CC:1F:48:8C:70:5F:35:90
X509v3 Authority Key Identifier:
keyid:7E:1D:74:92:B8:E8:35:F2:E4:E2:AD:E4:D2:C5:4D:A9:AB:78:AF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fh10krjoNfLk4q3k0sVNqat4r4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:92:0d:f5:65:5c:1f:fa:0a:23:64:d0:3e:75:54:4d:77:4e:
2a:c9:0b:b9:e5:6d:47:31:1b:49:da:39:82:0f:3e:2c:e5:7f:
36:43:dd:09:7a:39:a3:6f:7e:0a:50:1e:bc:bc:d0:cf:83:06:
00:ff:89:00:ee:5d:8c:33:53:a4:f9:1f:21:e3:4b:51:84:8f:
30:e0:be:2d:26:90:9a:53:f4:a0:50:6a:53:72:1f:f0:95:6d:
ce:6c:eb:e5:f4:c7:00:fe:b0:7e:39:4c:6b:4e:f8:2a:29:fa:
4a:2a:bd:68:7c:26:d6:a8:d9:40:35:4e:a0:c7:b5:a0:29:af:
06:95:8d:b7:04:3c:73:41:47:da:51:b4:09:64:9b:db:ce:f0:
63:3e:e7:20:12:f0:cd:f8:ae:1e:6e:4c:41:87:c1:7c:f8:3e:
ba:07:2b:34:fa:bd:24:99:86:c2:2e:2f:ac:46:fd:84:08:b2:
a9:f8:75:fe:e7:fe:e2:92:e6:4f:60:58:e9:fa:6a:a8:65:8f:
6c:ff:54:45:80:f1:d7:72:d2:2f:a0:96:3c:5b:33:83:99:fd:
1a:f9:d7:55:a6:79:7c:36:75:a0:fa:f9:6c:31:39:d9:6e:67:
48:8b:ae:40:2f:25:1a:55:98:5f:19:14:87:a2:5e:f2:61:f8:
2f:56:3d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:27:00 2025 by rpki-client