Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File: fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier: ARZgYKM8zKwkcVfxpOlaax1U5FW6bM5X8NHq9bJR5Sc=
Subject key identifier: 8D:A0:1F:B0:D0:3E:3D:87:32:19:CE:A4:96:91:E3:36:27:D9:7A:4D
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 0196488EE86AA91216333ECD41CEF61A1A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number: 13D5
Signing time: Fri 18 Apr 2025 11:00:47 +0000
Manifest this update: Fri 18 Apr 2025 11:00:47 +0000
Manifest next update: Sat 19 Apr 2025 11:00:47 +0000
Files and hashes: 1: D0FtQbvZQzXxktB27DUgaEKlwyA.roa (hash: TJTUE8/n7jdIuoCoqw/ggE/DDwa5ne0vVYVe1eoGnag=)
2: RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa (hash: LUqOAenIf0vYCqR2aBBDyfZ5SWi7hY4GyrNgtlhdeZw=)
3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: gNpPDd7hlmcVCfpldXd+rgB6F5SOCOADNgKJE70wx/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:e8:6a:a9:12:16:33:3e:cd:41:ce:f6:1a:1a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Apr 18 11:00:47 2025 GMT
Not After : Apr 19 11:00:47 2025 GMT
Subject: CN=8da01fb0d03e3d873219cea49691e33627d97a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:7a:4c:b9:c8:7a:bd:8b:43:64:23:34:61:
05:ca:92:33:89:ca:8f:b1:51:13:2f:16:fa:31:8c:
38:c7:60:b6:ca:44:53:6d:6a:8b:0d:18:30:7e:5e:
cb:70:a9:ab:f3:a3:58:e9:bd:72:77:7a:f4:cd:9c:
bf:55:7f:ef:30:54:84:7e:ed:ff:98:68:6f:b0:f7:
ca:a5:b6:3d:f5:a5:42:c5:8b:ec:ff:34:09:cf:46:
6a:39:7e:79:8e:36:f9:49:8e:f5:fd:1a:ca:d0:79:
e9:99:8d:f6:18:09:6d:0d:9c:e7:a4:8e:9a:ac:d7:
f6:ac:44:15:76:a8:4d:d0:f7:4f:56:39:27:9f:c2:
6e:64:88:30:f8:09:57:2b:35:55:c2:26:6c:5f:2f:
20:53:93:ed:7a:5d:51:4a:d1:76:61:f5:f0:42:27:
1a:85:2f:93:ec:2d:7c:0a:a8:7b:7d:5b:c9:1e:14:
3a:ca:fd:fa:32:b1:ce:03:13:04:d5:61:94:f9:65:
f6:ee:e4:fd:67:bc:21:9a:3b:d1:2f:25:48:8a:4e:
5b:0c:33:97:65:f6:9a:a0:8d:b3:af:3c:04:22:ab:
61:c1:c0:6d:4e:ed:b7:61:a9:5c:75:e0:b9:19:6e:
12:59:8c:5d:8f:38:43:d7:c6:21:1d:6a:27:bd:74:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A0:1F:B0:D0:3E:3D:87:32:19:CE:A4:96:91:E3:36:27:D9:7A:4D
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9c:b8:93:b4:52:93:21:81:7c:f4:d4:17:57:9d:ee:22:ee:
c3:7b:f2:d7:3b:ab:80:9f:7f:58:a2:51:bb:ca:ce:4a:ab:74:
21:36:44:f1:ad:b8:77:cd:1b:42:5c:ea:70:e7:bd:b0:19:e5:
b1:b7:47:33:9b:a1:c6:8f:60:93:f9:89:9d:28:46:f7:98:f5:
b5:25:a5:74:4d:57:a8:17:11:8a:b9:0e:4d:c7:7d:97:6b:94:
80:66:b0:8c:ed:9b:f9:c3:35:51:b4:e5:5c:a7:c8:28:09:65:
22:f4:0e:ff:4e:07:ef:68:04:0d:ac:e9:19:b1:0a:29:1e:d9:
df:2e:6e:37:8a:a7:31:65:a1:7d:74:62:9d:12:04:07:5e:1e:
05:91:57:80:d4:2b:d5:59:a1:68:98:16:75:63:f3:f5:58:53:
59:2a:ab:4b:97:d8:94:21:a4:f0:a5:6c:ef:02:a9:47:8b:ac:
56:27:7e:8b:e5:9b:0f:f8:dd:3d:16:7c:f3:7f:4a:65:32:b1:
09:c4:5b:71:96:d4:a8:98:3b:fc:a2:9a:a9:59:66:be:1b:d1:
a5:8c:36:d2:c3:83:b8:92:e5:c2:6a:18:88:63:5a:3c:b7:7c:
eb:8a:d1:8c:e7:92:6e:95:8c:e3:1c:8d:d5:fc:14:e1:3b:d4:
26:5f:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:05:46 2025 by rpki-client