Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
File: fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json)
Hash identifier: c2iPVsRocrklqKO4lLNlAkQOaNaoj3OcMHKdiOgi4kI=
Subject key identifier: 9F:C2:FC:16:A4:97:4C:4E:4F:17:EE:89:D0:32:70:B8:5D:97:41:54
Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
Certificate issuer: /CN=7c1bbb08037a876230406fa67379f980b5ab3276
Certificate serial: 019636BFAB101EDDA3F94D67672F27FB0A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
Manifest number: 0DB8
Signing time: Tue 15 Apr 2025 00:00:52 +0000
Manifest this update: Tue 15 Apr 2025 00:00:52 +0000
Manifest next update: Wed 16 Apr 2025 00:00:52 +0000
Files and hashes: 1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: x4/taEhWhHKZ4MNGorc3TnDsqwb2kQuQ6bX/5Qbmcis=)
2: mZO8S467jgcFzt406x0GmuRgZrg.roa (hash: LBo6nvo9ZS8C5pN/ZxvETZsZeRn1wNqdsDaMcfQFY7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:bf:ab:10:1e:dd:a3:f9:4d:67:67:2f:27:fb:0a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276
Validity
Not Before: Apr 15 00:00:52 2025 GMT
Not After : Apr 16 00:00:52 2025 GMT
Subject: CN=9fc2fc16a4974c4e4f17ee89d03270b85d974154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:d4:2f:2e:b3:34:7c:a6:29:37:28:d6:97:
7f:e8:8c:8e:a5:7b:1d:92:0a:2f:ed:c2:3c:81:46:
ab:3f:6e:c3:d5:8a:89:f3:22:b3:e5:9b:f7:60:a1:
92:89:e5:67:72:59:6a:2f:2f:53:8e:a9:c0:63:89:
93:8d:57:fc:22:a1:78:05:90:bc:c6:01:39:b1:93:
5b:95:60:5f:25:21:06:5d:56:24:37:e6:9e:bb:cc:
a8:e2:8b:26:51:b1:23:9a:2b:b1:2b:16:d2:e6:b5:
7f:cd:38:39:27:da:02:ca:2a:2f:1b:ad:08:63:84:
02:50:6e:fc:3a:05:2e:9c:8b:05:1c:5a:14:79:d4:
e5:be:33:cb:cd:f3:0a:66:f0:83:98:dc:40:cd:49:
9b:b6:e1:e6:29:da:5d:87:26:5a:8d:68:92:79:2f:
35:3d:20:d4:77:90:78:12:0a:e5:40:3d:9a:ec:75:
88:58:e6:12:16:92:ad:fb:fa:32:31:8b:85:bf:b3:
54:4e:84:44:16:76:31:99:19:aa:13:15:d7:45:f4:
a9:10:2f:62:d1:12:40:2d:d8:2f:50:e6:68:4b:6b:
82:a6:0a:9b:c1:2b:68:92:11:52:27:4d:b3:12:3a:
5b:dd:86:72:da:e6:08:24:89:44:24:9e:5a:40:1f:
10:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C2:FC:16:A4:97:4C:4E:4F:17:EE:89:D0:32:70:B8:5D:97:41:54
X509v3 Authority Key Identifier:
keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:94:f9:73:14:2f:18:aa:63:64:75:79:66:a1:8b:d0:93:77:
74:08:f5:4e:ee:e8:65:0a:c4:c4:da:fb:ba:aa:46:e8:f0:f3:
54:9b:39:37:d0:4c:20:ef:15:b8:a4:c8:9f:4b:84:d7:d6:64:
1e:f8:ec:af:18:5c:da:a7:e7:72:42:ff:18:ca:b9:eb:9a:5d:
03:a4:bc:7e:1e:9e:fc:c7:b3:ea:24:33:21:34:5e:38:31:59:
dd:ed:80:bc:07:d2:b6:fc:31:18:24:34:f8:4d:72:af:32:49:
30:63:b3:d9:8a:de:1d:23:5d:2e:45:e9:8d:f1:50:f3:f7:e6:
23:b7:5c:5c:8d:72:a0:40:57:54:17:72:2e:f6:5c:bd:a1:dd:
d1:cd:9c:29:64:21:d4:8b:18:46:0a:48:11:0d:e6:40:6b:a1:
1a:58:7a:85:a8:f7:79:c8:a3:1a:68:95:64:7c:a7:e2:d4:71:
2d:43:69:76:53:2f:5b:7f:37:c2:85:d1:7d:72:18:0d:dd:96:
59:5c:39:14:6e:46:cc:3d:6c:e2:6d:ab:0b:ee:31:e7:92:14:
30:1d:80:fa:d0:c9:67:1e:3b:07:14:c0:98:4d:8b:9e:69:70:
e7:94:3c:8c:56:e1:b4:af:98:c0:8a:1a:5a:fc:2b:c0:62:3f:
67:e8:a0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:58:21 2025 by rpki-client