Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File: fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier: SFm5L9uxd+cpq2J1Y8exW+puJkW9U4EpFrdOFnlpweU=
Subject key identifier: F0:80:92:35:C0:F3:6A:30:09:4D:3D:DB:27:D0:4F:2F:CF:AD:7D:7B
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer: /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial: 019610FBE67E92D8A926EAA4B5F2B2F8919C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number: 0BEE
Signing time: Mon 07 Apr 2025 16:01:06 +0000
Manifest this update: Mon 07 Apr 2025 16:01:06 +0000
Manifest next update: Tue 08 Apr 2025 16:01:06 +0000
Files and hashes: 1: dWmsOWayzQrhACw6PZROUA9TY4k.roa (hash: k+N79FADkE2zFtD7FMss3oaOymFQNUYiml90eSHs5KE=)
2: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: OwHBg4vkjSCLnxkVUPDcZgNHAGEBQ1wcO3jCMb0DG+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fb:e6:7e:92:d8:a9:26:ea:a4:b5:f2:b2:f8:91:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Validity
Not Before: Apr 7 16:01:06 2025 GMT
Not After : Apr 8 16:01:06 2025 GMT
Subject: CN=f0809235c0f36a30094d3ddb27d04f2fcfad7d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:4f:aa:05:a4:8e:fb:0a:26:93:7d:85:6f:
7f:df:70:38:cd:2d:2e:ad:5b:f6:95:95:38:72:0e:
2b:38:62:14:c4:45:89:d3:9f:93:6c:e8:dc:77:98:
aa:71:0a:d7:13:a3:a8:fe:9b:8b:1f:23:52:ca:12:
d3:41:9d:16:e1:7a:61:ad:b5:a6:5d:f5:4e:32:fb:
89:b5:5b:ed:99:5c:51:76:69:9c:f7:7c:fd:8c:fc:
00:d2:0a:ee:3c:92:61:c7:27:6a:78:4b:ed:2e:f4:
d1:85:b9:32:9d:3a:02:49:97:06:35:01:8a:bd:47:
5e:e1:4f:e3:0b:87:1f:4e:0a:95:79:f7:2b:56:4e:
15:5f:bf:d3:63:87:ad:f4:9b:9e:a6:a5:d2:5e:a3:
bb:e9:25:13:5c:a5:91:aa:02:4f:43:3a:e9:0e:ed:
01:f2:a6:4b:5c:8e:39:44:c1:6d:a3:49:fa:69:c4:
0c:8a:23:e8:2d:db:1e:21:0a:56:20:02:6f:91:8d:
d5:9a:fa:16:48:4e:6b:c7:3a:e4:24:7a:bc:67:12:
35:c8:05:4e:44:29:ea:eb:ba:80:be:f8:9b:d6:a9:
42:30:44:c1:8f:90:6e:45:4f:b6:06:c0:3f:ca:ae:
cd:21:f4:e6:cd:c7:f4:c6:92:bd:9e:68:c8:9f:a4:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:80:92:35:C0:F3:6A:30:09:4D:3D:DB:27:D0:4F:2F:CF:AD:7D:7B
X509v3 Authority Key Identifier:
keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1d:02:50:0c:a1:82:ea:8a:1f:9c:e2:05:c3:c9:26:11:cc:
5d:35:08:8a:c2:fc:70:0c:82:45:9e:66:56:00:e0:7d:9f:45:
44:9e:6d:e8:d8:62:6b:d4:c3:e4:2d:be:00:ce:a7:c1:ba:4e:
f6:b1:e0:78:42:c9:be:7a:14:83:2a:da:66:29:04:83:06:a9:
f3:10:4d:a1:1c:01:d4:4a:19:21:bf:db:61:20:32:c3:47:47:
1d:a9:f8:3b:f7:ff:bb:cd:db:56:57:78:5d:25:27:db:eb:a1:
59:42:2a:0c:d3:d8:51:ab:13:0f:de:29:f3:23:34:2e:44:47:
b7:3b:5c:41:08:e3:15:fc:96:14:a8:ca:7e:f9:11:4b:99:71:
31:32:32:21:68:a4:25:9b:c3:ce:73:42:66:d8:70:2b:e1:ca:
43:eb:dc:3a:af:41:87:64:19:e7:fd:a0:f2:1b:f8:d8:51:0a:
75:4e:c7:54:b2:10:7d:f1:df:b6:3d:23:55:4d:b4:b8:cc:b8:
d6:3f:b4:f4:8b:2a:40:f4:61:dc:28:14:b1:94:92:ea:8c:1c:
88:3f:8c:fc:d9:d7:2b:80:ab:12:2c:4b:49:fb:84:68:8f:e9:
fe:05:a3:65:1b:f2:5a:3c:23:f3:bb:a1:f8:6c:a9:23:d4:66:
76:62:77:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:41:07 2025 by rpki-client