Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: 5AutkT8dY4xp80ZReTVxwjowhOwT/6aRM7OtXdeCVBY=
Subject key identifier: F7:CB:0D:80:89:E5:CD:4B:3F:A6:B4:FC:B8:26:6D:60:FB:1D:B4:75
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 01958B16EC2EA823E4E3A124833BEF380F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 078D
Signing time: Wed 12 Mar 2025 16:01:29 +0000
Manifest this update: Wed 12 Mar 2025 16:01:29 +0000
Manifest next update: Thu 13 Mar 2025 16:01:29 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: qWDWGNk8BC4rZRI5DkUZSPe323pv/OBWow/F52KYQrM=)
2: zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa (hash: haMcqGD9VuWSxs2wPMo5yLhdGqSHCO1AnFtOfllpTYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:ec:2e:a8:23:e4:e3:a1:24:83:3b:ef:38:0f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Mar 12 16:01:29 2025 GMT
Not After : Mar 13 16:01:29 2025 GMT
Subject: CN=f7cb0d8089e5cd4b3fa6b4fcb8266d60fb1db475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:77:e4:0f:5e:96:86:1f:cf:60:6c:a2:8e:
a8:76:8f:1b:9d:37:2c:74:ba:e2:d4:90:bf:81:11:
8c:35:73:d6:45:13:c7:4d:9c:e7:8e:e9:04:d3:66:
2b:c1:ab:30:f5:3b:34:6f:6e:04:03:f5:0e:2e:fc:
bd:ab:00:ac:f7:11:be:03:c0:cc:b7:66:7d:86:a6:
04:95:13:38:49:32:53:58:43:19:c3:86:08:c3:93:
40:eb:8a:1d:27:ec:90:76:b1:3c:2d:54:00:99:53:
1f:5c:c5:21:0c:a3:0a:46:6f:4b:24:cb:51:a5:6e:
bf:0f:0c:2a:65:7a:f3:39:d8:c8:d1:89:7e:2a:58:
a4:73:3e:07:11:78:ed:4c:47:c6:b7:76:fc:95:47:
0c:9b:b7:1d:d7:cc:b5:03:0c:f1:7a:f4:9a:cb:82:
4d:f8:e3:fe:db:ed:7e:56:e0:ae:27:b9:ea:d8:99:
6d:fe:f2:e8:c4:a6:48:65:a8:8e:48:a1:0d:2d:56:
d3:41:00:6f:6e:c5:e1:da:6f:9e:6f:0a:da:c5:a6:
15:62:af:9c:f1:e6:48:52:77:e0:25:ec:bf:82:11:
4f:98:f3:e4:46:bb:24:bb:59:d1:de:d7:83:64:c1:
cb:b8:d8:e6:5d:97:c1:a2:e6:b3:48:c2:21:3a:19:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CB:0D:80:89:E5:CD:4B:3F:A6:B4:FC:B8:26:6D:60:FB:1D:B4:75
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:58:1b:fb:aa:4a:e1:70:52:87:03:b8:03:da:79:c8:5f:6f:
7d:dc:64:19:84:e2:e7:68:a1:e7:40:04:db:69:9c:86:74:0f:
d8:26:88:bd:04:dd:7a:f7:91:ed:04:a4:58:8a:ee:2d:45:59:
14:cf:9a:a0:60:f7:03:ea:ae:1c:39:60:b0:93:ea:92:f9:49:
01:8b:51:16:f6:25:45:3c:e0:2e:c0:18:33:16:69:67:5e:69:
10:e4:b0:18:9e:51:c9:fd:b1:b5:e1:6c:04:8f:35:06:fb:a7:
aa:cc:23:72:28:63:78:c3:fb:65:ab:92:a0:cc:83:b2:98:55:
3b:f2:fa:40:6c:a6:e6:4c:28:d5:10:0e:13:1f:6e:b1:7c:a8:
4f:d6:61:e2:86:c8:3c:38:74:1d:82:ca:75:4c:c2:67:ba:5c:
c7:1f:74:8d:77:19:2f:3a:aa:1d:96:32:8e:a4:e8:e4:d0:06:
c1:ba:86:d1:3b:7b:14:9a:3e:4b:28:cd:a7:1f:08:9c:26:2e:
c8:68:0b:bc:54:66:72:6b:e7:31:2a:8e:2d:47:f5:f6:95:e2:
56:d6:81:d3:cd:0b:e3:6a:ca:42:be:f9:81:89:5c:a0:f4:96:
29:a8:95:2d:38:40:4d:fa:8b:be:ff:22:bd:a4:8a:82:ff:7a:
e1:3c:26:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:41 2025 by rpki-client