Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File: fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier: LLahag6sAP7NY6GHjweIN7YttyvqBWZOiSlfAzJc+ew=
Subject key identifier: DD:79:D4:11:7E:C6:00:4D:D3:43:C1:C3:4C:5C:28:EA:E0:F2:4D:6D
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial: 01958EBC6B6C5511D525FC307CBD10AD4977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number: 0F0A
Signing time: Thu 13 Mar 2025 09:01:07 +0000
Manifest this update: Thu 13 Mar 2025 09:01:07 +0000
Manifest next update: Fri 14 Mar 2025 09:01:07 +0000
Files and hashes: 1: aO3R8Yo3eBCEfuvERnCJCw4GHKw.roa (hash: 0+s8Oxr+vc9N7zEky4ZV5zDnUpXVmpiBsxhTGsefbzg=)
2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: 18hJLTzgXZSztcB0HJ13cWvqkZ8ItgbY3KF4SUvo6Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bc:6b:6c:55:11:d5:25:fc:30:7c:bd:10:ad:49:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
Validity
Not Before: Mar 13 09:01:07 2025 GMT
Not After : Mar 14 09:01:07 2025 GMT
Subject: CN=dd79d4117ec6004dd343c1c34c5c28eae0f24d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:89:3f:38:ee:ea:eb:61:f1:a9:bd:8c:4a:
07:26:e9:12:a6:5c:32:a4:ee:62:fb:08:88:d9:82:
e8:0d:10:97:b2:01:96:19:73:08:df:27:2d:4d:ef:
4a:0d:8d:9f:a4:57:c2:aa:1c:1e:d0:c3:a6:10:09:
6b:f7:7c:70:a5:14:fd:76:5b:b6:0b:53:04:f0:fc:
02:ae:c3:09:59:17:21:68:cb:e2:31:db:b9:02:cc:
75:a0:4d:c8:27:c8:28:ba:2f:d4:7f:e2:94:80:c8:
3c:70:35:58:91:33:0f:97:5a:9d:a4:11:99:e2:51:
b7:3c:42:85:d7:7a:81:c0:7f:0f:e0:b6:41:8d:36:
b9:9e:c3:b2:98:e0:1b:97:f5:83:5c:90:c9:ca:9e:
bd:93:a8:6b:73:eb:b2:1b:ae:0a:10:db:20:cb:82:
60:c6:2c:57:1d:bf:78:8b:27:68:b4:6b:5a:7f:1a:
87:5b:b4:28:d8:e5:6a:92:d3:7a:71:37:91:bb:cf:
1e:7a:07:9f:1a:37:25:41:ed:d2:33:68:19:75:46:
54:50:55:18:ce:26:01:e0:aa:22:75:8d:e2:14:5a:
15:74:88:d1:0c:b8:66:a8:f8:f8:50:7b:56:d8:bb:
cb:38:48:97:fe:e4:b0:99:5a:b7:72:7d:ef:06:19:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:79:D4:11:7E:C6:00:4D:D3:43:C1:C3:4C:5C:28:EA:E0:F2:4D:6D
X509v3 Authority Key Identifier:
keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bf:54:72:da:e5:b7:46:e3:ab:f6:c5:28:ec:10:f9:ee:d9:
44:cc:6a:e2:4d:c8:5c:dc:c9:b2:02:4a:a1:26:37:83:f9:cb:
f9:f2:59:a0:f6:0d:36:36:cd:7c:8c:0c:80:99:f1:94:73:8e:
5e:82:b0:12:d2:4b:cf:05:41:12:39:17:83:34:b1:c1:10:3f:
97:70:98:36:27:9e:bd:f1:55:89:dd:16:ff:e4:d9:64:15:ec:
d9:ab:7c:0f:23:ee:b3:7f:24:31:c3:33:8b:e7:68:75:82:1e:
8f:a6:1c:72:7d:78:d8:bf:88:bb:4d:f6:03:25:1c:eb:ab:bd:
22:34:26:d8:5b:d8:2d:76:89:ba:b8:d1:ac:14:c9:85:7d:d3:
eb:b3:52:35:1e:f3:6f:96:58:da:74:59:96:06:cc:17:03:14:
5f:03:4f:20:9c:f8:3d:d4:e9:37:a5:65:14:a0:99:d2:0a:90:
09:0a:4a:b1:63:3e:f1:91:78:73:d8:29:16:7b:46:10:20:ad:
18:d4:bc:bd:b6:12:5d:ac:39:41:e2:00:7f:fb:78:51:6c:2e:
d3:30:d1:cd:2b:61:71:2b:6a:64:be:45:5c:ad:fe:5e:f8:fc:
7c:a5:50:ca:dd:99:9e:42:44:1d:50:90:4f:d5:ce:04:75:07:
bd:3b:e3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:25 2025 by rpki-client