Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
File: faMe6cmJpjEaCP8jIomXhAFBXpE.mft (raw, json)
Hash identifier: 47gbuQt//AlK1Qqw53YUjlUuEp88sMbytWHy3Gc0F4c=
Subject key identifier: 64:38:E9:FE:1A:11:E0:53:17:66:01:7E:46:A9:66:07:36:DD:73:A4
Authority key identifier: 7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
Certificate issuer: /CN=7da31ee9c989a6311a08ff232289978401415e91
Certificate serial: 01964EFE7506C71E31E2826D2C0B4FC1A4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
Manifest number: 0A88
Signing time: Sat 19 Apr 2025 17:00:21 +0000
Manifest this update: Sat 19 Apr 2025 17:00:21 +0000
Manifest next update: Sun 20 Apr 2025 17:00:21 +0000
Files and hashes: 1: UVlXhuX0bvgC_P179eV7Q7dV3kQ.roa (hash: cem7+lm0BpjpPBzCYfd6RxOq5JUr1ids+UD9/WCyjSE=)
2: faMe6cmJpjEaCP8jIomXhAFBXpE.crl (hash: UHE89AC93Dxjm6et6uxrUNK9aP6+MHlT2xLjShPqMNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:75:06:c7:1e:31:e2:82:6d:2c:0b:4f:c1:a4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da31ee9c989a6311a08ff232289978401415e91
Validity
Not Before: Apr 19 17:00:21 2025 GMT
Not After : Apr 20 17:00:21 2025 GMT
Subject: CN=6438e9fe1a11e0531766017e46a9660736dd73a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:ef:1b:bd:ff:2a:3d:38:58:ae:fb:3f:56:
e8:2d:2d:82:b0:4a:c3:f7:13:3c:cb:9b:61:9c:54:
aa:7c:04:ab:9d:e9:33:01:03:01:d5:6f:d3:99:c7:
bf:91:36:cb:79:07:46:8b:2f:b9:1e:34:b1:7d:e0:
6b:bf:d2:ec:f0:69:b7:71:61:a6:37:04:2c:b2:df:
0f:e0:bd:73:b7:b1:8c:13:fc:86:cc:32:6c:22:d0:
38:b4:2e:89:0a:bc:aa:99:5c:ae:79:74:46:a6:73:
7e:3a:c4:99:72:9d:0c:49:38:63:4c:a5:fb:02:57:
fd:b3:04:47:92:54:26:6b:a6:7b:5f:28:0f:2f:57:
19:77:6a:00:b9:af:53:32:5a:d9:d8:4b:5a:63:b0:
1a:2d:d2:90:72:c7:3f:ed:2d:0e:7f:98:b6:a5:60:
21:54:a4:b3:4e:67:46:9e:1c:ce:39:5c:ba:57:66:
ec:97:de:26:25:8f:2b:b9:f5:96:5b:44:15:a7:2b:
97:c5:3e:e0:2a:4a:3f:d5:de:df:ee:a9:ce:63:4a:
91:3c:58:a9:ba:73:87:dd:2c:3d:79:d0:fe:e0:d9:
56:0f:a7:d0:d2:bc:0c:28:5e:9a:77:02:e8:92:f9:
ad:cd:97:fa:0b:5f:2a:af:cd:25:26:d8:7d:2e:7b:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:38:E9:FE:1A:11:E0:53:17:66:01:7E:46:A9:66:07:36:DD:73:A4
X509v3 Authority Key Identifier:
keyid:7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:29:92:3a:8f:f5:d7:97:94:73:7f:6c:04:96:40:10:05:d0:
e9:88:87:1f:f0:10:4e:11:56:78:03:61:9e:47:7a:94:92:3a:
89:38:fc:5f:0e:c0:24:bb:5e:2c:64:39:ac:ce:54:f3:c3:ad:
66:c3:43:b0:0f:d4:79:61:d3:a1:fd:88:61:fd:26:74:f6:75:
d4:22:f9:45:4e:1a:45:45:52:dd:0b:42:11:bf:51:8f:b9:ec:
0a:13:a2:e6:a2:e3:be:11:49:47:46:81:da:57:f3:19:d9:2c:
14:c7:1f:0d:9d:37:15:d3:8c:07:2b:75:6c:7f:a8:b9:09:44:
ed:10:d6:24:36:d0:76:5a:93:e2:73:ad:3b:d0:bb:37:e7:5a:
8e:f2:b9:4f:b5:9d:20:28:ee:ce:12:8d:06:21:1a:fe:b7:e2:
32:97:32:93:aa:1b:c4:bc:7b:a8:38:a5:0a:09:72:e1:bf:ce:
b2:44:8b:77:b9:21:08:0e:42:9c:52:9a:0f:4f:2d:a5:3d:a8:
8f:85:fb:da:06:47:5f:38:2a:a6:1c:3e:70:9c:6d:d3:0a:e1:
30:eb:32:49:4d:88:9a:6e:c2:be:0f:41:60:58:89:bd:3a:66:
8c:f0:b8:4e:cd:03:0a:f3:bb:00:f4:e9:64:0b:5b:99:ca:d9:
4c:6b:41:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:10 2025 by rpki-client