Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
File: f_dNq9TrGqEUcUThWwJmnpgv3k0.mft (raw, json)
Hash identifier: cQeAuRzT/+eqiIkex2r+j/vkPHbZlkWpcLBA3dhBjic=
Subject key identifier: F4:9D:50:8F:01:40:D6:17:F3:E9:3F:46:54:D4:85:3A:1D:57:1D:9A
Authority key identifier: 7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
Certificate issuer: /CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
Certificate serial: 0196440D25672B6D06BD9D20447C45DDBE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
Manifest number: 04A0
Signing time: Thu 17 Apr 2025 14:00:34 +0000
Manifest this update: Thu 17 Apr 2025 14:00:34 +0000
Manifest next update: Fri 18 Apr 2025 14:00:34 +0000
Files and hashes: 1: 2MgYI85TPEBCwm2elQTNgUHdzmQ.roa (hash: YR8wZ7h+NpjeTm3CMSeXFipDMaRQTBJNPwjk/7JOMyM=)
2: f_dNq9TrGqEUcUThWwJmnpgv3k0.crl (hash: 9cIQggN6UuvLgOPP8voAMoPBZHe57vIz76xOFzNk0tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:25:67:2b:6d:06:bd:9d:20:44:7c:45:dd:be:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
Validity
Not Before: Apr 17 14:00:34 2025 GMT
Not After : Apr 18 14:00:34 2025 GMT
Subject: CN=f49d508f0140d617f3e93f4654d4853a1d571d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:eb:55:78:f6:2c:76:b1:c1:fb:aa:49:16:8b:
d8:22:65:88:5a:da:cf:70:91:1f:79:b7:2f:d4:5c:
ea:e6:f7:63:c7:9a:7d:8a:6e:08:03:2b:d7:62:b6:
d7:dc:71:0f:23:c5:ee:cf:82:78:3d:c8:bf:25:7a:
35:ef:bd:ae:04:86:63:00:1a:4a:7f:76:17:ab:c1:
ab:58:69:fd:69:e2:04:82:6c:09:e1:e0:8f:35:9a:
aa:8e:d2:44:1c:45:bb:e2:47:ee:9a:b8:2e:35:a5:
c4:5f:03:67:6b:43:7a:fd:35:2d:10:1e:8c:31:4c:
40:64:c9:6c:39:65:69:fa:e5:f2:7c:4d:6d:ad:90:
c5:dd:8c:4f:f8:fa:6f:14:32:a2:b3:8e:e0:f1:73:
a9:f5:ba:4f:a3:4f:a6:47:f4:71:4a:04:79:16:4a:
98:31:83:a5:71:9c:d9:39:7c:d4:0e:49:3c:23:fe:
d5:03:62:46:1f:a0:99:2d:8b:0c:0d:ab:70:d1:83:
22:bd:2c:b9:ba:c6:aa:87:33:de:97:df:4e:61:52:
10:3f:da:71:0a:d6:ab:8f:2e:16:b7:0f:b2:28:a4:
0e:39:bf:75:33:8a:82:ac:f7:7f:36:40:18:46:27:
31:b6:fb:3d:c9:35:4c:9a:0b:01:fd:57:c7:c9:06:
75:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9D:50:8F:01:40:D6:17:F3:E9:3F:46:54:D4:85:3A:1D:57:1D:9A
X509v3 Authority Key Identifier:
keyid:7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9a:b4:b6:e0:1c:09:d6:39:03:a8:99:82:bc:10:0b:4d:bc:
1a:47:f2:dd:d4:b0:4a:50:30:d0:27:fa:d0:44:20:c4:be:7b:
b4:df:5d:5e:63:b1:92:b8:5a:5c:87:cc:7b:0b:1d:26:d6:6d:
64:cc:b8:4f:fb:41:13:64:0a:fc:0a:e3:e6:16:05:9d:a2:44:
66:80:46:44:8f:b7:2b:ad:03:bd:d6:5f:3c:85:a1:9c:c1:79:
1e:2b:d9:29:a7:ec:bf:a1:15:de:75:25:a6:c3:5c:ab:69:46:
fe:7f:14:a7:6f:9c:f7:17:c6:ec:64:33:b3:0d:e9:fe:69:a4:
c7:a6:3e:5a:c4:47:9b:81:18:83:15:8f:af:10:87:d6:60:d0:
89:b6:69:d5:e1:03:95:ac:cb:eb:3a:65:7c:e3:62:ca:81:76:
2a:cc:cc:95:13:c4:4d:c9:b4:f1:bd:94:98:82:32:99:9e:b5:
a4:b8:50:22:ef:6d:94:bf:17:3f:07:9e:f7:d2:d5:ff:12:5c:
19:12:ac:39:82:f7:f1:58:a3:a1:8c:ee:66:a3:2a:d9:8f:61:
81:81:21:31:19:56:9f:ff:8c:b7:63:8c:c2:88:45:25:b8:29:
e8:f0:fe:b0:f7:d4:39:76:0c:0b:13:a6:34:90:e0:55:21:6a:
ca:0d:38:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:24:56 2025 by rpki-client