Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
File: fQIT4-fr5hcKNgCo465k7ZYsDjY.mft (raw, json)
Hash identifier: gfKDOJX9txethkbhy8HBVEJjrJgyRmqdmtOcMFU2+XE=
Subject key identifier: 26:C8:37:E0:33:C4:46:82:29:D0:F3:F9:0A:32:7E:36:0B:7F:D4:07
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 019662857CC5D7719A2089F8D02C2CC6B1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
Manifest number: 1504
Signing time: Wed 23 Apr 2025 12:00:37 +0000
Manifest this update: Wed 23 Apr 2025 12:00:37 +0000
Manifest next update: Thu 24 Apr 2025 12:00:37 +0000
Files and hashes: 1: NpvTZ_274K1Bhd3fKXlRT4qqEqg.roa (hash: O7U2IilgFNx0uKZ0Sr7mdLoGiE/mqht2K9UbhPNacVM=)
2: P4rhr2yvQsT2Wmsa0d3b9mzRihQ.roa (hash: yJrwkDYUS+18A8gxekBRmTpvchECkoVfjLp8pGWlkB0=)
3: P_efas48rvkeOWLowealn6FM2EU.roa (hash: bHQu5iQgYpW7McRBDPs2F3TVgL2C6692qQjIPdJ6jr0=)
4: fQIT4-fr5hcKNgCo465k7ZYsDjY.crl (hash: ZrNMdncqUrniexcu/bWdjRCTzaTwmPTcH9GrEjz3x/k=)
5: lMnxmNh0WyR-ZyXRmR4VxessOW0.roa (hash: d+d+I0SIA2DkllPKcjDwQF5GfnIiXguhQ7tmZZ0v1io=)
6: xIJo2EuzM_PScXOHUg-DUkxIyEk.roa (hash: DPBdyOvextHK9GmgkjEDN72tHol0hR/S27niPvwBhyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:85:7c:c5:d7:71:9a:20:89:f8:d0:2c:2c:c6:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Apr 23 12:00:37 2025 GMT
Not After : Apr 24 12:00:37 2025 GMT
Subject: CN=26c837e033c4468229d0f3f90a327e360b7fd407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:31:12:f5:ca:60:05:b3:cd:e7:f0:b8:d1:
b7:ed:e2:54:f0:4f:91:ac:47:4c:9c:ae:c8:f9:af:
95:9b:e5:4a:c3:7f:d9:91:52:b9:5b:ec:82:81:4e:
13:7d:d5:8a:f4:bc:f5:66:0c:5d:8a:a2:ff:d3:74:
6b:5b:9d:ba:f5:84:2f:07:f6:25:b2:5b:93:be:de:
9c:d3:38:70:34:0a:3b:03:e3:fe:be:3b:c1:18:cf:
5a:8a:16:7f:22:82:00:ba:0c:dd:b0:0b:7a:e2:d8:
ab:c5:f5:18:c6:48:7b:d7:dc:75:f1:f0:59:8e:d0:
d6:9e:55:0c:a3:2c:e9:50:63:af:ae:3a:84:7c:27:
5f:b7:24:f0:3a:fe:9c:91:a1:b6:67:79:58:e0:8b:
5e:51:b2:04:42:65:31:6f:fa:7e:72:e2:75:19:24:
59:f7:88:92:68:33:9f:ff:38:1d:d2:36:56:30:91:
3d:2f:3b:c2:00:18:e5:2e:97:2e:1e:a3:ed:b7:9a:
82:8e:58:25:7a:78:9d:38:95:0f:2a:b0:78:6d:b8:
10:d3:6e:41:66:83:d7:ff:ef:21:a2:1e:de:1f:83:
72:a3:7a:02:e2:36:ca:a0:ec:73:68:2e:12:6f:c1:
2d:0b:49:3a:a9:48:58:98:fe:13:4e:e4:fb:f6:a8:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C8:37:E0:33:C4:46:82:29:D0:F3:F9:0A:32:7E:36:0B:7F:D4:07
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:29:11:56:80:14:93:ee:b7:eb:f4:4b:ea:62:03:44:db:9a:
42:f3:54:a1:68:b0:84:dd:11:5c:1f:71:f7:14:d0:ba:af:d0:
32:f4:ea:d2:ed:03:4c:98:6f:32:90:d7:1a:d4:7e:6d:9d:16:
3c:ea:d4:3d:2f:28:6c:0e:d1:b5:e9:39:0c:b0:3f:d1:74:4d:
da:2c:b3:d9:a3:01:85:fe:5d:67:e6:66:ef:c6:2e:2f:b1:f7:
d9:7e:b1:d6:68:3a:e9:c3:f3:d7:76:30:74:30:3f:28:f3:28:
85:b1:77:e6:37:dd:8b:c2:a3:8e:c5:23:95:72:bb:64:aa:8d:
ef:56:67:13:38:b3:5c:18:f4:ea:97:5f:c6:3b:79:87:c4:63:
43:98:b6:06:bd:cc:5c:38:4c:cd:ba:c3:8b:9a:4f:38:1e:cd:
d5:a4:b6:52:b2:16:79:1e:5d:cc:6e:d7:d9:3e:6a:17:bf:5c:
bd:41:42:0e:83:4b:30:0e:3b:63:20:c1:f2:42:7b:9b:82:56:
45:54:6e:cf:ae:42:f4:c5:b4:ce:6e:fe:69:ae:25:02:fa:5d:
bf:e8:45:d1:ac:0a:d4:dc:e1:ce:e0:78:2d:5d:17:1c:18:1d:
f3:08:e0:98:91:14:c9:ce:8b:5e:32:ab:8e:bd:37:16:42:25:
72:7e:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 14:07:49 2025 by rpki-client