Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
File: fF27C541OBhfPm1uPH2i-JIsjOA.mft (raw, json)
Hash identifier: 89+kuR0OfbKBd9Tnfewd0p9mK/NqDB4NS/SIZQJP1VM=
Subject key identifier: 7F:5A:09:F9:35:CE:68:C5:36:80:E6:7D:F0:28:24:96:71:C1:0B:F6
Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
Certificate issuer: /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Certificate serial: 019612B384222471143D86CAAE0ABD8BFB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
Manifest number: 064E
Signing time: Tue 08 Apr 2025 00:01:16 +0000
Manifest this update: Tue 08 Apr 2025 00:01:16 +0000
Manifest next update: Wed 09 Apr 2025 00:01:16 +0000
Files and hashes: 1: fF27C541OBhfPm1uPH2i-JIsjOA.crl (hash: 1Fg2UVmJzdXOFgZyEvHiyvvl1VD5l5c/3ZTCA8y0GGI=)
2: q-UjelWVJEcPadl31G47nebbXb8.roa (hash: 65aJhppjeAJp5scwXUtr/SDly2MObd0FzMz5wed2pGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:b3:84:22:24:71:14:3d:86:ca:ae:0a:bd:8b:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Validity
Not Before: Apr 8 00:01:16 2025 GMT
Not After : Apr 9 00:01:16 2025 GMT
Subject: CN=7f5a09f935ce68c53680e67df028249671c10bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:fc:32:b3:7f:b6:bb:af:89:7b:56:81:1c:
c3:23:4e:89:21:8b:e7:33:87:88:72:83:5f:03:42:
18:12:1e:3d:ab:55:61:47:db:61:ed:37:e1:86:c1:
f6:6c:49:a2:b6:d4:b4:cc:3d:e7:d8:58:8d:e0:31:
48:57:3f:0a:54:14:89:9f:ae:08:18:ef:fe:ec:25:
4d:ca:89:80:e9:c6:9e:10:ce:f2:5b:45:b1:de:f6:
07:3f:79:1c:4c:f3:ad:b5:61:fd:75:46:fd:72:eb:
4c:e0:fb:d3:e0:08:61:5c:08:65:96:b6:35:06:8e:
5c:b1:bb:67:0a:25:d4:d3:3e:7b:d7:2b:18:c7:61:
99:b7:a3:93:77:0f:97:85:43:ea:60:91:04:65:af:
d0:cc:cc:63:52:8f:6e:07:8c:c9:42:56:e3:cd:91:
97:f7:74:81:35:9e:2c:0b:ba:26:56:62:37:59:f4:
a8:79:ce:fc:21:c0:bb:7b:cd:0b:11:07:e6:9b:0b:
ea:f4:68:08:9a:f3:c0:95:f9:e8:f2:6c:2d:8f:2f:
c6:7c:82:12:da:08:68:5b:a8:36:36:2e:f6:e5:fc:
b1:8f:5c:44:8b:8f:72:01:45:93:21:53:41:c8:4e:
e4:e3:1a:90:b8:ad:ad:b0:d6:4e:57:0d:07:52:f9:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5A:09:F9:35:CE:68:C5:36:80:E6:7D:F0:28:24:96:71:C1:0B:F6
X509v3 Authority Key Identifier:
keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a8:e9:1b:8d:bb:a5:8e:bd:f9:3d:06:1f:74:10:d4:a8:45:
fd:5c:0e:91:b6:91:4d:84:ac:ca:87:6c:ca:ea:72:4b:5d:5c:
37:85:83:60:a9:c3:4f:60:8b:da:16:84:e2:45:fc:a0:7f:f3:
91:f5:0f:bd:6a:d0:29:3d:78:cd:23:c6:78:f0:39:45:8c:c5:
28:5b:97:71:d7:f2:dc:ce:cf:e0:7e:2b:14:ce:5d:18:77:b6:
40:ed:d2:30:c0:03:91:f7:bd:09:ee:94:74:39:28:be:1f:34:
df:80:7a:2b:55:ba:2e:01:57:86:51:e0:a3:7c:5e:02:f1:11:
19:c7:b3:69:c0:e2:51:8a:7a:8e:a3:09:91:47:a2:4b:0b:9d:
b7:fd:b7:65:4a:bf:0d:3c:99:e8:4a:40:e5:7c:de:1c:e8:17:
19:6d:91:18:39:66:2b:18:3e:a9:1e:a8:48:5c:d4:1a:b0:2f:
58:da:80:bf:f1:f2:25:e3:7c:e8:4f:7b:ba:9d:d6:26:11:08:
ae:49:08:b1:48:7a:40:4d:ce:05:3c:ea:dc:09:e2:cb:5d:d2:
99:ca:6a:4d:95:a2:b9:b0:5f:5b:35:e4:55:36:48:90:de:7b:
f5:77:3a:61:52:d7:47:85:f6:d8:65:b6:42:b6:d4:17:75:34:
52:8f:a8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:55:18 2025 by rpki-client