Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
File: fdw2QUyZG_qNkvYCflMINwsitqY.mft (raw, json)
Hash identifier: SnVVrlr5EPq/tMgSH6X1FF5wDRpf548XWNxPrcL6FCw=
Subject key identifier: 27:09:AA:B6:74:AE:AF:AA:9F:27:08:CC:2F:D6:D9:8A:52:2B:44:A2
Authority key identifier: 7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
Certificate issuer: /CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Certificate serial: 01964EFE6987F8539EC76C48DD826BA40363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
Manifest number: 0651
Signing time: Sat 19 Apr 2025 17:00:17 +0000
Manifest this update: Sat 19 Apr 2025 17:00:17 +0000
Manifest next update: Sun 20 Apr 2025 17:00:17 +0000
Files and hashes: 1: fIi6Y7TMQAIgGM-S2BYF-rhLP0U.roa (hash: frVihHDK+8j5US3CUXtBypHsqdv++cToSbTh8ao+mTk=)
2: fdw2QUyZG_qNkvYCflMINwsitqY.crl (hash: Q8gH8P92xhtfQPxwhxrYsqNrachvgOosm01lCUQ1GLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:69:87:f8:53:9e:c7:6c:48:dd:82:6b:a4:03:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Validity
Not Before: Apr 19 17:00:17 2025 GMT
Not After : Apr 20 17:00:17 2025 GMT
Subject: CN=2709aab674aeafaa9f2708cc2fd6d98a522b44a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:aa:99:77:8c:db:aa:43:6a:94:38:52:0d:21:
2a:e4:12:7b:af:41:ee:3c:22:be:16:d9:96:8d:61:
11:43:02:d8:0a:d7:12:8b:7c:7c:c2:39:4f:01:69:
75:92:61:8b:b1:e0:42:a2:25:1f:21:4f:6e:93:c3:
cb:1d:2f:1b:5c:cb:f4:2d:3b:b4:43:3a:0f:ec:e4:
46:a5:47:50:ea:17:b9:55:d2:f2:a7:fc:23:39:6a:
20:01:7a:35:17:18:96:95:d5:01:57:0c:d7:69:15:
88:49:e0:b4:a7:b5:36:64:87:92:ec:aa:83:73:97:
e3:11:ec:0e:09:34:01:9d:8c:ed:c8:56:de:36:da:
66:d4:d2:56:8a:37:13:a2:a9:b0:a4:08:4f:70:eb:
93:87:55:7e:ee:6b:3a:78:ed:28:c1:a4:62:95:67:
ec:aa:f3:a0:56:4b:b8:b1:96:ae:3a:80:bb:64:54:
ab:8b:1c:3d:d3:f1:d7:77:4b:89:0c:76:e3:e0:c8:
52:36:d4:9b:85:35:0a:34:94:19:5c:76:b2:5b:54:
78:6f:7a:38:b0:3c:ed:66:bf:0b:77:1d:32:a4:92:
40:c4:ed:b0:7c:e3:be:41:00:f9:27:1b:85:ce:f8:
0b:6b:17:5a:c8:51:f4:0d:9b:fd:00:e6:95:f4:0c:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:09:AA:B6:74:AE:AF:AA:9F:27:08:CC:2F:D6:D9:8A:52:2B:44:A2
X509v3 Authority Key Identifier:
keyid:7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:da:b6:ce:d9:b1:fd:51:8c:1e:f8:85:18:fb:6f:0a:6d:c2:
9a:75:ac:b2:fe:4b:8e:70:07:89:b1:fb:29:73:73:9e:0a:ae:
e5:9b:4b:f2:a9:f8:4b:66:7d:22:42:fe:cf:b1:ca:24:d8:15:
41:33:d6:5d:74:d3:71:5b:72:2c:ed:01:f3:fa:67:14:0f:2e:
49:33:48:8f:c5:60:40:c2:5c:d9:e9:3c:18:29:85:81:9a:6d:
2b:70:d4:f8:8d:63:d6:1d:7a:8d:7f:20:0a:21:66:9a:dc:80:
e7:b1:26:f6:43:10:d4:a4:e1:45:5f:73:29:04:db:65:0a:5b:
eb:a0:69:1e:75:52:60:8f:3d:da:8c:9c:37:da:d5:e9:8e:aa:
f4:40:9a:a9:47:ae:71:66:d2:b4:00:75:8d:b4:ca:dc:7a:37:
f8:e2:ec:82:12:88:03:a9:65:a9:be:3b:41:94:27:a9:51:2d:
bc:a9:80:6b:ef:4e:b2:43:bb:a6:cf:a3:82:63:0a:80:0a:a8:
85:d9:d5:61:c0:96:55:a4:27:6b:ae:61:85:43:79:ab:bc:cc:
ca:44:cc:b5:29:a9:9a:18:4c:a3:1e:80:48:99:1c:ec:cd:86:
cf:a3:48:e2:2d:2f:1f:e5:5d:b6:f4:e8:8f:09:0b:68:3b:a6:
65:6e:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:27 2025 by rpki-client