Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
File: cFo7sRdTjbbbnFz9WnlL899pfCc.mft (raw, json)
Hash identifier: RE7NunUjGQhe94Lmu/XvC/SNv6d3botnKG7g7oFHorY=
Subject key identifier: F7:21:D3:0D:8E:91:21:18:E0:1A:74:EC:B2:DC:BB:AA:C0:B6:DC:DA
Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
Certificate issuer: /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Certificate serial: 01965538B9C8A85FF224B0E5A8CD74E81930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 22:01:42 +0000
Manifest this update: Sun 20 Apr 2025 22:01:42 +0000
Manifest next update: Mon 21 Apr 2025 22:01:42 +0000
Files and hashes: 1: cFo7sRdTjbbbnFz9WnlL899pfCc.crl (hash: Or00mwqGfFb5SrS5a51+K3SELtN38Prrl2WQOwSoXEE=)
2: wL6tLZZKC26B362dOxei9VMeWYo.roa (hash: cyglEBGINCGd1/IgiI+VhGd2UBRJLqq47Yds0263110=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:b9:c8:a8:5f:f2:24:b0:e5:a8:cd:74:e8:19:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Validity
Not Before: Apr 20 22:01:42 2025 GMT
Not After : Apr 21 22:01:42 2025 GMT
Subject: CN=f721d30d8e912118e01a74ecb2dcbbaac0b6dcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:ee:d2:b0:21:b7:5b:fc:e1:50:a3:f5:4b:
70:9b:26:38:87:23:df:ba:b8:5e:be:4e:05:31:f8:
68:54:b3:b1:73:76:c8:7d:03:f6:56:f8:b3:4b:86:
da:b6:7f:c9:3f:82:6e:67:9b:14:b1:2c:a9:5f:47:
aa:fb:85:2e:ba:73:2a:d5:d1:29:81:a5:15:57:cb:
ae:4f:80:10:1c:7e:bf:c6:df:82:54:29:4f:34:59:
6b:d4:a5:f6:b7:33:5f:22:19:7f:7c:32:7a:97:e0:
2c:32:db:af:ce:2d:6a:3d:a8:15:09:35:d1:66:3b:
0b:2e:63:37:d3:9b:df:25:17:a1:2d:9b:f5:70:78:
34:cb:48:10:a7:a1:22:b5:53:4a:f7:97:42:42:98:
41:98:ae:9b:71:37:df:48:25:16:11:71:ed:f9:c3:
f5:e5:95:6a:fd:b5:42:5e:47:c6:c2:60:f6:15:04:
34:05:c9:1c:5e:da:81:5c:53:23:d9:01:7b:88:d5:
0e:24:3d:70:f0:eb:98:d3:b3:fc:26:79:1a:73:eb:
15:84:94:e8:60:ed:e4:f5:c2:bf:58:5c:a8:18:0b:
f8:19:8e:23:76:6d:8c:b4:1b:82:ba:c8:e5:42:77:
61:77:65:7d:38:55:e7:18:ca:f7:bb:89:50:98:79:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:21:D3:0D:8E:91:21:18:E0:1A:74:EC:B2:DC:BB:AA:C0:B6:DC:DA
X509v3 Authority Key Identifier:
keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1f:b1:88:30:23:65:54:5e:7f:2d:62:b2:21:2c:7a:13:c4:
d6:bf:79:60:e9:53:44:38:5f:e3:e7:e3:e4:e8:71:11:65:0d:
e8:5e:98:56:26:ff:8e:1c:ac:68:47:03:6e:28:0c:18:43:80:
dc:75:eb:1f:bf:a6:03:09:53:d0:40:1f:6d:05:3d:1b:b7:bd:
c6:fc:ee:21:ec:1d:c4:16:05:03:04:1d:f2:98:3f:87:e2:df:
52:c2:1f:be:b4:d5:a6:75:10:7a:b5:80:bd:57:76:e8:c3:e7:
1f:6b:e0:ec:1f:d6:70:55:af:a3:12:97:7d:e5:6b:fd:79:43:
32:6e:74:9c:02:0f:56:3c:b8:99:31:2f:ae:f1:e2:e5:02:50:
17:5a:43:5f:ea:d3:d5:6d:14:47:31:ba:c5:76:03:8b:94:10:
fa:3b:f3:77:44:6f:22:61:66:53:35:66:21:4a:5c:c8:38:f7:
06:3e:6d:2a:4f:3d:36:b3:a8:a0:f5:4e:92:83:d0:04:4f:c7:
59:b6:00:82:43:52:43:a1:cd:42:3b:2b:b2:57:b7:87:4f:9a:
1e:9f:fd:d8:e0:50:4e:d1:42:6f:02:b5:23:21:aa:49:7f:fd:
f5:cb:e0:92:a3:05:63:d6:0a:ec:05:fc:54:b3:34:53:f6:1a:
03:8a:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:49 2025 by rpki-client