Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: xu6G8N1DbBOBpjtVX3k78urGsGryDqC0pQwNx79hkBE=
Subject key identifier: A2:54:10:B1:33:F5:B1:5A:89:64:2A:53:1B:92:80:4C:BA:E0:B9:40
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 0196305045B13054F9301C85ED611A4E63EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 1196
Signing time: Sun 13 Apr 2025 18:01:29 +0000
Manifest this update: Sun 13 Apr 2025 18:01:29 +0000
Manifest next update: Mon 14 Apr 2025 18:01:29 +0000
Files and hashes: 1: SSnanM1-AOhB6jazpGw2Wx5qtsA.roa (hash: PJm2LHbdL6q86F0ojR19eAq4coi3I/A843rYXRGwOLE=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: 2C6rKf932B49l9k33+qBiJx/jqD1fPwCSZwgfCJCOL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:50:45:b1:30:54:f9:30:1c:85:ed:61:1a:4e:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Apr 13 18:01:29 2025 GMT
Not After : Apr 14 18:01:29 2025 GMT
Subject: CN=a25410b133f5b15a89642a531b92804cbae0b940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:a7:ec:8c:50:19:8e:5a:c1:86:cf:8d:d9:
be:92:52:ac:a4:ae:eb:09:a4:d9:26:c9:fc:cd:6f:
7f:18:54:10:f2:31:75:3b:0a:95:8e:e4:e3:5c:40:
c2:c7:1a:8b:6b:57:78:f1:ae:00:a4:7c:ac:50:ac:
f6:b0:c6:27:f1:c3:26:e4:a3:43:94:23:7b:52:24:
3c:85:44:cf:79:cc:02:c2:94:d6:a2:63:ef:d8:07:
45:e7:fe:f4:5f:e8:c6:ea:f7:a7:18:1d:bd:97:40:
50:03:b4:c8:a4:39:a2:be:28:08:5d:c8:92:09:2a:
b9:1f:31:29:de:f1:e7:76:cf:df:f0:51:0f:29:8c:
0b:22:48:d7:a8:f5:35:d1:a6:00:fa:f8:28:a6:4e:
db:ce:36:bc:72:89:5d:80:c9:12:60:a0:50:52:5f:
45:0a:43:aa:32:1d:ae:4e:8b:4b:90:eb:f2:05:0e:
77:de:00:cb:62:f1:3f:62:92:0c:16:d0:8e:7a:47:
ba:f2:17:10:f7:76:36:ce:de:03:4a:9d:dc:3a:cf:
7d:23:c5:c3:85:49:2c:5f:e7:91:82:19:99:ae:2d:
d3:cc:1b:1c:1d:5b:46:5c:dc:0a:59:92:58:4a:f4:
78:11:02:2a:9a:7c:94:7f:58:50:be:f3:48:c5:1f:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:54:10:B1:33:F5:B1:5A:89:64:2A:53:1B:92:80:4C:BA:E0:B9:40
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ba:04:62:f5:c8:13:b5:ef:43:14:6f:3e:c4:ed:b5:e7:b2:
4b:03:89:ca:c7:89:1a:b9:55:0b:6d:a5:90:7e:47:3b:74:48:
5a:5f:2b:88:9f:41:5c:9a:02:46:4c:d3:3b:6d:8f:0d:ce:b2:
a3:2a:27:52:13:7b:97:ee:08:e3:26:73:cd:23:71:92:4c:4f:
97:38:11:96:1e:52:2c:45:9e:ca:06:ee:80:62:72:64:24:a6:
46:b2:6b:6a:a6:72:4d:23:77:b2:1c:25:2f:3f:52:91:90:5e:
53:d6:0c:69:3f:0a:61:18:43:a6:24:fb:f0:e0:82:83:09:92:
dc:7d:39:6b:d8:88:96:5a:5a:26:d7:be:10:17:71:6f:12:2d:
12:39:84:3d:07:e8:ba:68:25:06:90:28:c3:90:65:c0:b1:1e:
15:27:f4:44:32:28:79:d4:61:8c:83:60:1a:54:26:f0:35:70:
72:01:7f:90:21:ee:16:16:16:f8:60:fa:17:08:40:bc:a3:8c:
5b:05:a2:bf:3f:93:f2:a8:a4:e9:53:d9:6b:16:70:bf:ad:c4:
b8:46:a3:33:aa:77:01:b4:b0:c8:61:9b:4f:da:4e:f1:c3:2a:
52:84:d5:a0:0a:97:bd:83:61:52:94:02:d8:0f:45:c5:71:22:
40:86:a5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:28:12 2025 by rpki-client