Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: Qg7F595O/k0vFdiqlMAx3OexNoZy0YFjL+aLrtWHCqc=
Subject key identifier: 98:A1:A9:00:B6:9A:AF:58:E7:F2:B2:75:0C:B5:22:4E:2E:3F:B1:31
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 01962C05617C4AB1CBFEE81302E4360597ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 14EB
Signing time: Sat 12 Apr 2025 22:01:12 +0000
Manifest this update: Sat 12 Apr 2025 22:01:12 +0000
Manifest next update: Sun 13 Apr 2025 22:01:12 +0000
Files and hashes: 1: MLwEXlz7vUwc5SjWgOx55jqHjfY.roa (hash: nEFYTn5TUjsaiq+RhC3lF8ai3Uf+0UFa/4rn5vibuks=)
2: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: K/gZ2Sm/kofqjxz5SXHkojsosKcR65vJ4PiM6CvTaHw=)
3: mfViMC5WzFmHy2d2V9evB-1C54M.roa (hash: AYo63SdEVlQlgz+glCe/AMcSKXW/Zi4rvSvNYshL2xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:05:61:7c:4a:b1:cb:fe:e8:13:02:e4:36:05:97:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Apr 12 22:01:12 2025 GMT
Not After : Apr 13 22:01:12 2025 GMT
Subject: CN=98a1a900b69aaf58e7f2b2750cb5224e2e3fb131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:10:54:19:b0:7a:b3:c9:6a:73:f3:42:59:
99:b9:57:c0:15:ed:45:64:9b:68:fc:58:04:79:f0:
3b:86:28:8d:9e:3f:7b:59:2b:bb:22:52:82:b2:1c:
df:d7:3f:32:e7:ce:f9:2d:6e:42:c5:09:e8:e4:dd:
05:53:e1:58:d6:d9:60:86:1b:f2:6f:64:10:d3:7b:
4a:61:03:f9:1e:d8:05:98:69:ab:a9:aa:8b:fd:4a:
24:29:a4:47:4d:d8:80:dd:62:97:8c:c5:15:fe:0f:
df:7c:e6:47:11:2a:c0:60:c0:77:5a:46:85:7c:8c:
41:3c:8f:4e:b1:c5:a8:b0:43:32:f4:e8:f0:f6:4e:
75:b4:92:b9:6b:04:f4:3b:b2:4a:35:06:c2:d0:16:
e1:c5:db:09:48:60:41:d6:13:39:f9:81:4d:ff:b7:
63:2d:f3:c5:a8:02:42:a7:0b:e0:ef:c0:14:68:9a:
b9:ec:02:83:5f:cf:cf:08:a5:71:d3:31:82:71:81:
0b:9b:3e:ae:d2:0d:26:c1:a9:c4:35:8b:fe:2b:73:
6d:e1:50:ed:fa:8b:c6:5c:a7:01:d0:52:5f:41:64:
0e:0e:5f:dd:be:81:03:36:2a:d1:ff:63:6a:9c:21:
2d:90:27:cd:70:39:66:69:2c:7b:db:51:fd:78:cd:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A1:A9:00:B6:9A:AF:58:E7:F2:B2:75:0C:B5:22:4E:2E:3F:B1:31
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:81:ec:a0:f2:5e:f0:c1:ae:d9:62:4c:ac:24:32:65:20:01:
d5:6b:ba:0c:21:d6:da:cd:1a:8a:6d:7b:b1:41:ff:be:a2:1e:
96:01:7c:2c:cd:7f:5b:28:ba:12:41:0d:c5:74:6d:7e:76:bd:
4a:63:01:dc:b1:32:29:ee:3d:81:48:9a:0a:74:3d:97:b9:e7:
ab:87:46:d7:6d:2e:0d:d8:62:e5:b9:51:59:51:44:5d:ac:70:
c6:cd:fc:a4:fd:ec:4b:0f:62:3e:65:77:13:fc:cd:d5:a0:9d:
32:51:18:d9:19:79:6a:c1:15:41:15:b4:5f:5d:84:9f:ab:86:
b6:29:92:26:9f:f9:83:64:f3:c5:98:c3:62:35:c8:74:4e:44:
22:f7:1f:37:8a:96:90:3f:e4:84:2f:5d:54:d1:60:13:b0:6f:
a4:b3:78:9c:9d:9a:9d:e1:0b:29:eb:8d:ea:d4:bf:a1:cf:d6:
70:9f:1b:41:fa:77:c5:2c:19:ce:2e:f2:2a:31:17:98:53:5a:
1a:b9:fe:73:99:db:a1:76:b6:e9:1c:24:26:23:36:99:32:3e:
4c:f7:6e:33:f1:43:08:9a:1d:2b:ba:1b:d8:a7:eb:44:fb:42:
07:bb:b7:e2:93:49:50:3e:d0:3d:5f:4b:2e:6f:d7:21:e2:76:
aa:2e:82:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:33:02 2025 by rpki-client