Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
File: F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json)
Hash identifier: 8+71f+P/6r3A8Hkj5i4Rw0kBPi3j5amH9I7zjEouBg8=
Subject key identifier: 2B:06:53:B7:FB:AC:3C:00:15:17:01:1A:09:77:7B:3E:10:1E:A2:ED
Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
Certificate issuer: /CN=175a20608ace11e7511c8669560636730a9e2abf
Certificate serial: 01963F1D73F826C0FBE4E072D23B61852DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
Manifest number: 03AE
Signing time: Wed 16 Apr 2025 15:00:16 +0000
Manifest this update: Wed 16 Apr 2025 15:00:16 +0000
Manifest next update: Thu 17 Apr 2025 15:00:16 +0000
Files and hashes: 1: 2U-2Eym6KYW6qLxuFsjcorsxKnc.roa (hash: KrlvkjS9SKD/PHB33xX+CX5Zyn9t48T8ugGL2ErULzA=)
2: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: qkMRjrMcszBtEi41FoQRY/FqbAZX3diyT10Zg85fFL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:73:f8:26:c0:fb:e4:e0:72:d2:3b:61:85:2d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf
Validity
Not Before: Apr 16 15:00:16 2025 GMT
Not After : Apr 17 15:00:16 2025 GMT
Subject: CN=2b0653b7fbac3c001517011a09777b3e101ea2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:3d:1e:af:13:df:9b:cd:5f:3e:74:e2:f9:
f5:2e:36:ae:9d:1f:10:47:e3:f5:7b:bb:58:fe:cd:
26:a4:bf:bf:16:75:31:02:46:9f:01:62:9d:33:9a:
97:8e:a3:d4:d3:37:33:ae:cc:d8:d7:7d:47:ff:ff:
7b:fb:c4:b2:89:e6:a6:57:04:78:94:f0:d0:d4:e5:
3c:b4:c5:08:71:fe:76:c4:bc:f4:b3:84:da:67:82:
11:80:0c:ff:6c:0d:67:0e:58:63:c8:6d:34:55:a6:
29:52:28:78:c6:f3:e9:97:de:88:e5:47:b5:be:1a:
11:20:ea:ba:4d:7e:7c:68:75:05:62:57:f5:5c:41:
32:c2:bb:7b:f5:e9:3c:40:7e:27:e0:1b:53:38:bd:
73:59:f1:ba:05:7d:8a:02:69:eb:dd:c4:22:b3:3d:
a3:18:a4:d6:55:d5:cb:13:e3:ee:e4:5f:ad:6c:7a:
64:75:f5:f0:ba:4f:69:96:e3:7b:94:fa:ff:26:cf:
c7:16:52:64:dd:ac:45:5b:63:25:cf:b3:17:0f:a8:
2a:cf:15:25:14:0c:07:ff:32:03:4e:6f:53:8e:a5:
d2:2f:6e:a3:f4:69:5f:bf:01:a1:9c:28:b1:04:ea:
fd:b3:d5:cb:04:ef:10:d6:51:5a:3b:63:69:f2:b8:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:06:53:B7:FB:AC:3C:00:15:17:01:1A:09:77:7B:3E:10:1E:A2:ED
X509v3 Authority Key Identifier:
keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2f:02:1f:3e:cd:00:14:a4:72:5a:9c:41:e7:07:b0:19:29:
ce:05:99:b7:b9:12:b7:5b:7b:8f:b8:7a:f1:cc:65:4a:d6:7d:
71:c5:4b:b0:26:78:d8:75:7c:1c:55:2f:43:19:82:3c:e3:82:
46:ac:6a:8c:42:a3:e6:82:63:61:9f:05:a4:0f:c0:ec:42:a4:
dd:b9:1d:61:3a:f0:37:9c:86:ec:ab:93:04:7b:1c:e4:50:ec:
b0:83:f7:4d:28:36:65:d9:1d:77:a0:27:41:e5:9e:2b:f1:31:
e5:8f:6c:b5:6e:52:69:77:c3:c0:78:5b:ff:5f:8f:68:d8:e3:
45:ff:f8:f7:04:24:da:b8:bd:9b:24:80:01:a4:22:3a:05:d8:
2a:04:81:4e:a0:a0:fc:35:d5:7a:34:a8:85:73:3a:7c:c7:08:
58:67:00:1f:9b:97:f2:3d:b5:0b:48:8b:4b:ea:fc:64:a8:06:
c6:25:51:79:d6:12:14:3f:59:b1:dd:4c:58:fe:c4:c1:78:b4:
4c:3b:46:fa:ed:df:27:26:ad:c6:de:d1:41:d7:c7:0c:b1:e4:
96:0a:14:2a:8a:31:1c:e2:c6:07:a2:f0:65:a3:f7:27:c9:da:
d1:c2:39:20:8f:46:95:40:d5:f3:17:81:c5:e4:b9:6e:c5:e7:
64:9d:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:14:30 2025 by rpki-client