Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.mft
File: foYqjKWsvWxd_CQSbDOqCpTg4fI.mft (raw, json)
Hash identifier: htnBaEOmDJNpYGipfaFPTSoCtlAp+PDclfCs1aiRiTs=
Subject key identifier: 4B:D0:68:A8:2D:50:38:91:3B:28:AA:E9:25:39:31:F1:8F:1E:34:0C
Authority key identifier: 7E:86:2A:8C:A5:AC:BD:6C:5D:FC:24:12:6C:33:AA:0A:94:E0:E1:F2
Certificate issuer: /CN=7e862a8ca5acbd6c5dfc24126c33aa0a94e0e1f2
Certificate serial: 019659F05E40A12771AE6DAD343704F1E67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/foYqjKWsvWxd_CQSbDOqCpTg4fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.mft
Manifest number: 1493
Signing time: Mon 21 Apr 2025 20:00:47 +0000
Manifest this update: Mon 21 Apr 2025 20:00:47 +0000
Manifest next update: Tue 22 Apr 2025 20:00:47 +0000
Files and hashes: 1: D4wCbjO_RP9FBGbgF9yMu8ejHEk.roa (hash: t1nErlMSEECwXjWvAJkKfIdfWAr8lZ7TpdgAigsb7Ao=)
2: foYqjKWsvWxd_CQSbDOqCpTg4fI.crl (hash: bMPU9K1LTUnb9ddrqqLSSNR2CTadybJCWuzAJ2PeW5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.mft
rsync://rpki.ripe.net/repository/DEFAULT/foYqjKWsvWxd_CQSbDOqCpTg4fI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:5e:40:a1:27:71:ae:6d:ad:34:37:04:f1:e6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e862a8ca5acbd6c5dfc24126c33aa0a94e0e1f2
Validity
Not Before: Apr 21 20:00:47 2025 GMT
Not After : Apr 22 20:00:47 2025 GMT
Subject: CN=4bd068a82d5038913b28aae9253931f18f1e340c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:fe:6e:e6:d6:dd:c9:98:a7:07:f8:0f:be:
80:bf:85:b1:36:f6:6d:84:4c:d1:c3:3a:e3:2c:36:
23:51:eb:46:82:58:50:7e:3e:68:73:67:55:fa:30:
f2:d8:87:57:0a:a5:5d:db:e0:81:af:e1:d7:82:f5:
57:a1:d4:ac:52:34:e1:1c:94:28:5f:ff:73:b1:5f:
e8:d6:ac:7b:4e:0a:e1:6f:d7:d7:1b:a3:a4:fb:13:
72:2b:12:0d:c0:55:0d:dd:d0:8c:3d:9f:e5:1c:5e:
de:c7:97:8c:0b:fb:7d:c6:40:53:e0:23:8f:ac:91:
20:82:72:5d:b8:0c:2c:0b:f8:d5:b6:10:19:e1:81:
c4:2a:a0:78:a4:bd:95:51:f3:98:12:eb:f6:38:e3:
1f:f1:2f:e5:a1:56:80:5e:60:4a:ad:0c:ec:a4:fc:
c1:6a:1f:3f:6b:25:aa:cd:7b:74:f9:19:da:d9:22:
21:84:c9:1f:d1:50:e6:90:6f:f9:cc:27:d5:a0:50:
04:e2:af:fc:16:98:c7:e0:09:66:2c:ca:f8:db:c4:
e6:f4:44:42:8d:68:d8:22:5e:37:0f:32:93:50:6b:
8c:6a:5d:77:5d:b6:98:98:93:35:83:51:98:8e:7e:
07:6e:fc:70:00:ab:9d:cf:6b:1d:9a:1d:13:eb:f6:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D0:68:A8:2D:50:38:91:3B:28:AA:E9:25:39:31:F1:8F:1E:34:0C
X509v3 Authority Key Identifier:
keyid:7E:86:2A:8C:A5:AC:BD:6C:5D:FC:24:12:6C:33:AA:0A:94:E0:E1:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/foYqjKWsvWxd_CQSbDOqCpTg4fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:61:1e:12:fc:86:85:cb:1f:0f:fc:70:c8:5a:f7:de:8c:41:
16:33:8f:91:00:ed:3b:82:ac:cc:3b:98:36:9f:d6:8d:b0:70:
95:f7:f6:f6:ff:67:93:30:e4:15:c4:a9:d6:56:de:ec:f2:12:
1b:fe:9c:e7:e3:c4:b3:a2:15:27:9a:52:c1:7a:de:9f:46:3d:
56:6a:54:68:b1:9f:b6:4e:55:ae:aa:b5:70:42:f8:96:c5:11:
bd:5f:75:87:44:8d:74:3e:b7:33:0f:dc:b5:46:bf:47:93:fe:
79:19:74:43:1e:b8:b8:55:c2:2c:a0:51:37:18:40:9e:a0:2c:
60:91:b7:9d:1a:89:64:46:d7:b7:0c:10:9c:fe:ba:ed:5b:85:
78:20:5d:a2:4f:a7:cd:d7:5c:f2:99:63:9a:ac:64:5f:78:c1:
d5:a0:e3:d3:c4:aa:7a:68:db:bf:2a:fe:ae:37:6f:94:7a:25:
f6:d7:7a:a8:4f:63:12:75:4d:59:63:a8:97:43:2f:05:05:9d:
8b:64:1d:f9:06:4f:86:48:5e:22:7d:55:40:cb:f5:59:c7:f2:
a5:a5:a4:b4:d9:50:ec:17:1a:4e:03:bc:15:01:c3:e2:cd:10:
44:49:ab:4b:3c:bc:37:ba:b1:96:2d:a4:ba:bc:26:13:d6:cd:
b0:17:50:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:09:27 2025 by rpki-client