Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File: _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier: TT6yqtA4RH0U+FDeYMqiwhJ6JY6QlMKvpca/EXD6YOU=
Subject key identifier: 0D:EB:F8:A7:8A:75:AA:FE:96:91:16:1A:C9:31:9C:DC:4F:2C:5D:2F
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial: 0196297269F109B35DDFB2DD317DD7564F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number: 0BC8
Signing time: Sat 12 Apr 2025 10:01:26 +0000
Manifest this update: Sat 12 Apr 2025 10:01:26 +0000
Manifest next update: Sun 13 Apr 2025 10:01:26 +0000
Files and hashes: 1: H5zExKsN_X1SPJQSwEakZzqeC2I.roa (hash: FjXiEi3V3MLLSMvrOdppNODHARmQ2b/yPySFztutI1Q=)
2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: pKIoIeSgd3hLmMrESJSuWpcoLIVMSbwJ+ll7IqnFMXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:72:69:f1:09:b3:5d:df:b2:dd:31:7d:d7:56:4f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Validity
Not Before: Apr 12 10:01:26 2025 GMT
Not After : Apr 13 10:01:26 2025 GMT
Subject: CN=0debf8a78a75aafe9691161ac9319cdc4f2c5d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:86:e7:3d:31:b3:15:b9:95:00:2c:97:a5:
8f:bb:c3:b6:05:a3:c0:2b:23:70:98:60:3f:31:a9:
1b:3f:8c:71:db:ef:55:8f:47:3f:38:88:d7:14:6f:
96:82:04:56:18:69:99:f6:d2:01:42:63:23:ec:5d:
65:7a:6f:2c:84:43:c4:0b:ca:01:6e:04:5e:72:89:
80:d7:36:1b:15:32:10:cf:31:21:83:60:94:22:4a:
e0:ef:e8:72:b0:0e:0b:6b:51:84:31:0b:ea:03:13:
bf:5e:07:3c:09:6e:b3:86:5d:cf:13:47:67:c7:7c:
31:09:07:8c:99:95:ff:86:96:72:2a:c2:4d:1a:e2:
95:81:b0:f6:d4:59:bc:b6:43:1a:84:48:49:81:bd:
d4:be:9d:d5:25:e1:3c:1c:2e:95:6e:83:e0:a1:4b:
1b:fb:41:f2:e2:75:b5:10:bc:c7:0c:45:49:80:b7:
08:4b:86:ad:d4:5d:e1:8c:58:80:06:95:cd:da:00:
45:64:c2:10:f4:45:43:e1:7f:7c:2d:d0:88:3b:9f:
55:06:3e:c7:4a:e2:aa:32:69:0c:81:7a:02:79:86:
d1:e7:f2:35:9b:67:e6:94:7f:66:7c:8c:05:71:44:
b6:39:2f:36:01:b9:a3:2c:1f:4c:76:bb:42:79:c7:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:F8:A7:8A:75:AA:FE:96:91:16:1A:C9:31:9C:DC:4F:2C:5D:2F
X509v3 Authority Key Identifier:
keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:67:30:97:a3:b5:96:30:06:75:c4:f4:b6:47:57:09:7c:2b:
e7:5b:dc:f6:38:a3:47:73:66:f3:69:84:15:82:aa:08:a4:89:
2b:10:5e:80:d6:15:9c:ec:4d:d7:f3:34:e9:d1:88:60:58:ab:
63:43:8c:3d:7f:c9:ec:47:63:6b:f0:2e:d7:8b:ec:12:7f:54:
57:0f:72:dd:0f:a3:b2:97:b0:be:82:d8:80:eb:00:6d:22:1f:
c4:99:b2:a4:ff:87:88:ed:f3:c2:9e:d0:f6:74:e4:f4:fb:74:
c4:2c:7c:84:d5:b5:bd:91:94:27:88:7f:54:92:98:85:7e:82:
b2:aa:4f:ba:3d:b7:33:1e:a7:b6:be:e6:75:e0:73:6e:13:0c:
b6:a1:23:4f:3e:d7:b9:45:08:19:ce:ab:5c:54:85:c5:1b:3c:
1c:27:90:f4:b5:74:82:c1:1c:dc:15:8b:17:bc:a0:c9:2d:2f:
36:a3:cc:35:89:80:86:c5:37:01:83:eb:ca:c3:2d:8b:27:3c:
bf:4c:58:13:fe:df:4f:52:00:4a:39:42:52:19:09:57:bd:da:
75:10:f9:05:39:fe:12:a7:82:0f:48:7f:c7:ce:ca:b4:a2:e2:
17:b9:41:08:47:5d:bf:23:66:85:4f:af:db:ce:bf:16:34:35:
b1:45:8a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:12:27 2025 by rpki-client