Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier: GEMYebM5gGCspCA5P0yr6HnB1CgufsZDkB+tcTskbTo=
Subject key identifier: 2F:89:95:2E:74:43:D8:74:C5:8D:2D:D7:30:37:83:E0:7A:26:01:EF
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial: 019653EE653BCD2366E71BEDEC14D93DAC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number: 048E
Signing time: Sun 20 Apr 2025 16:00:54 +0000
Manifest this update: Sun 20 Apr 2025 16:00:54 +0000
Manifest next update: Mon 21 Apr 2025 16:00:54 +0000
Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: QKv3Rpo+1blO/QPu0jkqGdckxWn/836MJZRAalrldgo=)
2: wVdARfy8kyS2yygCe6VeSrxjsrI.roa (hash: hDzrF6MC+t3cfKHXPCsVlZtlykkOSNtAuETj7zQp0RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:65:3b:cd:23:66:e7:1b:ed:ec:14:d9:3d:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Validity
Not Before: Apr 20 16:00:54 2025 GMT
Not After : Apr 21 16:00:54 2025 GMT
Subject: CN=2f89952e7443d874c58d2dd7303783e07a2601ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:3b:63:2a:fe:1e:47:18:ef:a5:38:a2:c4:
85:ad:d0:ce:ac:11:e6:34:61:cf:e5:bc:ff:ed:a2:
cb:92:f5:28:a0:e3:12:55:cd:64:43:52:13:12:cf:
e6:07:a0:8e:87:6b:36:19:a5:db:e5:75:f1:5d:a5:
6c:76:14:f4:0a:66:72:95:cc:15:6c:aa:a9:17:cd:
7e:f5:c3:4a:48:1d:32:01:f4:48:8c:89:ed:99:b2:
de:5c:e8:62:29:16:02:59:f5:6e:16:9b:c4:eb:31:
b2:59:3a:62:b0:7d:40:f5:8b:29:88:c4:64:8d:a4:
7f:99:33:36:94:76:c5:c0:84:49:c5:93:ba:09:0f:
24:e4:2a:18:db:fb:5d:a8:b6:74:bc:c9:63:ae:99:
75:67:fc:62:f3:44:65:7a:d1:0e:d5:65:ee:28:ab:
3f:87:9c:00:9c:71:15:83:ba:3e:00:33:24:6a:16:
f8:f3:67:5e:55:7d:87:fb:6c:5e:3e:bc:dc:50:7f:
ba:58:08:f7:36:5e:aa:7f:aa:99:b3:20:e3:dd:3e:
97:1d:da:50:7a:03:fd:fc:76:18:d4:cb:60:5d:f1:
c0:a1:c2:62:32:83:04:35:67:b6:91:6a:36:4e:64:
26:f2:dc:61:28:da:81:64:c2:75:db:13:1d:ce:c1:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:89:95:2E:74:43:D8:74:C5:8D:2D:D7:30:37:83:E0:7A:26:01:EF
X509v3 Authority Key Identifier:
keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bd:83:f0:45:76:88:5f:96:9c:c3:6b:ad:4f:60:f7:61:ca:
b0:b7:ab:c5:08:e0:bc:5f:32:20:e1:89:fe:9d:8c:20:ca:bb:
0b:f0:ba:31:70:c6:e4:46:f4:8b:59:71:6f:e9:ab:2a:e6:99:
f9:7d:1d:fa:f9:a5:bd:3c:bd:c4:da:a9:9e:c9:70:31:cd:27:
dd:06:37:74:56:ca:1a:fb:c3:e8:51:bd:85:0f:d8:93:bc:c9:
24:67:a4:d0:df:bb:cb:bc:17:a5:d5:68:ae:53:1f:62:0b:db:
50:43:d7:d6:04:df:5b:b1:b2:ba:bf:ee:b3:af:35:c3:dc:0b:
84:5c:64:b2:0a:d3:c4:06:b9:2b:97:01:4e:16:66:15:9f:68:
d5:90:8e:06:c0:9d:96:4d:91:20:42:bc:e0:d3:8a:5f:64:4b:
63:ac:6a:3d:95:ed:22:42:2a:4c:24:42:85:3f:14:09:71:de:
e8:e5:c6:e1:a7:a3:75:fc:c3:0b:52:ec:02:62:9e:f2:9f:cf:
c0:99:7c:19:b6:f1:ee:ba:3a:cd:7f:2c:a9:f3:48:8a:de:97:
5c:96:b8:e5:e7:6e:52:9d:37:da:aa:e3:13:30:c5:57:d9:5e:
92:f8:72:4f:31:36:e9:ec:85:24:64:46:90:0f:08:0d:7b:60:
48:02:8f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:02:33 2025 by rpki-client