Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
File: F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json)
Hash identifier: jKNmQein39Q4HfvPjffRP8l5Dyk0CKuss0LOqQdA1HI=
Subject key identifier: C7:CD:96:FC:FD:8F:95:0E:E3:B2:25:4E:E1:86:13:24:49:9E:62:FC
Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
Certificate issuer: /CN=176c34e5ae7016c3605d3269564ae9685443595d
Certificate serial: 01965838A06E3644F1E0E3418EDB0F7445A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
Manifest number: 0766
Signing time: Mon 21 Apr 2025 12:00:28 +0000
Manifest this update: Mon 21 Apr 2025 12:00:28 +0000
Manifest next update: Tue 22 Apr 2025 12:00:28 +0000
Files and hashes: 1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: /XLcbONkqPwG6Kxn3XQ5aXOuqbLRRSH5luZJyhfexng=)
2: wlY-QtAkBrD3gjKIpeQoXPyzFOM.roa (hash: zJBXQ4JCSb3Ylp4EVKprUMeUDS30W25c/gEiCbzENgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:a0:6e:36:44:f1:e0:e3:41:8e:db:0f:74:45:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d
Validity
Not Before: Apr 21 12:00:28 2025 GMT
Not After : Apr 22 12:00:28 2025 GMT
Subject: CN=c7cd96fcfd8f950ee3b2254ee1861324499e62fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:37:3f:b0:3b:ee:ff:c8:39:c4:a2:77:cd:
76:c6:94:ef:39:34:68:5d:0b:1b:dc:00:7f:5c:1b:
db:0e:9c:c1:e6:54:2c:7e:9c:be:3c:1e:66:6f:12:
8c:4e:96:b9:a4:e4:92:37:e4:16:b7:88:9d:0b:a0:
fc:2d:21:a3:98:2d:e5:08:dc:8c:57:d7:40:d1:f4:
fa:88:ac:ca:bc:58:eb:1c:31:b4:99:53:61:d8:46:
9a:94:af:11:00:88:17:bd:fe:33:18:6a:29:6e:ac:
57:6a:70:74:8e:c3:98:55:cf:66:86:79:fe:d5:09:
44:cd:65:61:c5:68:f0:89:83:8e:be:68:95:94:f9:
d2:f2:ae:87:be:3e:99:8b:f0:0b:fc:cc:63:ad:7d:
10:ba:e2:b9:66:a7:65:26:0f:36:72:de:2a:61:78:
4a:a7:92:ba:59:9b:2d:08:39:53:81:e4:f4:62:14:
22:a7:86:be:56:2f:0d:d0:85:e0:7e:43:19:cf:81:
bb:07:19:e9:0f:01:51:43:bd:20:bc:22:62:61:33:
b6:f5:77:ae:cd:39:6f:b6:89:1a:ee:92:18:e1:08:
4e:57:4f:96:d8:36:04:59:25:2c:1b:2f:d5:49:24:
08:1b:de:3f:af:a9:6d:90:f9:f6:98:5d:46:f7:c5:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CD:96:FC:FD:8F:95:0E:E3:B2:25:4E:E1:86:13:24:49:9E:62:FC
X509v3 Authority Key Identifier:
keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:0f:64:89:d9:1d:e7:7f:35:ed:77:2b:54:67:c4:87:35:52:
df:bd:1f:dd:55:87:f2:3c:47:44:6d:09:54:2f:f1:83:cc:76:
6b:fb:4c:6f:31:ff:38:ab:48:2c:d5:2e:16:61:1e:a8:ed:ae:
b8:8f:fb:42:03:14:0f:b2:b7:dc:3c:45:04:c0:e9:78:2e:2a:
c5:d1:51:3a:db:4d:9a:d0:8a:1f:d4:98:2a:e1:98:f1:af:4b:
57:83:54:45:0d:e3:0d:f4:dd:90:f6:82:63:bf:b3:65:a2:3b:
f3:c2:78:05:ce:ee:4d:7b:4d:63:68:af:07:41:f1:dc:f6:c7:
1a:82:85:1b:90:6f:63:e8:ca:5c:6d:4b:8c:ee:a7:2b:3e:9e:
3f:4f:f6:dc:53:0b:69:10:73:ac:2f:97:ae:27:c5:8c:f0:d4:
46:5f:c9:4e:b4:ca:f1:c3:21:50:15:9e:30:79:ea:48:8c:5f:
69:a1:32:89:9d:7b:f2:72:a6:bf:f6:8f:85:fd:ec:c0:fd:d6:
df:b6:29:d5:27:9a:7f:bc:38:a2:41:2c:47:3e:66:d1:b5:55:
0f:ca:0c:3f:94:c0:cb:56:ca:4b:41:41:29:66:ec:d4:1c:55:
fd:29:e2:88:97:0a:c7:69:de:5b:a8:e0:14:cf:b6:05:26:79:
34:d6:b5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:28 2025 by rpki-client