Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File: fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier: pfEcGz8mQkc2yrkhx3xUFhF/Gg701T/tHSM1FHmiaGM=
Subject key identifier: CC:32:AC:D0:F5:A4:CC:25:46:FD:99:58:A8:4A:34:0D:B0:D4:DE:C1
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 01965537D374C39E1B9FC333BE5D34D5B20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 22:00:44 +0000
Manifest this update: Sun 20 Apr 2025 22:00:44 +0000
Manifest next update: Mon 21 Apr 2025 22:00:44 +0000
Files and hashes: 1: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: uGJFHziTNyX6nfFw3KjsED4sU3QoBszSrMOy7RmQkPo=)
2: txL1fO8y0T0j5IS_C5y7fOIOxHU.roa (hash: kwDxX3obWOhODfrryMMC7f740mdS1jAQgVwH1EYVsHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:d3:74:c3:9e:1b:9f:c3:33:be:5d:34:d5:b2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Apr 20 22:00:44 2025 GMT
Not After : Apr 21 22:00:44 2025 GMT
Subject: CN=cc32acd0f5a4cc2546fd9958a84a340db0d4dec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:02:aa:1c:1f:ac:7f:8b:44:d1:00:f4:37:
66:5a:79:e6:7a:56:d1:55:dd:1f:51:05:42:62:c5:
d8:fe:3c:f7:e5:0e:e9:8b:14:32:62:21:d8:00:c9:
be:11:ae:26:7e:1d:df:8e:b4:58:42:1a:13:b2:80:
4b:86:f3:a0:01:f1:8d:18:90:d8:56:b1:66:82:11:
2b:3e:0e:d6:68:67:80:d4:fe:2a:49:54:26:ab:a1:
8e:5d:c6:22:97:1b:cc:d7:e0:7b:0a:13:6b:84:50:
d5:73:56:bf:5a:f1:ab:90:b4:23:78:b4:51:16:23:
68:9c:9d:2c:e0:c3:a3:18:a2:aa:da:e2:59:0f:ae:
b8:15:d2:ea:26:f8:c4:73:ef:33:ea:51:a7:83:96:
b7:05:c4:a0:1e:70:1f:3c:4e:b7:ec:11:ce:83:99:
02:7b:5d:71:54:a8:3c:e1:5c:7b:c3:24:97:0d:2c:
e9:7f:e7:94:ce:d6:44:8d:25:d8:4e:41:21:c7:d9:
52:86:3d:d9:4d:0e:ba:4c:43:04:37:7d:77:39:0a:
49:1a:73:0b:60:da:1d:97:c8:eb:5f:83:57:61:28:
63:9c:fe:d8:3b:c2:db:6b:24:1f:94:98:1b:69:44:
fc:ea:19:ae:1a:3f:bb:4b:a8:b3:15:db:7f:0d:12:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:32:AC:D0:F5:A4:CC:25:46:FD:99:58:A8:4A:34:0D:B0:D4:DE:C1
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:87:29:26:64:33:6c:81:9d:62:b8:e0:e2:84:0c:81:a6:db:
b4:a2:c9:24:4f:5b:da:03:b5:be:06:22:c7:4f:51:dd:5b:99:
b6:ea:dc:0f:ea:23:37:0b:40:f8:d0:1f:06:90:67:c8:e9:41:
7f:a8:69:d3:2d:a7:e6:eb:74:e2:da:d2:34:24:c8:39:0b:4a:
66:db:33:51:8a:69:b4:5a:21:c3:6d:24:98:bd:21:12:38:52:
6f:2e:fb:d2:43:5d:06:8d:17:32:b2:5f:58:8e:61:4a:16:18:
59:a4:45:a2:7c:82:35:c9:de:6f:c6:97:a0:9a:22:0e:2b:fd:
21:77:7a:a2:4f:51:6d:96:d4:00:3a:61:1b:df:0b:14:41:f9:
4b:23:ff:44:3a:3c:74:dd:15:dd:95:64:d5:1e:a3:9e:0b:cc:
3e:4a:99:48:f2:5e:16:82:f1:24:5a:5e:bd:a0:01:86:9b:1c:
e4:2c:f9:a7:84:6e:2d:a6:76:b4:03:85:4f:30:13:24:6b:59:
75:a6:cb:c2:76:9a:bc:df:fc:5b:c2:f4:d2:da:bc:8f:4c:18:
d1:bf:77:f1:e0:66:25:86:9c:6c:e9:7d:e9:c8:af:f7:16:ed:
91:c6:40:2d:35:90:1c:39:b0:19:ca:5b:b9:d1:b0:23:99:12:
c7:36:bf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:50 2025 by rpki-client