Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
File: c7gWQOG2T1HSun149nd8BW0RVL8.mft (raw, json)
Hash identifier: y7Pu9Slp8ZjX9PgxALpf+lrmriHD77Qd1yjj5W43yYs=
Subject key identifier: 6F:4F:D5:F0:AA:83:45:2A:B0:70:F9:E1:D3:A8:CF:26:B7:F5:9F:B0
Authority key identifier: 73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
Certificate issuer: /CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Certificate serial: 019651C9279232AA2870C20485DF3B9D3D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 06:00:59 +0000
Manifest this update: Sun 20 Apr 2025 06:00:59 +0000
Manifest next update: Mon 21 Apr 2025 06:00:59 +0000
Files and hashes: 1: 3rVvEb5TD5sUIiR8g28gQB62SZ4.roa (hash: I97/quPKUPqVv98vrZrzthe6vPPP5kOtjCTGVwTGxJg=)
2: c7gWQOG2T1HSun149nd8BW0RVL8.crl (hash: 9/G72oUuOYpCA6FCRpnkQZsZsR3FiIsLL7yy2iqrffc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:27:92:32:aa:28:70:c2:04:85:df:3b:9d:3d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Validity
Not Before: Apr 20 06:00:59 2025 GMT
Not After : Apr 21 06:00:59 2025 GMT
Subject: CN=6f4fd5f0aa83452ab070f9e1d3a8cf26b7f59fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:56:02:de:24:23:a1:42:18:d0:ae:01:0f:
67:b0:3a:80:fd:c8:76:d0:e3:c4:6f:42:8b:2c:1d:
22:58:2d:e9:76:de:46:7b:95:0f:c8:8b:73:e1:5c:
f0:02:f1:f9:f3:22:64:c8:e9:e9:af:ca:ee:5f:6c:
4e:3f:01:a8:12:b3:bb:72:96:86:1f:dd:66:35:ff:
a9:e2:fc:21:06:33:ab:1d:2c:28:be:f6:f0:03:d9:
db:67:7b:bf:6e:f7:58:11:37:da:57:e2:cc:dd:ee:
47:cf:3a:c0:af:12:f7:41:de:97:06:ea:aa:8a:b6:
4d:48:5a:b0:73:e9:9b:ef:6c:b4:a1:8c:29:8f:a9:
d8:67:f0:20:92:e9:fc:53:da:f2:07:40:4a:e8:52:
f9:88:50:1f:9d:f3:71:f4:75:2f:55:72:f1:87:67:
d3:89:c0:98:83:e6:4d:13:fb:1b:1c:7c:2f:91:ca:
51:b9:81:ca:e1:73:5e:e6:43:3c:52:44:e2:be:49:
74:f2:ae:e2:f2:bf:bc:ac:b6:eb:1e:91:a8:58:5d:
8f:89:be:1c:2c:68:c4:c6:7b:e0:fe:71:af:ba:a0:
e7:5d:90:52:86:77:ec:58:94:a7:0b:c3:4c:f6:a5:
01:65:5a:f6:39:f0:63:0c:56:a8:5e:09:70:21:22:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4F:D5:F0:AA:83:45:2A:B0:70:F9:E1:D3:A8:CF:26:B7:F5:9F:B0
X509v3 Authority Key Identifier:
keyid:73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:64:0a:ef:8f:f3:47:79:93:ec:89:ec:cb:4c:81:c7:a2:04:
5a:5a:2f:51:55:be:bd:2b:41:b2:68:08:20:9e:4f:c4:6d:5d:
c9:11:fa:b6:f2:57:1a:f6:a6:c2:95:38:7a:79:d9:0a:97:2d:
35:2b:8c:4b:7b:f2:92:21:cb:12:d0:0e:ae:77:e3:a6:2e:02:
d2:90:2a:14:28:ad:6b:10:29:20:9d:2b:59:55:3a:9f:95:49:
4a:4d:c9:b0:b5:e0:6f:d8:f9:75:4f:d2:c4:78:31:8a:b2:1d:
b1:10:67:d9:16:0a:7d:a7:3d:68:1c:22:06:ad:f2:28:03:65:
1e:1f:14:f1:82:81:e1:f1:40:c7:a1:97:44:3a:18:a8:77:df:
43:77:1e:a0:e3:f4:77:99:e2:52:15:8f:eb:1b:ef:51:7a:8b:
0a:3e:54:bf:6f:2b:40:32:b9:2e:4c:80:94:cd:04:78:6a:43:
57:75:33:dd:2b:20:69:26:45:17:9a:52:0b:e5:b7:ec:93:3b:
d4:90:94:c2:a7:03:d0:ce:71:c5:3e:98:cb:57:0a:2d:2b:e6:
b2:ca:32:64:93:ad:d3:a8:10:25:40:96:de:aa:b3:e5:72:08:
2a:cd:5c:7a:26:8a:d9:2d:78:17:bd:9f:de:75:d7:85:0c:c9:
93:1a:7b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:28:39 2025 by rpki-client