Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: T0CcQusod0O+QIAc/KEVl8Gu38bBoFleYGFNSKCwWVg=
Subject key identifier: 8B:73:EC:7A:9C:05:38:73:6A:5D:8A:A4:C9:8D:A6:BC:C6:5A:89:22
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 0196488F021688C17530AD691E286BB33137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0BDF
Signing time: Fri 18 Apr 2025 11:00:53 +0000
Manifest this update: Fri 18 Apr 2025 11:00:53 +0000
Manifest next update: Sat 19 Apr 2025 11:00:53 +0000
Files and hashes: 1: U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa (hash: CneTmiRYnA+2gIbWw8P2gftXT9GSMXZurQf8UEQYJtM=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: hPlY4sS39+laX5DUpXWCBqplRQIj4zj0wWOy8RHEOdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8f:02:16:88:c1:75:30:ad:69:1e:28:6b:b3:31:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Apr 18 11:00:53 2025 GMT
Not After : Apr 19 11:00:53 2025 GMT
Subject: CN=8b73ec7a9c0538736a5d8aa4c98da6bcc65a8922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:c7:0f:a8:d8:76:fa:c9:ac:67:60:23:4f:
27:2f:3b:4c:e4:6b:0e:27:2d:5b:42:e1:c4:d8:8e:
7a:34:1c:f7:7b:8a:ef:4b:10:65:15:9a:b5:d1:6a:
8c:fe:6b:a4:cd:27:45:9c:da:57:5a:be:fb:45:3c:
3d:d8:9a:5d:1d:4d:44:08:0d:09:df:59:85:35:2e:
44:b6:0e:b7:e8:3a:37:ee:f4:a6:e5:73:bf:1d:2b:
e2:03:78:b4:3c:89:10:98:04:4d:9e:e4:23:46:1c:
c1:cd:14:2b:c3:13:8d:8f:9a:f0:6c:1e:6d:87:e0:
82:17:63:1a:28:ed:78:79:6a:46:c2:13:56:13:cf:
c2:4b:f4:b0:94:5c:df:0d:e8:bf:bc:bc:15:89:3f:
88:7a:32:ef:3b:6f:8e:c2:71:59:4e:22:d1:3f:28:
2c:71:2c:18:76:6f:a1:0b:c9:d8:b9:dc:e2:f6:77:
c5:71:32:c4:1a:c9:0c:82:63:63:96:75:b2:12:cf:
48:df:ac:75:e8:26:a0:24:70:be:d6:7f:d0:67:6c:
82:a2:31:30:5a:60:48:7b:65:86:4f:06:bb:23:1a:
34:22:63:e1:fe:0b:fa:7f:7c:10:18:f1:ac:f9:7d:
96:4d:13:a1:8e:40:44:77:95:96:a5:41:5a:47:1f:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:73:EC:7A:9C:05:38:73:6A:5D:8A:A4:C9:8D:A6:BC:C6:5A:89:22
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:31:db:2a:37:23:4e:cd:a6:9a:3e:15:d8:8b:8d:17:92:59:
24:39:05:c1:e8:1a:f7:5d:02:cb:f2:86:f1:f6:a9:84:7b:66:
a7:4c:22:c4:ab:bb:0b:2d:d4:4d:3b:b0:84:47:b5:17:2d:c4:
94:50:67:cd:8e:85:80:dd:bd:73:40:ae:98:57:ea:37:58:0e:
b2:0b:b4:a8:4a:e5:77:51:4d:81:99:fc:e2:25:96:58:05:c4:
15:98:f6:79:3f:9b:e6:23:a9:ee:59:18:17:7f:d1:4a:2a:cc:
11:ea:2e:2a:b0:cc:67:10:d6:c2:fc:c5:b4:e3:9d:bb:31:d8:
0e:92:bd:8a:c3:d6:61:28:71:65:bf:7b:ae:28:1f:ab:7f:29:
5d:6c:b7:2e:82:63:5b:71:fe:39:21:aa:37:fe:23:85:1b:ab:
e4:f6:af:9f:cb:45:b3:ba:e3:d1:7d:24:ae:e5:24:6c:6a:fe:
db:5a:54:e3:3e:ee:91:d3:5e:68:f7:8e:83:33:6c:39:82:b5:
93:87:55:34:df:a1:51:a0:56:a3:2e:03:ed:f8:e6:af:b2:a2:
93:64:79:63:7c:91:77:56:b6:de:d8:0d:46:1d:a8:2f:1f:ec:
9d:9d:9a:43:ce:a6:49:8e:09:e9:7b:a1:2e:95:61:12:13:d2:
93:1e:6c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:02:56 2025 by rpki-client