Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File: Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier: FB9gEm+dpsNyv2IR+wbhwRosyTt8N+jidxyNcBtIr58=
Subject key identifier: 0F:E7:FE:A7:68:B8:1D:A5:87:26:0C:C1:42:CF:EC:2D:F2:93:C0:56
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 01965500AF9510978B9EBDCB7CE092F4C018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number: 1510
Signing time: Sun 20 Apr 2025 21:00:30 +0000
Manifest this update: Sun 20 Apr 2025 21:00:30 +0000
Manifest next update: Mon 21 Apr 2025 21:00:30 +0000
Files and hashes: 1: 1tY0n_P9pCmxuMHMwVN4kuuE9Yw.roa (hash: OMoFTls8LA8ewzB3QD+33fEfQjFe6IrAty5YO50hD+U=)
2: 3qpur1zwBPkajyupQYlxerl-sX8.roa (hash: P/ij/bhS3D5UPNfyBQsnXDUHMAdZt5V8V+OvOjXddRE=)
3: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: B6z5iztBE5Hdm9VJCZUvI5w74R/Y5oQz8JtU81cGrco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:af:95:10:97:8b:9e:bd:cb:7c:e0:92:f4:c0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Apr 20 21:00:30 2025 GMT
Not After : Apr 21 21:00:30 2025 GMT
Subject: CN=0fe7fea768b81da587260cc142cfec2df293c056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:c2:5c:26:5c:94:75:ae:40:de:b7:57:b5:
72:6a:da:46:84:26:cc:fd:16:c8:1a:87:1e:a1:28:
d0:79:99:31:02:a9:83:82:19:2b:7e:48:39:5c:51:
0e:d3:bb:a4:56:d3:c3:f4:6a:20:fe:e3:2e:7b:b8:
01:c3:83:55:13:e0:f8:52:4b:b6:41:ae:ff:69:0a:
6d:64:0a:c9:f4:4f:4e:a0:03:9a:df:fa:91:9a:89:
c8:f8:18:2d:8a:c8:bb:0a:95:1e:b6:39:bf:be:ca:
3e:cd:1a:0c:14:31:b1:47:0f:20:88:4e:e6:a8:3e:
2c:ad:34:35:87:f3:ea:7f:b6:cc:86:4d:49:37:19:
3b:04:47:9f:c4:0c:dd:8b:3c:7f:59:bf:c8:c8:79:
29:7e:6b:33:c1:10:a4:a1:a3:c1:ed:40:0d:cf:16:
07:17:b0:db:43:ad:bc:3d:18:ea:a1:5b:85:dc:21:
c8:cd:a2:36:a2:cf:ef:bb:e3:4f:7c:77:23:00:23:
94:70:04:f5:20:27:3a:9b:69:59:47:54:e4:47:3f:
54:9b:88:f2:1b:d6:87:9e:f0:1c:41:d3:1e:b3:c5:
b0:5d:99:d5:9d:93:3b:dd:04:e2:25:d8:e6:f5:aa:
48:99:e9:53:0d:0a:1e:4f:9e:2f:b3:05:34:79:0f:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E7:FE:A7:68:B8:1D:A5:87:26:0C:C1:42:CF:EC:2D:F2:93:C0:56
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6b:60:13:33:d8:c5:3a:40:f3:a6:d5:5d:b1:f4:c7:79:71:
99:04:3f:65:8b:0d:29:cb:be:93:25:2d:ae:a7:41:42:af:6c:
dc:e8:95:a1:8e:a4:79:58:b2:0b:00:f9:b6:85:da:1d:6f:f6:
11:86:3e:73:86:c7:a2:5b:9f:09:cf:da:96:e4:65:88:4a:e8:
69:3f:6f:6a:be:62:74:d3:d3:e5:46:d4:37:77:ac:a7:6f:91:
d9:9b:7d:99:3c:2f:0b:e0:11:b0:88:c4:0b:f3:08:48:48:e7:
0b:c9:8f:20:6d:ed:12:26:8d:5c:f1:32:28:f9:85:9a:12:81:
97:c4:89:b2:f6:aa:b6:87:c4:ef:ae:bf:ff:29:ef:1f:13:5c:
52:5b:d6:71:23:80:d3:a2:3a:b9:8d:83:b4:02:5c:7f:4f:61:
11:23:61:f7:d8:51:37:87:a3:39:7d:26:55:2a:eb:66:86:20:
b8:f2:ac:9a:a1:62:2d:eb:65:f7:b4:4f:d1:ab:53:27:99:8a:
57:35:be:c9:fb:2d:b9:d5:0f:34:3e:4f:1a:a4:31:9a:44:29:
80:2f:d0:2c:8e:e1:05:40:74:4e:7c:27:29:bd:69:3d:7b:bb:
6f:f7:3b:43:2a:3e:19:9a:70:16:e0:17:70:89:71:89:e7:96:
9e:5e:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:02 2025 by rpki-client