Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: 8l4jc6MwGH9tE6Bl3Ugdni+jpc/r3r0ycA651B85GZU=
Subject key identifier: EB:A3:24:32:7C:C7:74:22:D5:59:FF:06:93:20:53:BF:B0:56:79:0C
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 019641B0BD7DEEEBA2AAC8E79753A7FCF829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 1374
Signing time: Thu 17 Apr 2025 03:00:23 +0000
Manifest this update: Thu 17 Apr 2025 03:00:23 +0000
Manifest next update: Fri 18 Apr 2025 03:00:23 +0000
Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: uAOs9S9eTjRfLcoNS4Dtqt/aVVN/phkoi4F+7BKUNb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:b0:bd:7d:ee:eb:a2:aa:c8:e7:97:53:a7:fc:f8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Apr 17 03:00:23 2025 GMT
Not After : Apr 18 03:00:23 2025 GMT
Subject: CN=eba324327cc77422d559ff06932053bfb056790c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:93:be:95:3c:0b:34:0e:39:43:9d:2d:d4:
8c:fd:66:33:b6:70:9b:ec:9a:86:f5:6c:9b:5e:ca:
e8:7e:5f:07:64:9e:84:c9:c7:be:88:ed:d9:c5:d7:
17:d3:d5:70:15:f5:06:57:8c:ba:ee:47:66:6d:82:
c6:02:6b:2c:74:4d:53:a7:ee:58:c5:87:a7:b0:46:
a9:11:45:f8:b1:f4:5c:8e:79:3e:8c:e8:ec:48:46:
83:bf:60:ae:00:76:2c:12:5c:59:b3:74:6d:eb:33:
a4:26:47:98:43:91:32:29:0f:5b:3e:3e:15:b7:82:
f3:79:6c:98:7c:15:75:ac:b6:2b:7a:11:75:da:3a:
9a:73:f0:35:ed:d2:fb:e4:3b:09:88:2e:62:8b:c0:
60:37:a4:7c:30:9d:89:3f:64:14:5e:80:e9:d7:46:
da:eb:83:19:cb:16:30:ea:75:ca:12:ea:d1:1b:dd:
f8:17:60:1a:92:e4:61:7e:d3:35:f9:c5:9a:a6:fc:
86:f7:12:9b:8a:c2:d7:84:97:e2:bd:2d:f1:1f:29:
26:6a:62:5b:1b:96:34:73:27:a7:89:8b:76:b2:c1:
c3:fb:be:59:e4:d1:f4:c1:db:b9:7d:5f:d1:c7:5c:
4b:c5:a3:ef:77:6c:01:13:bd:99:e8:74:c0:25:27:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:24:32:7C:C7:74:22:D5:59:FF:06:93:20:53:BF:B0:56:79:0C
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6b:16:1c:cd:ef:be:a0:94:fb:b7:0a:db:02:de:5d:3b:d3:
44:e1:22:47:3e:1a:84:45:69:9d:18:9a:a1:db:89:7e:7c:f0:
98:c0:89:64:96:53:d3:17:1f:ac:f9:e5:ad:e6:7b:c3:73:09:
c2:ee:e8:a6:43:03:8a:5d:26:54:63:23:12:37:0e:b1:dc:4c:
48:59:5c:ae:51:84:8e:ff:3c:99:a3:91:f0:ae:f8:61:e6:a2:
a1:b7:dc:24:8f:42:98:65:02:a0:a9:cd:fe:08:63:16:bb:c8:
2f:44:42:fa:3e:77:36:b2:6b:b4:8a:e3:d1:ea:4f:96:e8:f7:
4c:d6:2b:ae:8d:0a:2a:ef:29:be:4a:4a:50:e2:4c:a0:e9:13:
0b:d0:10:be:2b:3a:ae:d9:92:5d:5a:a9:d5:2c:de:b1:b2:86:
32:12:b2:c1:23:55:a2:2b:df:85:6b:56:30:83:69:78:ef:16:
c0:bf:21:58:ef:62:40:9e:f9:1d:14:fb:98:01:30:d7:ca:9d:
a9:12:31:78:2f:f0:9d:1a:3e:8e:a6:11:b5:94:82:13:90:17:
c1:21:c1:34:df:57:7e:3b:01:c1:dd:a8:0e:6f:02:f3:99:17:
86:56:4b:5d:ec:e1:f9:45:1b:52:9b:b6:f1:f7:c4:a7:66:fe:
a7:03:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:31:39 2025 by rpki-client