Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
File: fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json)
Hash identifier: c0xwfQ9qvrljJlZE4seRkO/vB+tOe8/7wTtNqdVptXA=
Subject key identifier: FD:FD:30:AF:4A:93:3E:C4:FD:10:A3:65:F7:F8:56:A1:2C:36:5D:5E
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial: 01965424AEBB4DCD2A44007ABE8DFA47DB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
Manifest number: 12D3
Signing time: Sun 20 Apr 2025 17:00:12 +0000
Manifest this update: Sun 20 Apr 2025 17:00:12 +0000
Manifest next update: Mon 21 Apr 2025 17:00:12 +0000
Files and hashes: 1: 0tq5kgZAzDMqnviitVn_OQYTHsM.roa (hash: gEsfs30k2T4OAeytJOfxkkrnBmtQHoikoZxrs0lJ3gs=)
2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: nDaou9juET8h0KGw7Ipct50731r6LLasUfntU9Ei+0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:ae:bb:4d:cd:2a:44:00:7a:be:8d:fa:47:db:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Validity
Not Before: Apr 20 17:00:12 2025 GMT
Not After : Apr 21 17:00:12 2025 GMT
Subject: CN=fdfd30af4a933ec4fd10a365f7f856a12c365d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:36:9c:45:34:fe:80:4e:7f:67:ff:25:2c:
f2:37:a8:c9:a4:fe:ef:e5:63:7c:1e:76:d7:1a:78:
9a:38:34:c9:83:d0:39:e3:c4:c3:f9:31:70:77:f4:
bb:db:39:bd:25:a6:c6:34:56:28:70:6d:09:8c:92:
a9:4a:3c:ef:59:06:79:1a:15:4a:86:b4:ec:a1:0c:
eb:e6:fe:a4:f5:28:56:3c:0f:96:b2:5b:c8:ac:3e:
97:3f:6b:77:39:77:af:0b:02:24:8e:4a:85:4c:8a:
4e:4c:26:3e:78:cb:22:11:3c:22:96:7d:aa:4b:6f:
7c:69:81:bc:3f:4e:b5:4d:92:3f:cf:70:34:4c:8d:
93:16:8c:e3:da:b9:a1:31:54:a7:f4:29:cb:1b:1c:
e3:52:12:40:aa:9a:42:fa:3d:bf:03:be:e1:32:ef:
1d:b2:af:9f:31:51:c6:82:ad:77:a9:c4:51:a8:91:
cd:c7:66:cb:5c:6e:b6:2e:03:0b:ee:d6:0b:c6:4d:
20:e5:a8:87:a0:3d:95:82:73:db:b0:0e:a2:e9:69:
2d:19:f6:04:44:81:4e:f6:72:98:47:bd:d9:b4:18:
b0:9a:0a:f2:d4:d4:54:19:8c:eb:b0:dd:c7:76:fc:
82:90:9e:97:63:78:13:09:67:42:5c:dc:d0:62:89:
90:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FD:30:AF:4A:93:3E:C4:FD:10:A3:65:F7:F8:56:A1:2C:36:5D:5E
X509v3 Authority Key Identifier:
keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1f:5b:4a:c3:62:e0:e9:02:bf:ec:e6:bd:b5:76:d2:b7:49:
30:6b:41:2e:38:33:a4:50:6f:52:1c:14:9f:cb:ec:6c:f4:d9:
4d:70:e3:81:19:d1:12:d6:78:4d:d0:83:2f:2d:18:85:97:6c:
b7:6f:12:7e:4d:5c:95:23:35:6b:b5:a1:13:68:2c:38:37:df:
51:1b:bd:09:90:ed:24:b7:78:3d:b4:d6:07:82:6f:69:b6:40:
be:b0:d3:3c:17:07:2e:e6:c8:37:67:07:16:cf:86:f4:fc:dc:
7c:74:9d:70:46:2c:b5:06:51:e7:60:89:e8:45:75:a4:5c:eb:
0d:1b:6c:43:43:e0:19:de:af:6c:59:51:5e:83:fa:17:d9:1a:
af:83:27:c6:bc:73:69:80:4c:3b:18:49:3b:66:60:f8:58:d5:
33:4f:7d:10:5f:d7:63:d8:93:77:bb:c4:53:f9:80:48:09:68:
fa:5f:4c:cc:d3:92:2c:41:a5:1f:af:d3:20:ff:27:ae:4a:ee:
e1:96:44:0c:19:9f:4f:5b:4f:76:09:a0:5d:5b:ca:57:70:41:
52:ce:0f:c7:0a:f1:39:c0:e5:63:e2:4d:29:be:25:40:4c:66:
f1:1d:5e:0c:07:69:72:62:5c:1d:cc:ff:13:34:5d:be:43:63:
9b:f0:70:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:29:51 2025 by rpki-client