Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: iYgYF0kEQPqJeVwlztxIy/IBYC2HIyFuNhmX6/hjIWs=
Subject key identifier: DD:8D:64:79:3D:41:0A:54:0A:ED:A0:5E:08:B9:C3:9E:A9:20:96:FE
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 0196553884FE735CEA0AD0BEE3A5BBB22232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 148E
Signing time: Sun 20 Apr 2025 22:01:29 +0000
Manifest this update: Sun 20 Apr 2025 22:01:29 +0000
Manifest next update: Mon 21 Apr 2025 22:01:29 +0000
Files and hashes: 1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: 0gHuFzbPPYslkbHRyjnYL1N2tpJuy8nKRwuCftiW2VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:84:fe:73:5c:ea:0a:d0:be:e3:a5:bb:b2:22:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Apr 20 22:01:29 2025 GMT
Not After : Apr 21 22:01:29 2025 GMT
Subject: CN=dd8d64793d410a540aeda05e08b9c39ea92096fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:ba:f1:5d:82:b8:e6:d4:37:ea:32:0f:f6:
44:60:ab:b7:da:ec:cf:57:2e:78:6e:b9:48:14:e9:
48:ba:c4:f0:dc:de:c3:5a:2f:1a:14:6b:ef:60:6b:
f9:0b:ce:5b:05:2e:4f:4f:05:4a:7a:d7:58:85:35:
26:23:32:7a:a6:36:ad:50:6d:66:e1:9e:46:46:e0:
0a:99:7b:19:cd:db:79:37:ff:02:86:89:e5:c3:ad:
5e:af:9e:3f:de:fc:1e:6c:20:4a:d6:d8:5b:c8:65:
18:93:0c:a3:27:2b:67:fa:43:57:9a:9a:9d:eb:69:
b0:76:99:67:1f:98:09:06:ff:83:bf:09:fa:9e:b7:
51:32:67:f9:10:87:c7:ed:17:3a:9c:3d:46:19:f7:
c6:4c:db:41:ef:f7:74:44:10:e3:a6:b2:fa:3c:d8:
65:b3:8e:7e:49:ba:37:55:59:92:67:4e:da:32:08:
d5:f1:0d:64:5a:4a:ee:f9:23:ca:90:e8:8f:36:d1:
c0:22:fc:9f:7a:e7:56:f8:57:ab:1a:6c:67:47:31:
51:21:ec:84:43:71:6e:5f:2a:96:3b:2a:fe:be:ca:
9e:0c:a6:b5:91:72:bf:30:a2:76:b3:c6:8b:5b:d3:
30:b2:bb:b4:f3:50:7e:29:d6:58:50:99:ab:6b:16:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8D:64:79:3D:41:0A:54:0A:ED:A0:5E:08:B9:C3:9E:A9:20:96:FE
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ee:30:9b:38:c3:e5:0f:eb:c2:94:4b:7c:17:6f:69:af:8b:
4b:3c:ca:2f:e0:4d:5d:f8:52:ea:39:3c:77:f7:5a:dd:b5:32:
2b:a7:5e:a4:01:d3:37:f5:ca:82:04:47:3b:97:cb:30:e5:45:
da:24:2d:3a:92:8c:4e:70:3e:3e:82:38:e9:6e:bc:68:83:72:
04:08:9c:34:00:ac:a7:a8:fc:eb:34:7d:67:9e:62:67:e1:85:
c1:b1:16:81:f2:4c:44:6f:5f:fe:1b:9e:3f:de:2f:73:d5:8f:
ca:80:71:18:db:aa:91:d0:3b:b6:0c:86:42:7b:32:5e:83:68:
90:1f:94:e2:a5:b1:86:32:ec:92:09:4b:00:f3:89:92:6e:c8:
bb:7b:f6:d9:da:41:89:66:57:58:84:ea:60:f0:ea:9c:e0:27:
af:1b:cc:e9:91:6e:cd:80:28:db:c8:ea:2c:ca:cd:35:ca:e8:
f0:98:50:d4:ba:dd:10:8d:9e:f2:2b:db:3c:7e:f5:50:35:ca:
07:28:4e:cb:4c:99:2d:4d:15:99:3d:f4:65:dc:8c:5a:c8:a2:
75:7d:aa:56:2e:f7:ca:09:3c:e5:c7:5a:61:d3:db:b7:4b:7c:
40:7c:30:38:56:8d:e7:f1:47:64:1e:4a:18:88:ee:12:49:c0:
01:fb:9c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:15 2025 by rpki-client