Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
File: rPerPxqT5xTzB0oF2G_M4iBjBag.mft (raw, json)
Hash identifier: KfxV3T2zPPuBnJnPJbCXmlMNRKUb88VPcJHxAMubnzc=
Subject key identifier: B2:90:57:CD:BE:89:9C:BD:17:F7:EF:1C:EB:0B:88:55:57:39:29:E7
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial: 01963B0A60E9425F7A7CF5958F40A21B8117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
Manifest number: 07D6
Signing time: Tue 15 Apr 2025 20:00:58 +0000
Manifest this update: Tue 15 Apr 2025 20:00:58 +0000
Manifest next update: Wed 16 Apr 2025 20:00:58 +0000
Files and hashes: 1: KcohbphFnkSf2gxoBmgqyMOKDSE.roa (hash: /zXCNYtomEkl0yxgG+cZiQbxEeQJlGsjs0SY8DMwQ+k=)
2: rPerPxqT5xTzB0oF2G_M4iBjBag.crl (hash: NDMjUNxX3PLcJyNHqwSmNYjwRLtgqJiNyPJiW4fSX0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:0a:60:e9:42:5f:7a:7c:f5:95:8f:40:a2:1b:81:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Validity
Not Before: Apr 15 20:00:58 2025 GMT
Not After : Apr 16 20:00:58 2025 GMT
Subject: CN=b29057cdbe899cbd17f7ef1ceb0b8855573929e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7d:48:cc:95:9d:55:9f:92:f5:80:70:94:c9:
4a:7e:75:e0:fb:c7:cb:3f:48:d7:b5:99:59:38:02:
60:61:0a:be:7b:43:83:d7:fb:b1:7b:d0:2d:f8:b3:
31:bd:74:8e:e5:36:b4:a4:26:97:9b:78:86:b8:04:
d0:5f:ca:31:2e:6a:4c:4a:6d:1d:00:fb:43:11:c7:
52:91:d0:cb:19:34:5b:92:8d:10:f1:28:18:8e:8a:
d0:61:44:5a:5f:09:9f:a6:0e:08:38:29:05:03:c3:
03:3c:6f:9f:36:58:31:96:79:d1:c6:f1:92:2a:44:
94:28:80:6a:2f:9e:de:44:8b:18:89:b9:1f:47:df:
c6:10:b2:6a:85:e4:da:fc:34:4f:a2:ca:9a:d8:5c:
74:5d:df:bb:54:f3:2c:e7:8f:3f:25:69:9d:dc:ae:
42:80:c0:fe:42:1f:29:83:3d:1d:5d:f1:31:ae:ce:
14:3a:4b:73:c9:06:95:50:e4:09:48:20:39:c3:3c:
4a:86:9a:4d:df:1a:9e:45:6e:87:8f:bc:a3:9a:95:
4f:eb:6c:bb:ab:2d:55:6d:2e:90:08:22:db:7b:9e:
ef:e4:3d:56:81:c5:f7:bf:82:7b:0b:e8:95:3a:5b:
d5:e2:2c:19:bc:fe:41:31:a6:d3:c1:ae:09:5d:1d:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:90:57:CD:BE:89:9C:BD:17:F7:EF:1C:EB:0B:88:55:57:39:29:E7
X509v3 Authority Key Identifier:
keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:58:a7:76:0f:8e:ec:c8:ce:68:c4:42:6c:59:d5:b2:f3:2e:
b9:46:59:ef:c2:31:b0:69:70:c8:3e:f7:71:9c:0b:68:e9:d4:
4f:a4:84:4d:f1:f9:b8:4d:8e:67:8e:9e:46:6e:71:b4:1b:f5:
2f:84:94:ef:9f:aa:48:f1:cb:15:ba:c0:cb:f6:c9:4d:af:d0:
58:3c:b0:b5:50:15:87:c9:c7:69:fd:64:f4:16:9b:1d:c4:49:
ab:37:63:f0:17:22:14:f0:9f:39:37:34:ec:51:e5:90:59:44:
80:48:0f:ad:0b:11:78:b0:bc:7c:95:73:55:dd:85:f0:4a:6b:
b5:f6:a3:60:ce:ab:94:43:06:17:c9:95:de:da:3c:e7:65:c3:
9d:ec:aa:0a:6e:0c:71:d2:80:31:85:c7:29:12:3f:02:b3:ee:
1e:87:e9:f6:48:14:4a:28:59:5a:9b:b3:0a:1e:8e:ce:85:4e:
bc:33:7f:22:07:91:77:b2:b0:3c:2f:c4:32:a1:6d:2e:2a:20:
93:bc:5d:2d:bc:88:e0:d0:f6:44:15:7f:a3:79:97:39:9d:55:
a1:07:f0:35:e5:6b:d4:76:e5:3f:32:8c:0b:56:9c:cf:03:d6:
09:8d:5d:b5:d9:84:2f:7a:bc:66:78:9a:07:c0:dd:c5:6f:e0:
42:63:74:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:55:48 2025 by rpki-client