Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
File: fQDvTzv2W4fPoC73tKZYm6LeT_c.mft (raw, json)
Hash identifier: i99Iu1q2vcJKHEGOZTqHD6Kyj+H7pwgEDcaOWv5kJ/c=
Subject key identifier: 2B:36:78:7D:8C:64:10:47:AC:CE:99:9A:6C:65:C4:75:C7:52:8A:03
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Certificate issuer: /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial: 0196A051C9E9DC860756DB175DD66C20722E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
Manifest number: 0D2A
Signing time: Mon 05 May 2025 12:00:36 +0000
Manifest this update: Mon 05 May 2025 12:00:36 +0000
Manifest next update: Tue 06 May 2025 12:00:36 +0000
Files and hashes: 1: 8c_-JJSRaWAdlgvn5HbEMrKvRfI.roa (hash: KpvO8IWbSGTOfjfycUgdrrf84glELyn27WOsA9sqcQY=)
2: fQDvTzv2W4fPoC73tKZYm6LeT_c.crl (hash: 8VLnzXe0jgeUCVvzuyME+vzNWLdh/T82jlRM23xvEyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:c9:e9:dc:86:07:56:db:17:5d:d6:6c:20:72:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Validity
Not Before: May 5 12:00:36 2025 GMT
Not After : May 6 12:00:36 2025 GMT
Subject: CN=2b36787d8c641047acce999a6c65c475c7528a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:5e:d6:f1:f4:83:06:39:f2:5e:a3:13:f2:
1b:d4:6c:c9:00:2c:0c:7f:1a:41:b2:c1:43:dd:2b:
00:9b:12:ea:f5:de:9f:b7:bc:0a:7b:52:48:26:46:
41:5d:5b:6d:b3:f3:85:ee:a7:21:6a:c5:54:5d:92:
90:b6:56:75:f6:99:e5:dd:8a:f7:59:9f:0a:bc:7d:
52:79:47:29:55:5a:00:83:6c:89:69:cb:7d:09:04:
ef:d9:2f:d7:20:2b:bd:85:c2:62:49:c3:b6:4e:da:
47:d5:36:3c:b7:ec:d8:b5:b6:6c:75:04:f9:8f:d4:
a5:88:45:c5:4f:09:e4:19:af:e3:60:bf:41:15:ae:
8f:d1:b7:05:ac:8a:23:28:8d:62:a1:50:5f:e7:62:
eb:d8:dd:a4:92:bc:3a:9a:9f:77:14:a0:71:ff:cf:
f5:c4:e8:07:ff:af:c2:d0:2f:0d:65:0d:9c:9e:d9:
0f:4f:1f:02:33:11:89:02:40:8e:0c:c7:92:96:30:
ff:38:36:1b:59:7a:74:47:8d:dc:97:01:b9:b7:a5:
46:fc:09:f1:87:8a:7d:8f:72:05:53:cc:db:80:44:
c9:86:ac:64:c8:67:25:a2:54:97:9d:0c:ef:0b:7a:
93:d3:15:d4:c6:4d:c9:84:86:af:b2:54:ec:2d:b9:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:36:78:7D:8C:64:10:47:AC:CE:99:9A:6C:65:C4:75:C7:52:8A:03
X509v3 Authority Key Identifier:
keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7a:f0:77:d7:8a:ab:f6:a7:91:5e:34:3b:c7:41:2f:49:07:
f8:1f:a8:8b:cc:bb:29:93:9f:b2:d3:e5:d6:af:46:7c:8c:9f:
ed:4d:08:6c:42:14:34:e2:21:d2:76:e3:1e:df:5e:62:33:67:
8c:d8:c2:5c:5e:86:e7:d4:5a:84:c1:19:03:16:a0:f7:fe:66:
c3:72:8e:11:82:7a:0b:23:99:b0:02:f3:e3:86:84:14:9a:d8:
5e:f0:57:6b:3d:27:3a:ec:7f:15:43:24:91:5d:4f:8a:19:94:
87:dd:cf:7f:23:cf:9f:dc:d9:09:cf:94:6b:04:0f:38:d6:b0:
fc:af:c9:c5:4a:92:9a:b8:ba:9e:8f:dc:6b:54:96:1c:f2:cc:
66:fc:48:52:a4:5e:5e:69:06:03:72:a0:8a:0e:dd:3c:e8:f1:
a3:66:e2:13:c7:e5:15:a9:ca:38:41:87:a3:90:18:23:ed:1a:
4b:a4:de:e5:c1:b7:ca:9d:62:49:a9:16:15:f2:55:27:f6:f0:
6f:90:28:10:56:91:30:73:bb:68:be:2c:25:20:b3:43:78:63:
2e:ba:d6:b5:4e:37:1c:89:91:e4:57:7c:f9:e9:3e:06:3d:3c:
70:b0:da:3f:e6:4b:06:a8:81:aa:7e:62:4c:ea:6f:c6:73:f3:
28:48:4b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:13:47 2025 by rpki-client