Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
File: fi4pGEMoSetx6V3EDRB56oZfYQk.mft (raw, json)
Hash identifier: +2162JDdQM1WeAlXwed9+rGIFECRI8lQt7ZxhjAr7V8=
Subject key identifier: CF:98:B2:3D:C9:A8:60:DE:7C:D0:F3:A2:F4:B8:16:E3:B0:5A:46:6B
Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Certificate issuer: /CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Certificate serial: 0196BD496DD1348985BD66ACE5DB9A9AA3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
Manifest number: 084F
Signing time: Sun 11 May 2025 03:00:28 +0000
Manifest this update: Sun 11 May 2025 03:00:28 +0000
Manifest next update: Mon 12 May 2025 03:00:28 +0000
Files and hashes: 1: S1dC-8FvWd5r91Ep_3NW-RYRFSM.roa (hash: WN6IJU4enC30WWGrEp1TUJBHxrmIxnrzAFySxPEWWA0=)
2: fi4pGEMoSetx6V3EDRB56oZfYQk.crl (hash: e9aqNQnQCsWQPZ3jYWOoLQgb41AaNI8I8si+g3dt1CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:6d:d1:34:89:85:bd:66:ac:e5:db:9a:9a:a3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Validity
Not Before: May 11 03:00:28 2025 GMT
Not After : May 12 03:00:28 2025 GMT
Subject: CN=cf98b23dc9a860de7cd0f3a2f4b816e3b05a466b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:ab:78:68:f6:0f:9e:21:bc:a1:d4:16:58:
26:ec:64:a0:b3:75:0d:3a:37:bd:ba:6b:14:7a:e6:
cc:1d:04:bd:db:83:69:c8:ba:34:f7:39:4c:42:0c:
d2:37:32:f8:f9:63:98:0f:9c:c6:cb:c1:33:6f:d0:
f2:04:78:74:ad:f2:27:1d:cc:57:6a:e9:68:09:33:
be:17:1c:fa:f3:86:db:95:c1:15:60:19:08:8b:f1:
96:e5:33:fd:ad:0c:28:d5:2a:58:dd:84:f4:80:5e:
0a:4d:f2:84:08:e5:e0:3a:ff:99:98:28:ad:53:be:
34:e6:f9:5c:b1:46:36:e8:60:a6:7d:8a:cb:84:7a:
d1:09:48:ed:ff:ed:ee:27:08:37:01:33:b9:db:99:
40:4a:1f:89:47:9a:b9:39:fe:55:7d:1b:18:45:3d:
bf:0e:5d:78:f2:f9:26:95:f1:5d:c1:f0:b0:3f:f1:
02:14:ea:15:c6:d1:69:e9:5e:7d:85:09:5e:6b:26:
77:32:e8:4c:cf:ac:77:39:9c:30:4c:b9:0a:93:f5:
06:fa:2f:fb:65:05:ac:a4:35:17:f3:da:e8:e9:b5:
e4:7f:19:71:e8:c6:f2:ad:16:cd:3d:bb:0c:14:2e:
49:52:60:58:c9:23:ec:c9:91:e7:3e:7c:1a:75:bc:
3c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:98:B2:3D:C9:A8:60:DE:7C:D0:F3:A2:F4:B8:16:E3:B0:5A:46:6B
X509v3 Authority Key Identifier:
keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fa:0b:2d:99:84:24:3a:45:08:3e:53:53:8e:5b:2e:da:39:
22:b3:00:7b:76:42:8d:b6:ee:4b:43:cf:39:3f:f5:82:d2:9a:
5f:d0:73:3d:d8:70:27:81:a1:de:a6:25:77:18:81:f9:e1:f8:
9a:0e:b0:76:56:84:dd:3a:1e:d6:35:27:fc:3b:cb:59:1f:48:
f5:88:87:85:04:07:f1:e0:1a:59:bc:f8:56:5a:1f:8c:0f:12:
80:27:bd:28:70:20:a8:0d:44:9a:37:e1:2c:ff:61:bb:67:9a:
46:9e:42:9b:78:87:e4:a8:5a:3f:af:0a:6d:1f:eb:7b:30:63:
af:a9:b8:c3:3c:84:04:08:91:4a:40:02:83:94:96:56:90:ad:
30:ce:4f:04:e7:17:26:4c:e9:ad:c6:17:65:97:6e:2b:ea:3a:
ad:22:90:7d:fb:a4:8c:b6:4d:b1:95:4d:e9:de:2a:32:bd:5b:
88:11:06:26:14:fa:12:36:82:4e:a8:df:07:b2:c7:d9:5b:d6:
0f:36:a2:2f:db:81:d9:16:57:0e:6a:a7:7a:17:b8:33:5c:fd:
57:60:46:78:b6:7c:8e:b8:be:4b:1c:18:e3:ec:02:55:2b:10:
b4:3b:a0:3e:5b:f1:a9:5e:46:60:29:ec:36:74:09:5d:dd:00:
6f:a2:4a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:13:55 2025 by rpki-client