Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
File: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json)
Hash identifier: y5dHXDKKGu590arj3UzcfDhG7XYAdteGHqK4wgwvUGA=
Subject key identifier: 2E:4A:0A:86:8C:F9:EB:AC:EB:F8:FC:6B:2E:A0:A3:81:E2:14:7A:28
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial: 0196A2ADB39051B755016D4421B519105942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
Manifest number: 07E1
Signing time: Mon 05 May 2025 23:00:14 +0000
Manifest this update: Mon 05 May 2025 23:00:14 +0000
Manifest next update: Tue 06 May 2025 23:00:14 +0000
Files and hashes: 1: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: dVpameZ8+wmW/xdyjpc2hDiEXsxubQ4Es6rU+a7zK+8=)
2: kyUP_zUxJzKqp_WSRe64xjQTn88.roa (hash: IIbLVXzFiGKxHkStsyV2IH0lCTK/4GbGDWn4D7OnNxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:b3:90:51:b7:55:01:6d:44:21:b5:19:10:59:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Validity
Not Before: May 5 23:00:14 2025 GMT
Not After : May 6 23:00:14 2025 GMT
Subject: CN=2e4a0a868cf9ebacebf8fc6b2ea0a381e2147a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:56:7d:11:3e:e9:59:98:6e:26:61:9d:bf:
0d:61:3a:11:9b:28:ed:80:2c:49:6b:8e:48:28:1b:
52:c3:77:f7:24:7d:d4:1a:e4:03:85:ac:06:a6:b0:
53:b8:b5:70:8a:4f:e4:82:e4:24:18:c0:0d:37:d8:
86:b9:1f:25:42:8b:f4:65:d4:43:ca:b4:64:cb:78:
d0:a3:50:d2:d6:b6:28:c2:6a:ea:f6:cf:02:2b:18:
03:79:65:34:54:04:e2:6c:2d:8c:c3:e8:2f:78:f6:
76:0a:0a:87:72:2e:54:3d:d6:d2:c7:fc:fe:a4:3b:
db:8c:49:4e:a4:4f:ba:62:18:cb:77:d2:91:51:f7:
8e:fd:81:b0:12:a3:70:bf:0d:40:b2:18:00:c2:09:
49:96:c2:06:bb:d9:d7:ea:ca:ae:1f:3d:67:d2:7b:
e9:d9:79:ac:08:45:38:80:2c:91:05:e0:3b:8d:23:
ca:b4:ed:bf:d5:44:55:53:c7:a0:b4:79:54:b8:82:
26:40:5e:7e:37:fb:c2:11:ca:d7:8f:a9:cc:30:d0:
2a:66:5c:9f:2c:60:2a:fb:12:f0:d1:a8:60:50:f9:
66:e8:bb:6c:5d:80:26:89:b5:3a:97:7f:f9:77:1a:
dd:6c:cc:e4:54:f7:8a:a2:90:db:c6:97:58:1f:4c:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4A:0A:86:8C:F9:EB:AC:EB:F8:FC:6B:2E:A0:A3:81:E2:14:7A:28
X509v3 Authority Key Identifier:
keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:47:a9:f0:d8:be:a6:07:d8:7f:1a:c2:45:40:90:41:d8:61:
bd:9f:ad:7c:4d:ee:48:42:df:cc:a7:05:f4:2e:c2:70:0e:1c:
17:6e:d3:c6:bd:14:cc:1c:74:1f:85:7e:bf:c8:47:48:18:ac:
28:54:6a:3d:f3:75:6d:2c:18:8b:2d:48:24:8c:3d:0e:f4:50:
f1:5f:98:1a:42:22:10:e9:79:cc:3c:c7:5d:7d:8c:8d:97:f8:
86:1b:fe:c9:26:91:dd:94:63:43:e3:78:48:7e:64:6c:8f:c3:
3a:89:09:a8:d6:ae:42:f9:7e:7b:b2:95:c1:79:91:0f:89:6e:
e0:c8:27:0f:4f:2a:d4:53:f3:cf:a4:40:d7:30:d5:3c:d5:03:
58:46:4b:24:a5:5c:7d:88:17:bc:17:99:f3:00:79:1a:ba:6e:
d8:9a:79:ad:bf:94:5e:59:72:c4:79:c2:04:3b:50:67:d3:9e:
ee:58:ed:2d:b3:5a:2e:04:58:d2:e1:a5:52:7c:a6:36:41:a4:
c6:69:3a:c2:00:10:e3:60:32:1c:6c:cd:dd:2c:03:a9:e5:f3:
4a:86:d1:42:0a:4a:7f:89:23:da:68:cc:23:06:fe:21:da:88:
70:cd:ad:45:3d:43:78:6b:68:08:98:1e:bc:35:08:23:f7:50:
24:d1:61:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:45:38 2025 by rpki-client