Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File: fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier: yB4EVnS62gVVCECV9lG3Zeq+F5TLz95SAxQRNShxyyY=
Subject key identifier: 49:3A:40:3C:C2:1F:03:57:7B:D3:C8:16:64:02:A6:98:3C:0D:5F:28
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 01969D87FE33819C5C9DC6F46E07097E47A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number: 1401
Signing time: Sun 04 May 2025 23:00:57 +0000
Manifest this update: Sun 04 May 2025 23:00:57 +0000
Manifest next update: Mon 05 May 2025 23:00:57 +0000
Files and hashes: 1: D0FtQbvZQzXxktB27DUgaEKlwyA.roa (hash: TJTUE8/n7jdIuoCoqw/ggE/DDwa5ne0vVYVe1eoGnag=)
2: RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa (hash: LUqOAenIf0vYCqR2aBBDyfZ5SWi7hY4GyrNgtlhdeZw=)
3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: SKNy021kjAhSExeb4qW4AVFjsAW1iA6mNp7DG/f9RfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:fe:33:81:9c:5c:9d:c6:f4:6e:07:09:7e:47:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: May 4 23:00:57 2025 GMT
Not After : May 5 23:00:57 2025 GMT
Subject: CN=493a403cc21f03577bd3c8166402a6983c0d5f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:e1:24:d7:26:c1:98:2c:b4:39:fe:39:70:
58:e0:23:ea:c9:eb:a3:e3:fe:a0:af:2f:4b:23:37:
6a:16:d5:30:f6:8c:16:2b:4f:41:a1:1e:84:0d:d9:
e8:5c:d4:d3:5f:8b:92:a4:c3:57:84:e4:35:b6:39:
30:2a:cb:ee:10:9a:60:7d:16:f2:e6:b7:13:8f:16:
79:ab:25:50:4f:d1:15:50:dc:93:e8:94:96:2a:72:
10:1a:cd:77:8f:ca:92:0b:65:db:6c:f1:c3:de:4c:
d1:7c:d0:c7:1f:36:c4:b5:72:58:d1:6b:c7:1e:80:
71:82:b5:e9:cc:0a:3c:62:b8:b6:6c:40:e7:2e:96:
ff:dc:94:85:56:83:d4:17:a0:c6:db:81:fa:0a:ac:
5c:dd:72:db:b8:0c:bf:02:72:b1:75:fa:f3:bf:c3:
d9:71:c8:cf:2a:47:f5:57:80:a6:fa:fd:f3:92:0d:
c0:19:fc:bd:74:29:94:5a:0b:f4:c2:ad:f2:b2:17:
7a:ae:83:9b:75:cd:ef:54:36:28:82:c7:af:c7:c6:
7c:04:4f:41:e4:1d:50:7f:ac:e7:b7:dd:67:28:1c:
1e:d3:d4:1a:74:59:80:88:e7:e3:bc:ee:d2:8e:33:
fa:f2:0b:bf:2f:15:8c:f5:83:fb:fc:69:6e:71:e9:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3A:40:3C:C2:1F:03:57:7B:D3:C8:16:64:02:A6:98:3C:0D:5F:28
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:52:7a:e7:39:d8:c1:21:ed:4e:8e:91:3a:a3:38:f8:c6:47:
21:f3:d6:90:0e:5b:4c:5a:a3:b9:b1:ce:03:8c:c2:9b:b6:99:
38:35:36:18:17:33:28:b0:b7:47:79:19:46:60:e1:7f:5f:36:
bc:d0:e6:0c:59:3a:80:63:18:f9:59:22:b5:a2:05:1f:15:92:
de:54:2b:e5:f6:77:96:d1:49:d1:56:14:c1:e6:c8:b7:5f:7b:
e5:01:8f:75:f0:76:e3:b2:d2:f9:b5:13:a3:30:ec:5d:d9:e9:
0b:ac:c2:e7:2f:01:05:64:97:1e:b5:e6:eb:cf:9f:8c:e0:47:
00:d5:c1:64:64:a3:04:47:fc:6c:60:da:7e:e6:3d:cb:57:74:
11:54:49:81:4d:5a:6f:eb:e3:5b:c5:30:0b:df:e6:14:9c:5e:
3e:44:17:cc:8b:3f:82:f3:44:92:78:e8:45:5e:f5:8f:6a:cd:
38:40:a7:d8:e2:49:38:92:5d:ce:69:c7:00:44:ec:b6:08:c9:
64:68:b0:ce:e8:ca:a4:64:ff:26:70:8b:ff:3e:be:3c:64:7e:
6c:39:cc:a1:53:91:30:27:d7:13:1a:7d:d4:ff:7c:8b:a1:39:
80:59:85:29:80:86:b0:c4:bc:b4:43:71:73:c4:53:d9:34:33:
1c:ef:f9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:24:56 2025 by rpki-client