Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier: mBufRkEfhdKcm+IQy6xJ9zDYWCu2zfhTixUvvK2xDUk=
Subject key identifier: 67:34:E6:21:9A:E9:00:BF:07:75:6C:23:30:5E:FC:4A:E4:67:61:C2
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial: 0196C683D86E2B0E32A0692892656645378A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number: 09C3
Signing time: Mon 12 May 2025 22:00:51 +0000
Manifest this update: Mon 12 May 2025 22:00:51 +0000
Manifest next update: Tue 13 May 2025 22:00:51 +0000
Files and hashes: 1: Xrjs-S2RSbrZu3yjzq9Uz6FE53U.roa (hash: BOs1xZvMppiPo1LljXNukiOUbDIO0taZ6bkmR9k5vfQ=)
2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: 267l6GKOvHq4B2zbCprKFwpPVDWDANGp2h6kqnfEcAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:d8:6e:2b:0e:32:a0:69:28:92:65:66:45:37:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Validity
Not Before: May 12 22:00:51 2025 GMT
Not After : May 13 22:00:51 2025 GMT
Subject: CN=6734e6219ae900bf07756c23305efc4ae46761c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:88:87:46:e4:1d:d1:d3:1d:0c:81:d0:da:
db:b6:87:53:ce:36:24:0a:ea:47:84:c2:e8:e0:c9:
d8:70:96:7c:ea:34:d6:52:cd:e8:55:f4:07:4d:e9:
92:04:06:03:18:64:79:52:42:9f:5d:80:46:61:7b:
7a:1e:2d:12:c6:f8:37:63:08:14:8d:a3:9e:2c:e1:
13:1d:b8:99:48:b3:d2:1f:75:f1:a5:9a:18:e9:f2:
f2:17:32:c2:40:61:7b:fb:1e:f7:60:6a:7c:8b:28:
60:99:8e:b1:e6:fe:99:02:96:c7:be:b7:54:3b:45:
8a:b0:5d:3e:c4:bc:cc:4d:b9:74:7f:4f:b5:74:31:
d8:9e:e7:04:82:08:ea:8d:5e:97:b5:c2:23:59:7f:
75:fd:b5:90:5d:18:da:b1:3d:75:b6:15:07:45:44:
53:6d:f8:6d:2e:d3:40:62:1b:5d:2f:cd:bc:99:5e:
20:16:ae:05:fa:36:6b:13:94:56:82:b8:32:14:0a:
77:b4:1a:8d:40:12:ef:fb:42:c7:50:2f:f7:70:f0:
5f:46:d3:ab:cf:f9:92:85:48:41:28:31:bd:9e:a7:
94:67:b8:b7:3a:d5:03:1d:11:35:95:c6:34:84:65:
b4:90:84:27:11:49:e7:97:75:bb:ea:22:1d:b4:2d:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:34:E6:21:9A:E9:00:BF:07:75:6C:23:30:5E:FC:4A:E4:67:61:C2
X509v3 Authority Key Identifier:
keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6f:47:96:45:75:d4:3b:81:13:57:e3:34:aa:5a:70:00:de:
f9:a2:9e:8e:16:b8:d7:7a:83:89:b3:ba:97:6f:55:83:f7:dd:
d8:4d:b4:05:f5:fd:4f:7d:c4:90:e8:a0:e1:58:a4:4d:8e:6a:
ae:b6:d8:d1:02:7e:46:4f:2b:59:f8:29:61:70:57:00:75:c0:
fc:10:95:05:a3:a2:57:f9:8f:6a:f8:7c:55:c8:19:58:06:bd:
d6:39:6a:38:12:1f:f0:73:e2:2d:94:49:d3:73:fb:97:df:a1:
5b:a8:9d:60:f2:35:c3:cf:dc:c7:5d:68:33:41:e0:5a:5c:c8:
1f:a7:43:33:ed:cb:07:b4:60:1c:f3:9a:d5:6c:1f:c2:90:79:
d0:c7:d0:fa:29:a6:7f:6d:0f:80:54:8d:8f:64:de:94:df:b9:
41:22:03:a9:c9:3b:5f:fc:e9:7b:ee:60:d2:44:2f:87:63:84:
76:7e:8e:dc:a9:df:a2:54:cf:9f:36:25:91:2c:a4:f6:04:ad:
5a:d9:6d:c4:9f:8f:96:27:7e:29:c8:b3:ea:5d:bf:3a:c5:5c:
4c:bd:e7:2a:27:ea:62:3a:f4:15:bb:fc:b3:00:19:40:87:9f:
fe:c8:3d:94:ea:ee:3e:22:30:39:fb:19:93:b0:78:70:23:9c:
83:63:38:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:32:53 2025 by rpki-client