Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: rxIIDUwHtK/bNHt7zhSm+tc0KnSyRaNah6vhFtDciSs=
Subject key identifier: CE:D8:E5:11:EA:33:1C:89:21:AB:46:5D:46:59:1B:BF:3D:37:7C:B9
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 0196BD12BD09E8AAA95F42FF11D257A872EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 1214
Signing time: Sun 11 May 2025 02:00:43 +0000
Manifest this update: Sun 11 May 2025 02:00:43 +0000
Manifest next update: Mon 12 May 2025 02:00:43 +0000
Files and hashes: 1: WWnUjL9xa5N7RsAiSnLThhNhQII.roa (hash: A7PEzwDFjxl/k3orxXArS56nuTh+qfj6pNUO4Y3XuLQ=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: jWZK+d+vVoj2TC52trqsC0AF+cAtwGeDkPcmh0XTWWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:bd:09:e8:aa:a9:5f:42:ff:11:d2:57:a8:72:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: May 11 02:00:43 2025 GMT
Not After : May 12 02:00:43 2025 GMT
Subject: CN=ced8e511ea331c8921ab465d46591bbf3d377cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:01:1a:ac:6d:58:89:b8:c1:61:c3:79:d8:
7b:3e:71:8b:1e:cf:d2:66:82:2c:fb:e4:79:a5:26:
82:c6:b5:07:1c:d6:23:ba:b3:64:b5:73:45:4a:c8:
79:65:f6:89:01:37:e0:a1:64:39:eb:62:d2:aa:58:
8e:dd:c1:2e:57:3d:66:77:75:2f:f1:5e:e0:7a:e0:
be:00:61:90:37:41:ce:63:bb:de:8e:91:3b:64:84:
8b:a5:8e:b3:f2:86:bc:3f:3c:63:4d:9d:bb:58:c2:
f5:35:2f:1e:c5:ad:df:8f:ad:0c:f6:b2:fe:e6:b9:
e7:f0:70:35:8e:c2:66:cd:51:0c:0c:95:58:6f:ea:
0d:66:79:22:f0:c2:2e:80:25:23:92:27:f2:79:a6:
40:2f:26:4c:b9:12:a9:6d:5b:a9:4e:5a:89:ab:c7:
35:5e:bd:30:49:65:bf:55:e5:91:5a:db:0a:dd:9f:
82:35:ea:4f:a0:84:a1:c3:9a:d6:7c:81:61:f6:2c:
7d:c3:35:33:07:42:51:a9:c6:27:c1:79:82:b8:f1:
13:a7:ba:e4:ff:c6:79:76:4d:c2:27:06:5a:84:1f:
c6:06:ce:13:e7:94:f3:09:f7:b0:d1:e9:90:15:72:
6d:f8:e2:91:73:50:4e:3b:78:6d:c9:8b:8c:c0:13:
cc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:E5:11:EA:33:1C:89:21:AB:46:5D:46:59:1B:BF:3D:37:7C:B9
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:da:60:db:40:e7:e8:97:d3:20:4f:b7:0e:32:d8:11:ac:1d:
1b:fa:dc:eb:07:49:48:0e:62:1f:12:fd:42:06:1c:bc:8f:4b:
27:e0:74:b0:72:c0:91:ba:c2:f1:09:89:7c:a9:9e:65:66:e3:
8c:27:9d:5a:86:26:f9:29:32:d0:5c:98:26:2e:98:35:9a:47:
aa:7b:0c:fe:bd:05:6d:99:69:08:42:9a:36:8a:e0:70:9c:b6:
ca:5e:8c:43:68:11:6f:57:f9:2c:50:47:f1:d3:57:f1:c1:53:
ef:c9:53:9b:52:1b:bf:aa:3e:83:da:b1:99:82:5e:37:8c:03:
b7:d7:1c:ff:70:b9:73:00:30:fa:ef:15:4d:91:a5:a9:73:91:
e8:a8:25:3d:d4:16:a2:ea:86:b1:50:30:d8:58:0e:bd:28:7f:
5a:af:15:42:e5:e9:e8:51:ca:73:02:7f:f4:59:e3:00:b8:66:
b8:31:61:f7:bb:49:75:49:78:13:fa:af:53:c7:e6:64:49:ab:
e4:54:9e:94:97:d8:73:24:8b:9d:63:8e:3f:81:55:da:de:f6:
43:3b:89:af:4a:cc:60:59:9e:5e:c9:c2:7b:99:62:a6:e0:49:
d8:85:7f:3a:ad:23:d6:54:a5:7c:a3:7b:cc:e4:93:aa:f5:c6:
9a:40:57:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:29:09 2025 by rpki-client