Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File: fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier: oKuvedOM4MZTI/BVvOzW2ffGuVrANj7dlxKmsdrNku8=
Subject key identifier: 2B:3C:BA:07:92:90:95:E1:B3:58:24:C4:E3:7C:C8:8F:0B:0B:68:49
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial: 0196C3B989E57ADE2879182503CA8EF34D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number: 0FAA
Signing time: Mon 12 May 2025 09:00:38 +0000
Manifest this update: Mon 12 May 2025 09:00:38 +0000
Manifest next update: Tue 13 May 2025 09:00:38 +0000
Files and hashes: 1: aO3R8Yo3eBCEfuvERnCJCw4GHKw.roa (hash: 0+s8Oxr+vc9N7zEky4ZV5zDnUpXVmpiBsxhTGsefbzg=)
2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: ckDNaF4+G3oBdPUr4gwwt/WN4kG/o+rP776i38naZsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:89:e5:7a:de:28:79:18:25:03:ca:8e:f3:4d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
Validity
Not Before: May 12 09:00:38 2025 GMT
Not After : May 13 09:00:38 2025 GMT
Subject: CN=2b3cba07929095e1b35824c4e37cc88f0b0b6849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:74:07:58:19:cc:31:8f:c7:4a:f0:ac:97:
e1:c9:53:a7:62:33:29:ed:6b:4c:7a:e2:d1:25:c9:
7e:8f:76:bd:28:fe:94:9e:d0:75:5a:81:ec:a6:ba:
fc:58:a6:15:33:b1:25:75:55:6c:d8:c5:c9:f1:50:
e0:c5:b6:ef:8a:95:df:b6:00:ed:6b:ac:83:cb:15:
df:b2:6a:4d:77:ce:da:92:6e:b2:20:52:c0:d5:2b:
14:38:ec:9b:c6:49:bd:99:17:2b:3e:ae:12:80:74:
3e:dd:51:cf:f8:2d:b9:bb:97:24:f5:2a:ea:b1:18:
c7:f9:96:03:20:ba:6a:fc:88:63:3d:a0:ea:36:de:
37:ed:a7:4e:37:1e:ea:e0:6e:d9:4a:75:6d:d4:c9:
96:0b:58:78:f9:8c:61:98:29:37:bb:ce:39:d7:64:
fe:c4:6a:36:f2:02:5e:af:d3:a6:a0:45:47:ae:e6:
a1:9d:20:ae:4b:58:c3:89:b2:1b:aa:30:ab:9e:37:
85:91:b3:45:20:b9:4a:f8:e8:1d:6f:52:b5:f9:e7:
07:95:33:80:a2:6b:a4:19:94:6c:5d:4c:ad:96:73:
6a:2c:ef:03:ac:16:c0:13:7c:fb:76:ed:ab:03:7e:
a4:97:f3:f3:fe:53:a0:b5:0f:25:fa:57:77:ec:ef:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3C:BA:07:92:90:95:E1:B3:58:24:C4:E3:7C:C8:8F:0B:0B:68:49
X509v3 Authority Key Identifier:
keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2c:7d:e6:b8:36:e5:b5:42:45:95:97:f0:0b:f0:27:0f:cd:
90:ff:85:31:a2:c2:48:92:3d:81:08:3d:c7:b9:95:61:99:9f:
66:70:fa:a7:84:e4:84:41:20:f5:88:9d:36:b1:84:5f:49:90:
58:7a:16:47:88:ed:8d:27:40:57:0d:a3:0c:9c:45:0a:51:62:
7a:6d:ea:f4:04:f2:36:06:c1:c8:b3:ae:82:45:60:a3:4b:b9:
29:ab:f8:bf:a8:b2:f2:2d:45:82:46:a6:2b:a4:2a:4e:b6:38:
5b:98:80:15:f6:24:5e:ce:a0:4c:5f:83:75:25:86:8f:fc:34:
d2:ad:20:6e:32:2d:5d:d2:dd:c9:30:49:e6:6c:5d:68:f4:c0:
e4:73:4c:28:7c:9c:fd:07:2a:88:21:3f:29:3d:91:fb:f0:f8:
e0:43:8c:9d:00:16:d0:a8:e8:65:7c:0a:ee:44:5f:23:2a:17:
b7:12:a3:03:df:55:0e:a3:52:f5:13:b1:f8:46:ec:3b:bd:63:
e8:f3:36:e2:bc:bc:b1:c6:4f:20:ec:18:f4:a6:bf:47:ce:73:
71:39:d2:21:fe:dd:3f:14:cc:91:b8:dd:4c:30:04:a6:31:05:
f9:11:15:1e:39:70:b5:ab:43:60:e0:f2:ba:28:69:25:d0:13:
4b:f6:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:54:51 2025 by rpki-client