Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: Jv++WiWc/fdHFTquqTaHkUKcdCYzmoXdj9yrxi+0GOQ=
Subject key identifier: 71:57:97:70:8B:8F:58:28:83:1E:83:4A:7A:1D:2A:55:62:2D:F0:0E
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 0196D9D393762D0E037001ACBCBF90FECEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 0D8A
Signing time: Fri 16 May 2025 16:00:43 +0000
Manifest this update: Fri 16 May 2025 16:00:43 +0000
Manifest next update: Sat 17 May 2025 16:00:43 +0000
Files and hashes: 1: JQpnjsOMpFiQQJOrjnkEWtt3EFI.roa (hash: 4t67VWbmiq9bprri9rSmGg0uFh9lfRFrW2ITm8UtRrg=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: x20eLazi0pwH6zc+ctV/pwfzBaNizJ7WPolySDn65/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:d3:93:76:2d:0e:03:70:01:ac:bc:bf:90:fe:ce:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: May 16 16:00:43 2025 GMT
Not After : May 17 16:00:43 2025 GMT
Subject: CN=715797708b8f5828831e834a7a1d2a55622df00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:38:14:bf:0b:66:d5:c0:c7:6b:0b:73:08:
fc:9e:ea:b2:7a:8e:c1:52:1a:fc:4b:61:e1:b1:0d:
d3:5c:dd:44:19:82:d7:fd:3c:7f:22:77:15:85:cd:
d9:75:50:b7:e5:68:46:c5:be:b2:55:c0:a1:f0:a1:
09:95:33:92:93:56:cc:cc:85:b9:c8:c5:49:ed:7f:
84:d0:d7:e0:c8:c6:4b:33:eb:7c:7e:69:22:93:cc:
e8:14:ca:83:0d:2f:e6:65:1b:8d:6a:21:ca:de:12:
04:15:b2:85:81:13:10:51:d3:bf:28:a5:a4:ef:43:
45:3a:0f:4c:27:18:8c:40:20:0d:13:53:8e:a0:32:
74:b4:95:41:76:36:dc:d6:2f:35:4f:a3:40:8e:1f:
f1:7b:2f:bb:5b:fb:eb:52:16:29:f6:6e:d9:ef:44:
c0:2b:2a:b7:57:0b:23:69:89:68:af:5e:91:95:11:
a9:a6:0b:0b:78:95:33:5d:a9:18:d3:43:0d:ed:ed:
71:62:07:a2:66:6d:ea:cf:d9:85:de:30:64:12:48:
62:e8:2a:c5:2b:88:29:f0:a2:b7:e2:a2:8a:c3:97:
de:2e:89:e1:83:0a:06:fd:5a:0e:6a:79:7a:bb:92:
a7:fe:73:90:54:37:bb:4c:67:9b:bc:88:ef:c4:de:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:57:97:70:8B:8F:58:28:83:1E:83:4A:7A:1D:2A:55:62:2D:F0:0E
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:da:db:c3:6f:ae:cc:4b:4f:d9:f0:bd:79:41:01:fc:55:79:
55:38:16:7c:db:a6:4e:a3:63:26:20:76:f8:07:4d:2a:7b:af:
5c:7c:06:ca:cb:21:7e:f4:f3:a8:de:96:1e:8d:fe:10:a5:b3:
39:96:8f:85:c2:5a:bd:b7:f3:4b:06:98:33:5e:65:3a:ca:c0:
cb:59:ef:9c:11:43:49:bf:0d:40:35:c2:8a:fb:6a:02:d8:30:
91:02:4c:a5:bd:f2:d8:0d:47:6d:2c:1f:14:d4:64:45:dc:66:
42:fb:0b:d0:90:bd:80:fe:3d:a6:e6:98:d9:bf:2e:fd:1f:de:
18:ca:37:ad:05:65:93:d6:23:ed:cc:be:5d:be:6c:07:b9:2f:
ec:bf:80:47:4f:b1:86:6f:18:4c:1f:45:0f:af:b1:f0:c7:39:
b0:e1:da:4f:12:9a:51:7e:f2:ca:e9:dd:22:cf:ff:7e:cd:53:
34:6d:16:2c:98:a0:bb:ae:5e:b6:9e:8b:a2:4f:09:01:08:47:
3d:9d:e4:76:69:16:c6:17:63:bd:91:b5:b1:16:a5:17:f8:78:
ef:f9:a6:e8:eb:a3:23:87:6e:c4:88:96:4a:a7:9b:78:b5:6e:
58:f9:d6:6a:d1:9f:2f:bc:df:e8:9e:73:84:67:68:9b:66:08:
75:9a:6a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:27:00 2025 by rpki-client