Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
File: faMe6cmJpjEaCP8jIomXhAFBXpE.mft (raw, json)
Hash identifier: ExEG1AqccDGFpVoDYXyxJ6ItZgbfQT1sTAbUeJU4P50=
Subject key identifier: B0:C3:83:A2:FB:96:B9:BA:58:32:03:25:B4:05:0B:BC:16:DB:9A:BA
Authority key identifier: 7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
Certificate issuer: /CN=7da31ee9c989a6311a08ff232289978401415e91
Certificate serial: 0196B17C6831F58EFEDFFA321F36199AAD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
Manifest number: 0ABB
Signing time: Thu 08 May 2025 20:00:42 +0000
Manifest this update: Thu 08 May 2025 20:00:42 +0000
Manifest next update: Fri 09 May 2025 20:00:42 +0000
Files and hashes: 1: UVlXhuX0bvgC_P179eV7Q7dV3kQ.roa (hash: cem7+lm0BpjpPBzCYfd6RxOq5JUr1ids+UD9/WCyjSE=)
2: faMe6cmJpjEaCP8jIomXhAFBXpE.crl (hash: y5Kwhge7acP8CK2UW/z8B7nlhbMothducNBEB6GeFGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:68:31:f5:8e:fe:df:fa:32:1f:36:19:9a:ad:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da31ee9c989a6311a08ff232289978401415e91
Validity
Not Before: May 8 20:00:42 2025 GMT
Not After : May 9 20:00:42 2025 GMT
Subject: CN=b0c383a2fb96b9ba58320325b4050bbc16db9aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:1c:7f:ed:8a:b2:eb:4a:9d:9a:f7:94:5f:
e3:78:29:d3:c0:95:e3:0c:df:ff:e1:36:b8:75:b5:
d1:07:d6:b7:79:b3:14:c4:24:03:15:52:e9:f4:3d:
f3:92:1f:aa:b3:e3:48:85:8e:38:f4:8c:5a:73:cb:
cc:05:88:71:8e:86:de:d2:8d:59:31:8c:06:68:be:
00:f5:11:87:08:f2:28:1d:03:11:4e:5f:c3:85:0c:
67:5f:a5:e6:e8:7b:43:4c:ce:4e:b4:61:41:5f:d7:
73:8b:80:c9:48:29:10:a2:bb:e4:42:33:71:74:af:
f1:44:c3:40:4f:5d:66:7a:5c:8b:aa:78:ae:12:5c:
5c:96:1d:0d:a2:cd:43:ba:aa:25:4f:ee:76:2b:58:
24:d0:68:6b:32:12:35:69:ab:af:46:cc:b2:24:3e:
fc:b8:52:4f:8c:11:36:93:4e:11:62:74:8b:3d:ef:
51:8b:15:95:16:ce:0f:66:4b:cd:9f:30:eb:34:5f:
8f:2a:ca:d4:52:38:10:c8:b0:9b:3d:21:c4:b7:d4:
38:92:d0:9d:eb:2c:37:78:54:88:41:19:92:73:51:
33:6a:8e:f1:1c:30:ac:d3:48:17:56:fb:00:10:54:
16:5c:b4:99:09:cb:3b:bc:14:71:7d:67:07:26:68:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C3:83:A2:FB:96:B9:BA:58:32:03:25:B4:05:0B:BC:16:DB:9A:BA
X509v3 Authority Key Identifier:
keyid:7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e2:b3:8b:71:b4:cc:74:0c:77:34:08:2c:50:cb:4f:7a:7b:
0f:4c:59:db:45:7f:bc:1e:06:48:58:7e:e1:a5:49:d6:0f:50:
38:c9:07:cf:ae:f4:62:83:18:1d:8b:73:fe:e3:c6:c6:59:b4:
1b:27:28:20:eb:da:ed:e6:df:75:b9:f5:c2:87:cd:8f:b0:56:
d4:5f:b7:6f:11:39:4b:92:4f:7f:ea:11:49:7e:e8:ab:72:a1:
3f:6a:c7:74:17:65:23:b8:01:08:93:90:25:a3:a3:88:4d:5f:
f5:e2:c2:26:64:14:5c:c2:61:5f:93:73:0d:98:d5:fb:a4:c4:
43:11:c7:09:97:da:f0:2a:53:f2:a5:af:c9:e7:52:04:96:51:
0f:77:84:ac:8c:83:0c:5b:61:71:4a:64:b6:a5:46:97:55:20:
23:a6:56:11:a7:8e:be:7f:3c:d5:96:c0:fe:2e:5b:81:dd:e2:
b7:ac:9f:3f:bd:e2:24:e2:df:a5:8c:73:77:bb:8b:a2:cd:7f:
6c:38:19:ae:a6:1c:bd:ff:84:b9:d0:3a:c8:df:7c:d2:f2:0f:
56:ff:cb:4d:bd:b6:6d:ef:be:7c:bb:37:23:b0:92:bf:6b:4e:
9e:f2:b0:e4:21:db:e4:71:eb:c8:35:e3:6d:32:70:df:c4:05:
8f:72:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:55:36 2025 by rpki-client