Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: kvracuYPParOJ0tgWeEoa8cM+FSpceTeByzYe/TeaAQ=
Subject key identifier: FC:7A:67:03:AC:72:C5:EA:9A:5F:54:B0:2B:04:A6:A2:0B:64:0D:7F
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 0196BD129288048B10E20B85F2CCFCFF371D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 1278
Signing time: Sun 11 May 2025 02:00:33 +0000
Manifest this update: Sun 11 May 2025 02:00:33 +0000
Manifest next update: Mon 12 May 2025 02:00:33 +0000
Files and hashes: 1: 4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (hash: sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=)
2: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: R0CaIR/I+WN+kLww++rzwy6Kho8BTDmmEVbaWLeSRfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:92:88:04:8b:10:e2:0b:85:f2:cc:fc:ff:37:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: May 11 02:00:33 2025 GMT
Not After : May 12 02:00:33 2025 GMT
Subject: CN=fc7a6703ac72c5ea9a5f54b02b04a6a20b640d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a2:4c:13:7b:5c:1e:db:63:fc:68:f0:be:be:
77:da:07:43:a5:fd:7e:48:c5:24:8b:f3:b0:7e:00:
e7:ee:85:ce:50:92:60:a7:75:27:12:a8:d9:72:66:
a4:5b:8e:00:8a:7c:e5:31:7f:a3:63:dc:c3:fa:e6:
9a:d3:b0:1a:de:48:42:1a:f5:83:bb:1d:fd:f1:83:
e7:b4:52:94:4a:27:bc:6e:1a:17:47:8b:d7:62:85:
c1:d1:37:06:ae:fe:5e:89:a6:8d:14:5e:66:15:7d:
bf:11:84:91:e1:ba:e1:ed:7e:71:0b:db:c2:6b:12:
21:22:22:2b:37:c3:a9:94:e6:d7:05:a1:30:f3:4e:
bc:7b:e9:2c:0a:49:3b:40:93:ab:55:3c:63:be:bf:
90:0f:ac:9b:f4:58:c7:85:95:25:d2:b9:f9:96:03:
f1:28:10:4d:2c:a0:42:6e:be:f1:9a:a2:64:db:9a:
86:8c:79:e1:b3:84:b9:42:4e:44:4b:94:45:92:79:
98:3d:24:40:4c:e2:d7:b9:8d:66:91:0a:a9:68:ad:
b5:5c:b8:61:4e:25:67:66:d1:fb:3c:59:e5:01:da:
52:af:16:76:13:d0:ad:05:02:2b:0c:c7:a2:17:35:
6c:6a:52:f1:bd:6c:0c:ee:96:cf:1b:bc:a6:a7:d7:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7A:67:03:AC:72:C5:EA:9A:5F:54:B0:2B:04:A6:A2:0B:64:0D:7F
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:86:7c:09:f7:65:95:fc:39:0d:94:92:54:3d:30:5e:b3:c8:
bc:0e:4b:c7:ff:3c:c0:7a:24:11:c3:ca:7e:20:b7:04:9c:29:
94:35:32:f3:74:0c:f4:00:c4:4f:3d:90:ea:1a:1e:14:25:34:
5a:e7:d0:23:32:30:f2:8a:1a:95:a8:37:38:39:73:fb:34:7a:
50:5e:12:88:56:b2:02:2e:0f:7f:32:7c:57:a9:53:45:ad:fa:
23:7d:ee:46:96:61:99:9b:14:05:2f:df:21:65:b4:33:30:e2:
ea:89:06:07:65:36:0b:11:bc:a9:14:84:36:46:3b:98:23:bc:
68:51:ef:d2:c8:85:14:af:53:43:d1:c9:29:af:92:86:e3:52:
9a:ff:d3:af:bc:a4:56:9b:b2:d9:a8:eb:e9:f5:e7:48:21:f0:
96:87:f6:5b:bf:6c:12:de:b8:8d:e8:3b:33:c9:56:35:47:3c:
1b:da:9d:6d:a8:7e:d9:7e:1c:00:45:c1:47:51:c6:2f:68:47:
4a:29:26:f3:eb:fc:d7:f3:f5:e0:cc:18:7a:2b:8b:17:8e:b5:
52:62:85:37:4c:6c:57:18:49:c8:36:9c:dd:ad:6e:a4:30:68:
73:ee:69:53:9d:76:d1:ee:40:e9:b6:9a:80:c4:55:75:6e:53:
b3:7d:07:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:31:04 2025 by rpki-client