Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
File: ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json)
Hash identifier: 69KraJz6a3yBJYOZ9Ag4P5zN8Ejr8Xyccziq+4RdkMI=
Subject key identifier: 0D:34:D7:5A:9C:1D:67:5D:C8:51:B8:4C:F8:9C:F8:3E:55:36:84:0A
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 0196A72FEF25EB45CA9E44FCAF40462C50F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
Manifest number: 0616
Signing time: Tue 06 May 2025 20:00:58 +0000
Manifest this update: Tue 06 May 2025 20:00:58 +0000
Manifest next update: Wed 07 May 2025 20:00:58 +0000
Files and hashes: 1: K3iMHdAeJXfHlnnr-SFgcqXt6ns.roa (hash: UNryLkfKYrOJZtamnGSaO+ZvTx9tCb9rjtiqKaAua+s=)
2: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: s/PrbGBJlNY9rywKZtwAPrpDR0zBBWMf+d1BpzKRkQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:ef:25:eb:45:ca:9e:44:fc:af:40:46:2c:50:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: May 6 20:00:58 2025 GMT
Not After : May 7 20:00:58 2025 GMT
Subject: CN=0d34d75a9c1d675dc851b84cf89cf83e5536840a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:c1:ad:19:6d:d8:de:67:34:12:58:82:11:
77:4e:85:34:da:2c:a4:b0:bb:08:3b:22:45:79:cf:
b4:1c:e4:e9:fc:c6:e3:b1:2c:64:63:ad:e8:f8:63:
60:10:b3:bc:27:24:10:a3:e8:9e:9c:d5:f4:9f:db:
a0:e9:0f:cd:fb:4f:36:75:01:3c:9b:e8:f2:48:47:
73:f8:b9:9d:b7:e7:f2:71:54:20:11:92:4b:5b:9e:
9c:f0:93:9b:60:8a:4d:1e:88:74:11:e1:95:aa:f2:
fc:4c:48:b2:99:b9:bd:08:7c:8b:e2:83:13:41:24:
85:f5:f5:41:e5:50:87:24:2b:3d:14:7f:59:98:b9:
19:df:71:22:58:9e:4b:d4:7a:4b:3c:b2:fd:14:62:
56:1f:7d:e3:fc:88:41:ea:5c:4e:42:e4:d8:95:67:
fb:9e:cb:48:dc:4e:42:a7:14:21:17:fe:11:83:10:
ff:74:37:57:d9:db:9f:28:e8:2f:2b:9f:16:c9:b3:
00:65:e9:30:1a:08:b0:3d:e3:80:56:82:a6:07:1a:
ec:49:8a:ce:5f:41:dc:e6:68:e8:70:a0:79:a6:6c:
5d:5b:dc:89:a4:d9:32:db:4b:86:85:42:66:db:c9:
39:e0:8a:0b:9f:51:78:6d:0a:00:ea:5c:8a:eb:eb:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:34:D7:5A:9C:1D:67:5D:C8:51:B8:4C:F8:9C:F8:3E:55:36:84:0A
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ab:c7:62:2a:0f:a3:c2:d2:6e:39:82:b8:28:58:a7:ff:63:
34:14:36:46:77:d1:fa:c6:55:eb:23:95:23:da:80:ee:51:49:
87:e6:51:cb:7f:98:bc:37:03:bf:63:4f:eb:db:72:bf:da:8f:
73:e5:2f:c9:d7:b3:09:94:bd:b4:34:05:e9:d1:76:27:9b:7f:
4d:7a:d3:79:2b:67:45:6b:a5:5c:4c:78:39:a8:3b:04:f2:da:
a6:d1:cf:25:8c:54:6f:15:bb:7a:42:79:30:12:7c:f3:a3:9c:
5d:1f:14:24:37:77:66:d5:29:09:a2:06:77:10:4c:4e:73:d2:
29:e9:16:d4:9f:92:14:45:b2:96:35:c4:aa:4c:0b:70:4e:26:
e6:89:7b:c3:c4:8d:fe:15:02:3f:c4:9f:e7:58:27:4d:f9:ac:
4f:e4:9a:9f:52:ef:f7:21:26:0d:5a:9a:93:1c:8a:3f:aa:7d:
5b:69:38:ec:21:a2:a1:4f:eb:2b:37:1b:35:31:c8:80:77:86:
ba:59:17:ad:a6:aa:38:14:1f:be:9c:58:93:3f:a8:75:16:41:
33:3f:70:b8:1c:d4:70:0f:66:30:b9:e5:3b:2c:7e:92:08:06:
6e:ac:15:6d:8d:e3:ba:83:5c:f9:04:3c:c8:77:39:38:8e:f4:
c2:51:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:09:25 2025 by rpki-client