Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
File: F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json)
Hash identifier: b75opZCeL8nJVCHau4QgSjuKhRjJT6SSRqPF1D/aAb0=
Subject key identifier: 7F:32:18:CF:17:81:FD:9D:C7:41:17:CC:49:CD:86:94:E1:28:BE:BF
Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
Certificate issuer: /CN=175a20608ace11e7511c8669560636730a9e2abf
Certificate serial: 0196C2701EA62590F6632C6C2CB03B423EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
Manifest number: 03F2
Signing time: Mon 12 May 2025 03:00:49 +0000
Manifest this update: Mon 12 May 2025 03:00:49 +0000
Manifest next update: Tue 13 May 2025 03:00:49 +0000
Files and hashes: 1: 2U-2Eym6KYW6qLxuFsjcorsxKnc.roa (hash: KrlvkjS9SKD/PHB33xX+CX5Zyn9t48T8ugGL2ErULzA=)
2: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: esQg2GnPJvxwYMNQUzcpviUdgIrHMVpDnjZhnvNLiuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:70:1e:a6:25:90:f6:63:2c:6c:2c:b0:3b:42:3e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf
Validity
Not Before: May 12 03:00:49 2025 GMT
Not After : May 13 03:00:49 2025 GMT
Subject: CN=7f3218cf1781fd9dc74117cc49cd8694e128bebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:ed:54:87:4f:53:46:fe:ad:5d:31:d4:ed:
b6:99:91:ac:a7:b6:2a:8d:06:37:c5:98:83:c6:4a:
1d:d0:61:f0:2d:3f:1c:27:1b:ec:38:4d:f2:7c:13:
bd:af:a5:95:81:3c:9e:e3:f1:87:d1:6b:48:47:68:
5c:8a:3f:64:65:e9:58:4c:fe:53:d7:12:b0:39:93:
b6:af:b1:80:61:89:d5:39:53:26:f1:e3:a3:3b:8d:
c2:fe:c0:7a:65:8a:9c:b4:c1:b9:8f:a5:3d:5b:a5:
56:e7:f5:ed:3e:59:cd:ba:5e:8d:ad:5c:69:f7:8d:
d8:03:71:0f:76:c5:19:02:da:f7:99:1e:19:54:a5:
86:fa:85:36:8a:0c:19:12:03:f5:39:cb:1c:5f:65:
c9:55:10:a0:b2:63:60:a2:df:6c:a1:51:5a:d5:cc:
d1:da:06:ef:c2:c6:88:19:3b:78:5b:20:68:1d:2f:
52:98:36:77:31:13:6c:f7:64:85:6c:8b:ff:dd:b7:
5f:e2:4a:1a:34:fd:a6:0e:2b:a9:da:78:24:d4:e8:
b6:04:75:62:73:37:85:5e:0c:2c:6c:4f:f6:8d:ff:
14:61:c4:f9:61:1d:1b:b3:6e:c8:fb:f9:2a:df:1f:
de:c9:f1:39:ff:c2:07:f5:ef:7c:85:12:0c:e2:ea:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:32:18:CF:17:81:FD:9D:C7:41:17:CC:49:CD:86:94:E1:28:BE:BF
X509v3 Authority Key Identifier:
keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a6:0b:ad:c0:45:97:52:b5:8e:81:5d:2e:f6:3f:af:b7:bd:
7c:4f:e8:02:61:10:c0:47:70:62:aa:0a:37:7e:65:62:48:13:
4a:7a:89:a9:3d:b7:f1:f6:27:92:42:ce:6a:66:a0:66:1f:8d:
ef:91:60:8c:db:dd:bb:8d:18:72:3e:25:32:ee:53:5c:7c:bd:
a9:83:6c:0a:46:23:78:d0:8c:cd:df:05:1c:8e:f7:89:e1:76:
af:a3:b4:9d:b8:b0:b6:e7:90:25:47:51:9a:03:5b:e5:6e:95:
6b:06:67:e5:d2:af:50:9d:c5:44:7a:1e:f8:3c:3d:a3:16:f7:
4f:6d:93:ca:9e:52:81:24:51:82:29:f5:b3:57:52:dc:c3:3c:
41:78:8a:cc:55:33:02:7e:09:1d:65:02:fc:5d:1f:4a:2d:cd:
2c:51:87:fb:80:58:fa:03:31:af:a5:a0:a8:96:96:56:5d:a1:
e3:7b:31:ac:27:8a:ad:f1:5d:7c:a8:d6:63:a0:ce:35:c8:f5:
e4:03:9d:52:c5:32:5b:a3:2b:92:85:f0:59:9a:a3:52:26:c5:
d8:63:7a:15:96:c6:c0:f8:57:f2:b2:3d:0b:d6:69:b2:91:83:
b0:c1:61:64:88:69:1b:a5:89:03:53:f6:e9:c2:b1:26:ce:62:
32:a2:30:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:18:40 2025 by rpki-client