Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier: 9cGf06J3n/yOC4jCYmJ6z8mySXSjdsH3Dn95HVMrR28=
Subject key identifier: B8:02:35:C4:C2:4D:BD:7E:3F:18:0D:59:A0:EC:EC:3A:ED:1A:2F:DB
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial: 0196B89161004C6EDB8A5F91F5C4DBC96824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number: 020F
Signing time: Sat 10 May 2025 05:00:57 +0000
Manifest this update: Sat 10 May 2025 05:00:57 +0000
Manifest next update: Sun 11 May 2025 05:00:57 +0000
Files and hashes: 1: RdOdP3DlBfXpnxBBT7lO73v8oG8.roa (hash: 9+BQ0Xt7iU/x6pUN6YyjEsb6BHBaV2Ejuirq22nlRh8=)
2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: jsvO5RpEsU5r73G/hRHX3R+ssIPhsr/A1xDiIDaSZHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:61:00:4c:6e:db:8a:5f:91:f5:c4:db:c9:68:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Validity
Not Before: May 10 05:00:57 2025 GMT
Not After : May 11 05:00:57 2025 GMT
Subject: CN=b80235c4c24dbd7e3f180d59a0ecec3aed1a2fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:13:e6:1d:24:e2:4b:50:cd:ae:1c:5d:c5:
a7:f7:a0:f7:c0:00:b1:57:fe:95:c5:a6:74:c2:13:
ab:ca:c6:8f:35:c5:d3:19:7b:4e:62:a4:08:8e:df:
7f:76:b9:8f:46:f3:a0:74:29:2c:28:6c:60:da:4f:
9f:4c:c9:7a:ca:81:7a:87:34:67:a5:12:24:74:32:
8a:64:89:82:3e:58:21:64:de:31:0a:52:6b:83:e9:
e1:7a:2a:20:2d:b7:61:d5:ff:ee:32:5a:40:14:42:
40:37:d4:38:5d:58:36:04:ca:83:28:30:7a:2a:e5:
36:6c:d7:5b:cc:eb:d3:03:c8:0e:40:fc:cf:66:4c:
2b:1a:c2:08:de:7c:0e:99:aa:a8:f0:f7:59:29:cb:
f3:63:51:2e:e9:e5:93:77:df:0c:70:78:6f:e8:5e:
fb:1b:f7:b8:e5:69:44:3a:25:03:c6:b1:86:ed:56:
4e:ff:5c:a0:15:46:94:60:80:2e:f1:59:3c:10:79:
f0:30:32:8c:c1:b7:1e:40:8e:25:3d:9c:f6:17:33:
29:9a:3e:b2:20:4c:04:d9:f9:41:5b:57:30:68:43:
55:82:dd:f9:ad:6f:fe:6e:47:fb:73:40:ad:c5:58:
32:36:ea:c4:53:15:79:18:ec:fc:0a:8b:cb:6e:3e:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:35:C4:C2:4D:BD:7E:3F:18:0D:59:A0:EC:EC:3A:ED:1A:2F:DB
X509v3 Authority Key Identifier:
keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d7:11:ee:22:0c:0f:07:d5:92:78:aa:43:28:0d:69:b6:a5:
d8:12:85:bb:c8:65:97:0d:59:d4:15:d1:3a:ef:bb:14:fb:42:
9b:c8:03:96:df:52:5a:64:43:51:50:6e:fd:33:89:28:4f:44:
ba:6b:99:8b:9b:8a:d7:86:d7:64:cd:eb:c7:28:0f:99:b2:ba:
d5:65:26:1b:60:42:2f:b0:55:5e:fe:7e:83:f9:95:a4:28:0b:
56:75:bc:86:cd:5f:65:4d:dd:6d:8b:44:4c:69:23:92:20:62:
6a:75:45:be:3c:09:1c:48:ac:7a:f9:8d:ce:cd:89:c2:36:9a:
90:71:88:bc:0c:c0:c9:81:b7:d4:62:ca:b7:e1:7c:28:b2:86:
15:d2:bb:af:f1:ba:9c:64:9b:6e:48:68:0f:3e:f7:64:74:c8:
bf:7c:a9:4e:31:b4:b1:7b:ac:6b:00:a7:ca:fd:ec:de:f5:cd:
77:1f:7a:19:4f:53:d4:ca:75:f2:b1:40:e0:96:e3:61:ed:6c:
84:c0:c1:c5:39:d3:fb:15:fa:9c:b3:31:ba:f3:a1:3e:bb:0f:
08:2a:f1:ac:f1:16:5c:6e:5e:c5:01:b8:95:a3:b5:24:54:8a:
90:9a:32:71:03:cb:bd:62:8a:c9:6c:de:af:93:eb:d3:fc:6c:
6f:d9:fa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:31:19 2025 by rpki-client