Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: 3NI5GGz3v2aBBXkO8CjvjWv+/NqImyg665CTuZ0mOeg=
Subject key identifier: EF:48:9C:29:71:81:F3:95:35:D6:F7:EE:03:CF:0E:54:1B:1C:72:45
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 01965EA8C6D4A6E9C54A25280FED40FCF0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 18:00:41 +0000
Manifest this update: Tue 22 Apr 2025 18:00:41 +0000
Manifest next update: Wed 23 Apr 2025 18:00:41 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: xNvM8fbFzr++TC4pnoid/UasfeDxZiqqRCXVI0vO3to=)
2: BLbhril53MDVDeifZO2SL2UKKFM.roa (hash: UsTWzBHrl9dfEtBG/7NjUZNeMJlhyin0Rp6YIFRWYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:c6:d4:a6:e9:c5:4a:25:28:0f:ed:40:fc:f0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Apr 22 18:00:41 2025 GMT
Not After : Apr 23 18:00:41 2025 GMT
Subject: CN=ef489c297181f39535d6f7ee03cf0e541b1c7245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:c9:0f:9d:b2:44:db:59:7b:09:df:0c:f3:
76:b4:c5:55:79:7f:bd:4e:8e:d2:da:0b:55:a3:24:
cf:ef:65:54:7a:2c:8e:49:de:d3:2e:eb:8b:4d:ab:
35:6e:c1:95:23:1e:7c:19:1f:ab:f8:09:32:4a:ab:
e6:39:58:45:a3:b4:fd:ba:16:0c:eb:a0:2a:d1:03:
3b:e5:eb:f4:c1:8c:fe:23:ea:86:a5:b6:33:7d:74:
38:e1:1d:4d:0b:72:d1:07:9b:03:1e:9f:89:f5:5d:
5b:61:cc:b2:af:e5:98:08:21:89:d5:c2:a2:80:39:
eb:51:0f:15:a3:7d:91:9a:f3:02:d9:36:22:2c:44:
d9:82:0f:bf:4d:80:60:70:45:b1:93:a8:b2:09:54:
73:cb:95:18:18:af:25:2e:70:d2:41:7f:99:4e:bb:
d4:39:42:90:0e:45:a2:ae:e1:1e:63:db:2b:bd:52:
9e:ef:a3:41:f1:ad:09:d0:b4:1d:aa:44:5b:dd:95:
4d:5d:a4:8f:76:8a:c5:42:2b:05:82:2f:4b:74:30:
22:d8:d4:03:8f:76:fc:68:43:0c:3d:e2:34:89:dd:
7e:ca:28:15:69:66:8e:49:c7:f0:a1:b8:23:a1:86:
0c:ed:bd:96:8d:e0:f5:ee:dc:ec:c9:6f:ff:6b:89:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:48:9C:29:71:81:F3:95:35:D6:F7:EE:03:CF:0E:54:1B:1C:72:45
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fa:50:39:06:d3:27:3d:2b:40:4e:76:ff:86:50:d6:9a:97:
a6:32:35:4d:77:3b:b4:34:92:ce:ff:41:61:4a:9a:4c:73:88:
9c:a8:50:f5:46:b3:0d:40:77:df:cb:35:8b:cb:23:ea:8c:2b:
b7:a4:eb:3c:37:fe:30:ab:c2:09:4a:6c:35:a1:ff:dc:83:db:
c9:47:56:41:df:37:9c:72:48:25:ba:17:d9:a6:52:de:20:c8:
15:0e:6d:ad:2b:4a:32:ce:4a:6f:fd:bc:ad:34:d9:bc:24:19:
08:11:6c:ef:18:1c:bd:6e:12:54:72:9d:ba:42:f0:ba:7d:3a:
02:70:a1:fe:c9:23:89:99:12:6e:75:f7:4e:ea:ea:92:e6:fe:
91:3c:21:60:ad:d7:60:c5:a5:4d:49:e4:e8:88:a9:bd:90:17:
6e:7e:83:9f:64:43:f8:c9:3c:fb:3f:54:90:af:4c:af:7e:78:
35:43:8c:fb:41:77:4b:71:f0:e2:12:56:d1:d2:01:39:14:41:
50:c1:84:dc:e8:c0:b2:bb:6f:1c:85:51:a0:15:43:3f:9e:cf:
f3:86:d3:40:22:1c:96:cd:5b:ea:a2:9f:fe:51:6b:c9:8d:63:
5e:d5:5c:e9:83:fb:08:27:b6:ec:28:17:f5:ad:1f:6b:76:19:
66:e8:f2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:41:21 2025 by rpki-client