Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
File: poXxkUzrGSIcVjGTAn1FNFAzrV8.mft (raw, json)
Hash identifier: EkIRmhR8JWfDeH5gOKSl1K3JKMuxX5wszBUaU6J1q6w=
Subject key identifier: A8:D1:00:6B:63:11:33:03:85:EA:4F:5A:2B:C8:78:70:D4:93:4D:99
Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
Certificate issuer: /CN=a685f1914ceb19221c563193027d45345033ad5f
Certificate serial: 0196594B827F893B4E1B680CD771F758FA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
Manifest number: 0143
Signing time: Mon 21 Apr 2025 17:00:42 +0000
Manifest this update: Mon 21 Apr 2025 17:00:42 +0000
Manifest next update: Tue 22 Apr 2025 17:00:42 +0000
Files and hashes: 1: TCiOUS2lOe-d-inEeAtaNF22X3k.roa (hash: H5jxU1+mIYAsjzlbjYeTvSFiOWLCAxpo86ZAHMuzEhY=)
2: poXxkUzrGSIcVjGTAn1FNFAzrV8.crl (hash: OIawxTge0/PCu5m4kGLKBQDwEJUwL7HfzK/oDrCnr6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:82:7f:89:3b:4e:1b:68:0c:d7:71:f7:58:fa:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f
Validity
Not Before: Apr 21 17:00:42 2025 GMT
Not After : Apr 22 17:00:42 2025 GMT
Subject: CN=a8d1006b6311330385ea4f5a2bc87870d4934d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:cf:f1:c0:7c:d0:cb:7c:ec:68:76:64:30:
98:be:82:b1:60:b9:f7:aa:d3:f6:40:14:25:bc:3b:
db:77:17:57:0d:b8:81:3c:14:6d:f1:1d:c4:d9:39:
2a:6a:b8:c2:24:61:77:fc:71:39:59:93:5e:35:87:
44:64:a1:9a:cb:ae:8c:a9:8f:81:4d:a4:c6:fe:f8:
4c:07:2b:19:1b:d4:84:38:8e:4c:54:8c:72:90:43:
9a:9e:66:29:be:78:07:e3:61:60:b0:be:62:23:c5:
7c:93:d3:6e:63:99:39:e9:b1:bb:f3:29:21:15:05:
97:61:41:7f:67:96:dc:44:57:38:b0:ad:07:a8:44:
1f:44:02:ec:bb:ca:14:b4:d7:85:7f:1b:88:fc:c6:
ac:76:08:78:97:8a:91:d5:45:8a:79:44:b5:41:c6:
a9:24:6e:6e:e7:88:f3:a9:de:5b:a6:7f:15:f0:c8:
c8:4a:6d:30:3c:ce:54:6c:03:bf:88:56:6b:d6:6d:
ba:f3:35:e6:46:21:83:a7:e2:d3:4f:d2:ae:20:ff:
b8:fb:d5:48:8d:d8:67:ef:c5:ed:4a:64:d9:9e:e9:
2a:d9:d3:1f:3a:cc:cb:0a:0a:ce:d0:a7:26:5f:c4:
92:29:40:f8:35:6a:ef:67:21:be:f6:8d:33:56:1d:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:00:6B:63:11:33:03:85:EA:4F:5A:2B:C8:78:70:D4:93:4D:99
X509v3 Authority Key Identifier:
keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e7:4f:4a:90:ab:56:48:54:c3:5a:cd:c3:ae:0c:9b:7f:fc:
36:e0:6c:97:5e:19:5b:4d:6c:04:d0:69:06:7f:33:94:79:b0:
4d:b2:50:b6:d6:8c:a3:ea:0d:3d:2a:2d:28:60:7e:b4:c9:33:
a6:aa:ad:1b:52:df:e7:a9:16:80:b3:bc:37:23:84:e3:ea:2c:
c4:8d:0a:60:b0:39:63:a3:49:28:96:79:89:0b:0c:69:3d:1b:
dc:f4:94:29:ad:ba:0c:6c:d2:d0:bc:4a:5c:e1:f7:73:c5:3e:
9e:dd:ae:28:45:71:12:50:c3:68:14:1a:cb:fa:66:15:26:31:
f8:d2:42:10:25:74:5d:1e:ce:56:94:c1:d8:1c:83:2b:85:d7:
46:69:09:0b:cb:66:ff:4a:a1:ff:9b:32:23:d8:b0:df:05:04:
0b:9f:af:9a:8e:94:3a:42:52:c6:02:41:e9:82:0b:a1:46:e8:
de:66:e0:15:86:ce:67:8d:ac:db:cb:43:18:ae:77:a3:5f:51:
e0:d8:93:05:25:e9:3c:84:81:4f:bd:33:de:c9:7d:0b:7f:f5:
e4:c7:eb:8f:07:2f:b1:8b:1c:55:c1:3a:1a:b5:df:be:10:19:
b6:4e:90:95:fd:15:b7:16:91:21:27:5b:6a:57:4e:9c:7a:cb:
7f:8a:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:22 2025 by rpki-client