Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: UB8uxZLV0gnYXHhhqmxldy+IsDQg7kNDjRQaplX91Z4=
Subject key identifier: 53:89:83:6D:D7:E1:2C:A7:E7:24:B8:B5:C8:47:68:68:9A:4F:AD:27
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 01964A0FFA0058BC04467A2594F6B26FA898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 14FA
Signing time: Fri 18 Apr 2025 18:01:23 +0000
Manifest this update: Fri 18 Apr 2025 18:01:23 +0000
Manifest next update: Sat 19 Apr 2025 18:01:23 +0000
Files and hashes: 1: B2KWviyku3mQduZIftTtv9f_Wko.roa (hash: L0tFun/t/g/1AW+2Ro3aFJKqECitA7KJ0Ci2/VOvYfs=)
2: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: D0r2BqnRkB55NOtyOAz2i0fZjiMOOfzJ2nqZNb4J5jk=)
3: gfaOusn6-X7BydpbAyAPOGJqVnY.roa (hash: R2bBwWhKC2UXRPobKdBOcv6MEU11M0B5SF79kwbkopk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:fa:00:58:bc:04:46:7a:25:94:f6:b2:6f:a8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Apr 18 18:01:23 2025 GMT
Not After : Apr 19 18:01:23 2025 GMT
Subject: CN=5389836dd7e12ca7e724b8b5c84768689a4fad27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:30:ae:dd:af:32:11:0e:4a:d4:b4:7c:3f:70:
cb:b3:a7:a7:97:ce:d9:5d:f8:ba:f9:6c:9f:df:fe:
c3:bb:c3:a3:f4:b4:8e:9c:ee:14:52:83:0d:d9:23:
4c:ab:24:2c:67:e1:14:a3:61:da:ed:dd:74:6b:6c:
1f:f3:56:cf:f1:2b:58:9a:3f:a9:c5:8a:df:20:c6:
98:ab:cb:24:c4:cd:eb:d7:b0:ab:e6:5c:b8:90:2c:
2c:49:eb:ad:ee:69:0e:0c:17:e7:e1:1f:be:34:27:
fd:5d:99:7a:e0:13:97:af:10:7e:1e:23:a8:c6:a2:
f8:7c:3a:61:f2:2c:2d:33:12:dd:06:bc:08:38:aa:
6a:e7:1b:d8:d2:4c:a6:be:8c:93:e2:3b:a3:b2:8c:
52:9b:b2:fb:51:b5:b8:e9:61:43:e8:0e:e3:1a:1b:
9d:83:b9:70:33:c3:af:c4:09:42:3d:3e:32:27:a5:
8f:1d:9e:26:2b:5d:c7:be:b3:7d:0e:02:4f:b7:55:
a1:ce:b6:a0:03:2f:c4:b7:6c:2a:08:cd:ab:12:96:
87:97:44:3f:40:02:7c:63:3a:dc:50:9a:c2:de:6a:
e5:e1:f2:62:5f:b9:72:a1:ad:f3:78:a1:c2:46:25:
eb:ad:88:3f:37:50:df:80:ec:ad:cc:90:77:e8:9b:
d4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:83:6D:D7:E1:2C:A7:E7:24:B8:B5:C8:47:68:68:9A:4F:AD:27
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:35:f1:04:51:02:c8:01:9f:29:eb:ad:31:11:46:00:a0:07:
e4:fa:94:ce:48:93:20:12:42:2b:fb:2c:11:b3:ef:5c:8b:0c:
46:89:94:0d:8b:a8:7e:d4:76:4f:d1:47:53:fc:2e:71:02:43:
a7:df:55:a1:08:76:48:27:00:7f:04:1c:4e:44:b6:ad:da:3f:
bb:db:0a:7d:9e:2e:68:65:f6:6a:b5:54:38:d8:ef:a8:30:6e:
c1:76:99:c5:d5:c4:83:30:24:07:cb:25:52:0a:14:a7:ab:73:
73:34:1b:71:cb:ef:02:51:fa:f9:f4:e4:32:92:9c:6b:5b:0c:
f9:8e:3e:86:04:af:ee:b4:01:01:bc:02:79:2e:e3:74:54:db:
fa:00:9f:19:e0:d0:38:7a:33:61:8b:ab:60:9c:c0:54:24:16:
c4:90:b4:ef:24:79:23:63:f5:87:8c:66:39:5a:79:02:71:0b:
de:7a:17:03:31:6e:48:2a:b3:e4:99:f6:3c:2d:7e:3e:26:1e:
7a:ac:cb:fd:c1:5c:30:e0:58:de:a4:cc:7f:b3:fb:28:12:75:
33:02:95:4b:14:a1:06:53:25:b5:19:65:90:3f:91:2e:40:46:
7b:95:85:de:8e:4b:50:76:c7:18:74:d8:9a:93:b5:45:eb:08:
31:3d:a0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:16:58 2025 by rpki-client