Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
File: fIwTcd1q_V_XnqmE2j-9oblK_iM.mft (raw, json)
Hash identifier: gt0spGG2ljrkL92Lctw7yGF5METMWvWeQh25/Yv8sNY=
Subject key identifier: 14:1B:F2:C6:16:EC:F0:92:B9:28:F0:A7:B9:C7:F9:2F:48:B9:F0:9E
Authority key identifier: 7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
Certificate issuer: /CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Certificate serial: 01964BC6D9FBE8F5C6B5D89B10D961BE0A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 02:00:45 +0000
Manifest this update: Sat 19 Apr 2025 02:00:45 +0000
Manifest next update: Sun 20 Apr 2025 02:00:45 +0000
Files and hashes: 1: EeK6cauICbjiVCSXw89JJKbgWuI.roa (hash: dQibGt3eUNBx7bxOeGKDFYcaj4qO4S1imLS16SxshcI=)
2: fIwTcd1q_V_XnqmE2j-9oblK_iM.crl (hash: TEWs2bk1JCrSPi9wArFMFt4eBwmtqZ7svrjiWu15No8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:d9:fb:e8:f5:c6:b5:d8:9b:10:d9:61:be:0a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Validity
Not Before: Apr 19 02:00:45 2025 GMT
Not After : Apr 20 02:00:45 2025 GMT
Subject: CN=141bf2c616ecf092b928f0a7b9c7f92f48b9f09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:1b:de:86:82:a1:3b:5a:97:0c:d2:92:c2:
67:5b:73:cd:eb:d1:40:15:9d:d3:39:8d:07:1c:6b:
0e:d9:53:da:f2:e7:79:5a:45:ef:f4:b6:61:5f:40:
5e:2f:12:bc:04:68:43:5b:05:cb:e0:79:5c:6e:70:
c2:c4:7c:ce:9f:fb:cf:37:38:94:8a:00:c5:46:4c:
df:5d:39:bf:d4:29:51:b3:cb:de:89:45:76:b5:26:
80:fd:52:a4:19:f9:6a:e3:21:1f:33:1d:92:1d:c4:
80:27:a3:92:59:c5:c4:0c:3d:18:34:0d:10:0d:62:
55:94:a1:a7:50:87:7f:3d:96:a2:0c:72:aa:38:c5:
cb:50:76:2a:96:2b:f5:a0:63:f4:b4:e8:a0:10:76:
96:70:ca:3b:0c:d4:40:75:f0:a0:f8:55:a4:72:10:
87:00:2f:65:b1:9a:57:f9:6c:e1:76:84:c2:42:31:
45:c6:f4:9c:4b:c8:82:61:ab:75:6b:5a:f8:bf:09:
83:c5:78:ef:77:87:43:55:5b:79:d8:6e:b2:5d:b2:
ff:96:17:1c:03:74:9a:92:9f:ef:23:99:58:66:63:
71:90:97:b3:08:c1:7c:38:ba:26:9f:4b:65:ed:d0:
28:01:65:90:29:58:ac:d9:9d:2f:75:fa:ce:5a:74:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1B:F2:C6:16:EC:F0:92:B9:28:F0:A7:B9:C7:F9:2F:48:B9:F0:9E
X509v3 Authority Key Identifier:
keyid:7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:eb:35:7c:4c:c4:68:c2:11:48:b5:a4:db:0b:2f:65:00:b3:
ec:12:8a:67:8e:37:d8:c2:f0:a4:60:25:05:5c:49:06:18:80:
64:91:a4:4c:6b:a8:10:0b:ef:eb:a9:f9:4f:ef:d8:8c:06:c1:
c7:e3:73:f8:f2:97:a4:5d:2f:05:32:3c:ad:4a:c3:f3:69:59:
b3:92:6b:93:f0:1c:a9:e6:4f:85:7a:99:55:fa:c1:d5:1d:68:
9f:45:38:d5:2a:e2:25:91:85:6e:03:d6:aa:71:e9:a7:f3:9c:
e2:f9:5c:f9:19:a1:cd:49:5c:22:3e:92:49:7a:73:6e:48:18:
89:f8:5f:0c:19:ce:9c:fa:61:a0:7b:66:76:58:e3:73:0a:d6:
b0:b8:05:87:e6:d6:ec:92:60:10:83:51:5c:48:28:74:44:23:
61:77:d9:00:b0:09:a5:b5:c2:6a:e2:60:e4:25:07:45:71:dd:
87:1e:91:37:64:40:70:94:70:25:6d:76:1e:7e:b3:4f:1d:ae:
f0:22:74:50:14:c8:12:98:ff:c1:94:b0:29:f7:aa:9d:10:fa:
4c:6a:65:38:41:19:6b:ed:dd:c6:29:f9:b5:30:e7:e0:dd:9d:
57:6d:c6:ef:4c:82:a8:98:20:bb:21:12:14:da:da:68:d1:78:
40:a2:a4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:22:45 2025 by rpki-client