Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
File: f_G4HP5quxGOl-AyW2Yur5hPL2o.mft (raw, json)
Hash identifier: +/0H9tntICBkRDcJsVit2SLWjkXAgONmpxbJp7NWH/I=
Subject key identifier: 19:D0:14:44:3C:02:78:7A:16:2C:30:1C:85:6E:15:69:EE:D4:30:8B
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Certificate issuer: /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial: 0196545C73151F518C3F460AE74D8A37DA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
Manifest number: 0B69
Signing time: Sun 20 Apr 2025 18:01:06 +0000
Manifest this update: Sun 20 Apr 2025 18:01:06 +0000
Manifest next update: Mon 21 Apr 2025 18:01:06 +0000
Files and hashes: 1: Ws0PzSlzciL_18ZyL-n7RNJX1Rc.roa (hash: Mhq4SXBV17W3XI37JWd2SZ0W3pU7Z4ZVwJBUNoboInU=)
2: cGNrX1MW3V5Pj8rPvvjXgsht_VU.roa (hash: r7fN/lwL4D0NMCG6ql+7DEym7FVBCcSQnDkJLbzAoCE=)
3: f_G4HP5quxGOl-AyW2Yur5hPL2o.crl (hash: 91JsNaGrxuzS8DmMJ2J/ct3/xDFU6J1qSf5Qm3UdMrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:73:15:1f:51:8c:3f:46:0a:e7:4d:8a:37:da:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Validity
Not Before: Apr 20 18:01:06 2025 GMT
Not After : Apr 21 18:01:06 2025 GMT
Subject: CN=19d014443c02787a162c301c856e1569eed4308b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:83:87:31:80:7d:3b:8b:39:67:ad:ca:ba:30:
d7:d3:1c:07:7b:dc:30:4b:39:7a:6d:71:db:c9:e4:
51:1a:bb:c0:7a:76:85:95:87:32:c3:fa:21:21:65:
d4:5a:92:42:95:57:30:6b:5b:f1:93:1c:26:ea:b4:
fa:f9:ec:47:31:d7:6f:2b:68:de:80:13:15:5f:a0:
e8:3f:04:bf:4a:fa:66:90:94:78:6b:2d:c1:75:b5:
79:34:e4:34:42:dd:91:21:c4:81:fb:e0:38:94:c1:
71:09:25:79:2f:ea:ec:85:54:ea:fc:30:3f:72:db:
65:32:bc:3f:32:aa:69:98:2e:da:81:1f:12:2e:25:
23:6b:5f:f2:00:c5:33:9b:bb:8d:71:16:2c:39:cc:
88:25:9b:2d:9c:67:d5:7e:b5:03:9a:c1:b6:16:c5:
e2:15:77:06:c8:db:f9:e5:c0:95:44:4d:bb:31:10:
53:78:1e:0a:dd:64:20:83:7e:40:2b:a6:4f:4a:23:
8c:a7:5e:22:13:40:6a:cd:56:18:0e:00:7d:ca:ec:
e5:d3:66:35:70:4d:04:6e:f0:63:40:13:78:5d:ee:
85:6c:12:66:ae:45:11:45:9d:87:b2:1b:39:a4:12:
48:59:4d:62:a6:a5:da:63:a3:51:74:da:23:75:53:
02:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:14:44:3C:02:78:7A:16:2C:30:1C:85:6E:15:69:EE:D4:30:8B
X509v3 Authority Key Identifier:
keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e6:3a:d4:4c:b6:57:64:7c:60:93:d2:b5:92:39:8e:c6:17:
7f:19:fe:a2:3d:04:20:90:78:09:1b:c5:ba:11:26:f7:e5:00:
d4:22:55:05:99:f7:6d:d7:6f:93:0b:b6:94:bf:db:39:20:c9:
ba:2c:ec:e0:fc:67:11:71:85:22:85:d2:4a:96:85:7b:e0:06:
98:66:24:14:32:6a:7c:06:95:bc:4c:d5:57:26:d2:5a:2c:bb:
1e:79:60:1d:be:d9:e3:3e:ea:78:bd:73:79:a1:0c:dc:1d:d4:
10:3a:14:5f:8f:4c:d3:ab:20:67:1d:14:89:f5:e2:d1:3f:66:
8a:89:db:4d:f5:80:1e:95:ae:03:7c:fd:23:31:c3:c0:a5:38:
70:81:69:69:b1:b7:cc:17:e5:d8:e6:7b:43:2d:bb:f4:32:f2:
fe:16:fe:d4:33:b1:dc:be:b2:33:e1:87:0f:12:56:3b:b5:51:
df:f9:38:c8:a4:c2:8f:af:df:15:e0:fe:27:c9:90:b1:cb:a9:
22:52:3b:cf:11:a6:fa:ae:df:9d:31:98:aa:5e:f2:98:2b:92:
3c:c8:d7:88:ff:15:af:f7:33:a4:fe:e6:37:12:d5:f1:c6:ce:
a0:1c:78:d2:28:77:3a:12:24:28:dd:9e:86:af:45:62:72:ac:
16:49:3e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:48:37 2025 by rpki-client