Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File: FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier: N3PVwbkbNO4xucMKmFi4DA3ufYiIikUgR2AvjChJ7cg=
Subject key identifier: 15:A8:30:B4:1F:CB:71:7F:A5:A7:89:03:9B:04:C8:AB:0F:6A:2A:5A
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial: 019657CB8ED78E9E67896DD5CD2F9EF2B686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number: 0D85
Signing time: Mon 21 Apr 2025 10:01:20 +0000
Manifest this update: Mon 21 Apr 2025 10:01:20 +0000
Manifest next update: Tue 22 Apr 2025 10:01:20 +0000
Files and hashes: 1: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: ComIjG05YYNis6fdap7nt3Lzz4jotknKAfzyt9BrXdY=)
2: saR7C8jPhSxxp1U0l0fw1iLpggA.roa (hash: YzILylPp9VZQ/IVzqGiVAC4yp8xtNGEqB65NyOh5ynQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:8e:d7:8e:9e:67:89:6d:d5:cd:2f:9e:f2:b6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Validity
Not Before: Apr 21 10:01:20 2025 GMT
Not After : Apr 22 10:01:20 2025 GMT
Subject: CN=15a830b41fcb717fa5a789039b04c8ab0f6a2a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:c8:4c:ff:ac:98:cf:ad:87:4f:cd:cd:60:
f3:6c:a6:f6:76:3a:6a:68:c4:f2:ba:a9:83:10:0e:
be:1b:1a:f0:5e:38:0a:18:6e:7e:b6:2e:4f:d7:da:
3d:67:35:f9:de:ed:54:b7:b5:1a:fe:cd:d0:4f:41:
5c:05:33:3f:e0:c4:0e:98:de:61:ec:ca:1e:ac:94:
87:e0:7e:db:f9:36:2c:ed:ef:88:d7:46:57:be:95:
6e:cd:3a:87:ca:2b:4a:3f:15:3f:f8:0d:46:a4:d1:
ac:6c:73:1a:3f:16:ec:1c:14:de:9a:5c:19:eb:4a:
54:3e:f3:31:82:66:99:47:93:18:98:ae:f5:62:cc:
20:97:4f:5f:8d:32:b0:b7:cc:05:0c:18:bd:77:f8:
06:49:e3:eb:2a:09:7b:1d:c5:33:53:81:28:bd:1a:
48:e1:3a:91:1d:54:6d:44:f8:75:e6:63:26:cd:0d:
b1:f4:05:5d:2f:ae:5e:1a:8f:8d:d7:e1:77:02:fc:
b6:db:5d:f5:f7:7d:78:fd:2f:be:40:72:22:c9:fa:
75:f8:b1:f4:a5:6a:e5:d0:19:a4:50:53:d6:e2:8b:
fd:1d:a0:94:28:8d:78:67:19:08:5f:85:15:a4:11:
86:43:6f:c8:8a:0f:a9:a3:89:aa:78:a5:dd:f6:95:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A8:30:B4:1F:CB:71:7F:A5:A7:89:03:9B:04:C8:AB:0F:6A:2A:5A
X509v3 Authority Key Identifier:
keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:06:24:ca:9e:dc:dc:52:ca:03:dc:49:58:c5:48:45:ce:a9:
14:91:66:f1:3f:7e:fe:27:55:8b:18:22:68:31:69:17:2d:6b:
29:b2:95:11:d1:ef:d0:9d:67:4f:97:3d:7f:10:d8:47:96:9d:
f1:28:18:a7:f3:bc:75:c5:83:84:b3:32:9e:b0:b7:ef:20:83:
f5:5d:5b:34:2d:ae:71:13:06:9f:8e:ff:86:a8:88:a7:fb:49:
b5:8f:d9:ce:cb:ec:ce:87:54:b4:60:f6:39:11:7a:7b:b9:da:
b2:a9:a0:da:5b:d9:3f:9d:d1:47:f5:07:80:8b:19:ea:f1:68:
20:fa:05:28:1e:1b:27:4f:c1:32:df:1b:3e:ba:83:ab:50:df:
f7:97:43:00:67:81:74:c9:a2:d7:0b:fc:73:82:ba:10:6b:68:
78:75:13:08:6f:da:f7:78:29:69:71:95:77:1d:59:45:ac:a2:
a8:39:70:5c:2c:a9:43:9c:b9:c8:04:cf:a3:37:e2:5f:f6:65:
04:f9:dd:8f:4c:4d:c4:cd:4c:f3:0d:7c:a4:bb:1c:b5:e9:c9:
39:64:73:83:dd:a1:f1:69:b6:a6:b6:96:a9:03:77:e2:1b:47:
57:6d:5f:29:b2:9f:ff:87:3c:2e:01:2a:a1:8c:a1:ed:89:b1:
ba:50:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:00 2025 by rpki-client