Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: yLRZIjPIXWjj2nCBiU8HTXRwtSrX++9LUy/9l1M1Ehc=
Subject key identifier: 12:D6:2B:4A:59:13:5F:8B:D9:3D:5C:D6:00:D6:3B:9A:2C:E4:36:9C
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 019653B765DE4564485C046A25FF062B5B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 123D
Signing time: Sun 20 Apr 2025 15:00:50 +0000
Manifest this update: Sun 20 Apr 2025 15:00:50 +0000
Manifest next update: Mon 21 Apr 2025 15:00:50 +0000
Files and hashes: 1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: ippO2VVX2eswi+CddlXjCCBiyhzYgsqYawn702zIAmA=)
2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:65:de:45:64:48:5c:04:6a:25:ff:06:2b:5b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Apr 20 15:00:50 2025 GMT
Not After : Apr 21 15:00:50 2025 GMT
Subject: CN=12d62b4a59135f8bd93d5cd600d63b9a2ce4369c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:a5:81:10:e0:46:65:bb:c8:e5:bc:4d:ba:
d6:61:17:0e:33:f4:f6:08:af:e7:95:01:dc:33:e3:
eb:c0:78:74:d2:41:4c:3e:d5:b6:4d:0c:b9:ce:c5:
ff:ab:2c:c7:e8:cc:4d:43:ea:a6:f5:7f:12:dc:66:
b2:bb:13:df:cb:db:7f:d7:5c:da:f3:ac:68:e5:a7:
83:f0:7c:ca:4e:76:42:a7:8c:e0:9a:8b:51:e8:53:
a7:13:06:8f:b4:81:4c:7c:0e:b5:eb:da:86:70:c8:
f4:06:7f:23:be:26:8b:71:92:83:35:5f:a4:ae:14:
f5:48:9c:2f:64:fe:b6:d4:ec:75:2a:88:1b:66:a0:
9a:3d:96:36:52:bd:8c:92:b3:73:c6:d9:95:68:59:
8d:4a:98:87:3d:3f:8a:f2:b4:9f:43:9a:1f:e2:4a:
fb:ed:4f:51:17:75:c5:66:b6:d0:16:df:f0:7c:3a:
4f:85:dd:f3:ab:c9:d5:25:56:b9:1e:22:fb:ad:55:
4a:22:77:d8:ac:b7:0b:f1:3e:c1:6d:9a:bf:d1:0a:
5b:a7:0f:46:f4:5f:5c:c2:20:18:4e:ec:5e:e8:ca:
85:aa:bc:69:f7:63:9a:f5:87:c4:6e:86:ea:1a:c7:
62:bb:f3:e4:41:f0:73:5e:fe:48:d7:70:aa:82:8e:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D6:2B:4A:59:13:5F:8B:D9:3D:5C:D6:00:D6:3B:9A:2C:E4:36:9C
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f4:3c:bf:9e:1c:60:ec:4c:0e:fb:28:85:5f:8c:5a:fc:15:
8b:64:69:86:b5:a2:5b:57:9f:19:c1:db:68:bb:c9:6e:f2:aa:
7e:1f:8d:38:03:5c:d5:5c:d6:cc:fd:cd:24:a6:3a:99:4a:b5:
6c:58:a8:0b:f3:3a:ea:6a:7f:d4:1f:55:a9:a8:d1:a6:85:b9:
56:09:b6:e8:51:89:35:fd:dd:3c:46:fa:cc:a9:77:8a:b4:c5:
f7:cf:03:5e:e6:24:8c:67:3b:e1:27:48:f0:48:5f:48:89:1a:
43:64:fe:de:43:ad:e3:f1:d0:01:f9:53:b4:f1:2d:3c:5c:3a:
75:e3:d3:03:a9:6c:0f:44:8c:70:72:d5:0d:5f:07:71:66:78:
a1:55:1c:c0:72:00:e5:ef:6a:a6:6f:7c:01:8c:24:90:f5:66:
45:d6:99:58:97:1d:38:af:89:09:69:89:c7:69:c4:d7:26:0c:
6a:d9:dc:22:85:37:71:f8:34:fb:c1:6e:0d:95:d0:d2:0b:31:
35:55:ad:56:42:c0:ce:1b:84:9c:8e:73:b3:f8:fa:ad:e9:a0:
2a:6a:de:36:b0:bd:a3:eb:6f:fd:b1:bc:10:49:ca:43:ac:79:
08:83:95:03:e9:7d:d1:f8:2f:0b:99:de:b3:c4:6b:fa:a2:b6:
ea:f3:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:21 2025 by rpki-client