Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json)
Hash identifier: uSZ4ok1kFkKN+LpKSKCsNOsZUMcbOXxNHUqcYdkWanY=
Subject key identifier: 6D:27:63:F1:A2:65:00:7A:C0:2E:17:B8:32:1D:58:29:BC:C9:0A:5A
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial: 01964EFEB3FBEAE1C78418D5C8EB6BBB0194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
Manifest number: 0CFE
Signing time: Sat 19 Apr 2025 17:00:37 +0000
Manifest this update: Sat 19 Apr 2025 17:00:37 +0000
Manifest next update: Sun 20 Apr 2025 17:00:37 +0000
Files and hashes: 1: WE4vStdUw7e2RexA2uVQrcHSC4Y.roa (hash: UJ9it5wcaDKphifUsLvzyU+8UhqAc1r+2HZRVAecKf8=)
2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: If5VGAnGascy8OmU+nmgxxWNKMe094doWI6CfILk5H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:b3:fb:ea:e1:c7:84:18:d5:c8:eb:6b:bb:01:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Validity
Not Before: Apr 19 17:00:37 2025 GMT
Not After : Apr 20 17:00:37 2025 GMT
Subject: CN=6d2763f1a265007ac02e17b8321d5829bcc90a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:64:3e:86:a5:7f:7b:26:63:96:d8:e6:95:
b2:3a:35:af:26:b8:80:b0:8b:fe:d7:f4:d5:9f:cb:
0c:00:6f:a4:f9:30:72:c7:bc:4c:b1:76:0f:a4:97:
b2:51:6e:83:e1:6b:94:fc:70:4c:cf:a5:b9:b1:84:
de:3c:89:1e:f6:5e:06:c2:8d:dd:07:4e:ba:60:8d:
c9:7a:ae:e2:ac:d5:ae:66:e6:22:d9:7e:78:a3:43:
3d:58:bd:32:e7:1d:ad:d8:0c:bb:5c:38:af:6b:b4:
45:ce:bb:40:e0:f6:63:d8:0c:58:f7:8c:bb:82:f1:
96:86:c7:b6:67:55:89:61:7e:2a:e7:59:32:6c:61:
1d:78:a7:99:1b:97:e2:cb:79:55:01:e3:21:cf:c2:
73:e6:6e:dd:a8:69:49:da:15:b9:04:01:0d:51:33:
e1:6a:37:6a:41:56:c2:d2:55:6d:8d:c0:7c:c8:78:
1e:f4:6a:3d:f3:50:a4:de:50:d8:53:94:d9:90:10:
4b:b4:30:8d:59:b2:7e:79:70:8d:05:73:45:64:1b:
ce:e8:c0:d4:29:49:ec:62:75:a9:82:ed:ae:dc:16:
db:7d:81:2e:58:6e:e4:67:f8:90:6c:0a:b5:a9:e3:
b1:65:c1:33:9d:87:1d:7a:54:2e:0f:d7:00:19:6f:
cd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:27:63:F1:A2:65:00:7A:C0:2E:17:B8:32:1D:58:29:BC:C9:0A:5A
X509v3 Authority Key Identifier:
keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:68:38:1b:0b:2f:89:a3:e1:40:50:43:13:f6:67:fa:ad:05:
09:b7:59:12:1d:f4:c9:93:3d:3c:27:e1:a4:c6:79:f1:7a:4a:
36:7e:7a:0c:7a:49:e1:79:49:0c:2e:b6:3b:ee:8e:e1:d0:50:
2f:26:69:6d:02:fa:9a:1b:90:37:40:4f:98:63:fe:7b:18:92:
1d:33:75:81:8b:8d:29:74:e9:03:91:47:e6:0f:e7:e8:b3:9a:
01:2c:4b:06:4e:3d:15:35:01:ad:f3:75:e4:64:3f:0a:95:51:
a4:96:f0:3e:b9:df:70:bb:68:4f:ad:67:d9:5a:69:8e:03:c6:
11:71:d9:3d:16:16:96:bf:f6:11:d3:f6:36:39:dc:14:42:fd:
72:4c:1b:dc:54:ac:ad:24:41:3c:63:98:9c:45:a8:65:a0:0c:
6a:a2:33:4e:27:29:2e:8c:1e:61:95:6d:9c:a7:5b:d5:50:40:
94:c7:64:02:36:01:b5:94:27:71:d2:70:80:35:c0:94:af:45:
05:d7:81:6a:34:4e:ae:dc:95:2c:b3:b3:cf:a4:05:bd:fa:14:
f7:a6:e4:44:58:fb:86:c5:17:eb:1a:e6:d9:c9:5e:04:7d:31:
2a:ca:3d:60:92:a3:f3:65:cb:f5:86:10:c0:13:d9:62:75:fb:
d0:c6:a9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:48:01 2025 by rpki-client