Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: 4wZoqW73fHbDNIZaQIrvyo/FMQRBp1rJwkwJbgGAcrg=
Subject key identifier: 0D:2D:CB:FA:3C:4B:B7:D5:9E:F6:B8:1E:F6:6C:13:5D:02:E8:C4:34
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 0196561341F9A1243C7271EC195206C8CB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 02:00:24 +0000
Manifest this update: Mon 21 Apr 2025 02:00:24 +0000
Manifest next update: Tue 22 Apr 2025 02:00:24 +0000
Files and hashes: 1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=)
2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=)
3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: O7LyUk0BISdQxDEhv57Z5P+SpP7x4JsV3heLEgxhZY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:41:f9:a1:24:3c:72:71:ec:19:52:06:c8:cb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Apr 21 02:00:24 2025 GMT
Not After : Apr 22 02:00:24 2025 GMT
Subject: CN=0d2dcbfa3c4bb7d59ef6b81ef66c135d02e8c434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:e5:44:1d:d5:f3:41:af:60:39:ca:ea:ef:
24:c7:f8:f3:c8:c0:07:3d:de:bd:ce:4a:6a:90:d7:
12:df:2d:73:8f:66:e0:10:fd:3c:13:ae:4d:b0:d6:
dc:ba:18:84:f1:6c:22:d0:c1:12:16:c7:c7:c9:52:
b9:0d:d6:a0:72:5f:b2:4a:ae:ab:37:ec:f3:69:37:
da:63:86:18:35:7f:e6:9d:3a:3d:95:07:19:ac:7e:
38:c5:29:ce:b1:e7:cb:fc:b2:b1:7a:59:ac:dc:73:
f1:06:e8:c7:1e:2b:82:58:f4:40:d7:3b:e9:2b:f0:
e4:ac:f2:92:f2:45:65:2b:f3:1b:e1:25:55:27:24:
15:8e:4e:d8:5e:c9:15:70:d4:26:83:d6:a1:ad:04:
42:ef:4f:00:49:c1:8f:10:65:d0:41:fb:e0:8e:45:
a8:8d:f4:49:b7:9c:ae:aa:2e:11:0e:51:01:a8:c1:
02:20:8e:a3:54:91:ea:c2:fd:44:22:9e:ba:3c:59:
6e:2e:8c:2a:ff:ee:bd:d4:fa:a0:b5:aa:5d:f1:d9:
11:32:19:24:31:af:3e:fb:67:f5:e3:95:ac:23:3d:
73:b9:12:de:3e:cb:e6:c0:2e:39:bf:a6:62:a4:af:
5d:23:d7:75:6d:a2:90:01:4b:d8:15:7c:3c:e4:9f:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2D:CB:FA:3C:4B:B7:D5:9E:F6:B8:1E:F6:6C:13:5D:02:E8:C4:34
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9a:ae:e9:6e:da:e4:58:a2:17:2b:de:36:67:e7:06:91:88:
8e:88:86:11:fd:26:34:70:e0:96:6b:ce:18:41:8a:0e:71:91:
ba:87:ba:4a:4c:6d:69:ce:4f:02:65:d1:54:1a:bf:a8:63:77:
52:9d:d6:0c:19:0d:72:27:96:62:15:c2:79:af:9b:6e:ee:55:
91:dd:58:7c:1f:82:98:04:b0:f4:9b:02:99:f6:6c:ed:bd:63:
df:4f:7f:8e:69:53:79:5c:1a:6d:ab:c7:72:d3:be:d4:71:07:
b7:ea:d9:6a:3a:11:38:e4:92:f5:07:b5:a5:60:8b:5c:18:4e:
6d:d1:e9:80:ea:f8:87:4c:20:b0:50:be:0f:d2:1d:2d:b4:41:
04:2d:56:62:5b:e9:fb:24:13:94:00:8e:9f:2b:6a:da:45:6e:
b6:f1:e7:33:31:ae:d1:f6:87:35:d8:f6:bc:9a:3c:f5:5d:db:
56:b3:1b:ed:c0:ac:5f:3f:9f:cf:b4:06:7d:1e:d5:1c:e4:da:
9a:eb:36:4b:93:61:a7:c9:85:c5:ca:29:48:e7:e2:eb:77:83:
91:aa:77:b9:7e:3f:e7:7a:f7:94:c4:4a:3b:6a:da:70:a8:6c:
7f:ce:ea:48:55:77:0c:ce:7f:b1:49:29:5b:d6:b9:b0:a7:a5:
b2:8d:48:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:26 2025 by rpki-client