Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File: 84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier: aB2UJ2NFaLFSkS1m/oxjrKGEVWLemlyxsCCqyHzqLDo=
Subject key identifier: EF:6C:3C:9F:57:D0:8E:F0:B3:C9:9F:16:BE:E8:41:5F:83:92:A4:CC
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 0196485814919D909E34072ED19EACE2C8D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 10:00:54 +0000
Manifest this update: Fri 18 Apr 2025 10:00:54 +0000
Manifest next update: Sat 19 Apr 2025 10:00:54 +0000
Files and hashes: 1: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: 7DejzQl3v64fw5tyR3ybJUlQ2LCRxHH24ZQCgoRXxzc=)
2: 9p3RysO-CtOjkTkrDq-1QR8iEt8.roa (hash: 7EEdwfYjIsLQLyh8n9mT3oh8OfyTFAKQe+oB+lllHm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:58:14:91:9d:90:9e:34:07:2e:d1:9e:ac:e2:c8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Apr 18 10:00:54 2025 GMT
Not After : Apr 19 10:00:54 2025 GMT
Subject: CN=ef6c3c9f57d08ef0b3c99f16bee8415f8392a4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:a7:96:28:75:7a:9c:f9:67:05:a6:fa:8e:
d9:12:e9:65:02:7d:d2:6b:ea:66:44:a6:be:f4:b8:
61:f2:5f:03:b4:d9:65:75:65:db:73:ac:fa:fc:1f:
39:dd:45:cd:2d:ee:86:9a:49:d9:ed:87:07:79:60:
ac:b0:d1:8e:c7:fd:65:e4:5b:58:a0:1e:72:9d:ff:
a0:4d:73:5c:c6:f3:ee:e5:ff:42:e3:52:d9:2d:4c:
2a:3d:ae:65:cf:d0:2b:f3:17:bb:21:5c:ce:47:b4:
f3:ed:91:b3:c4:a8:71:aa:45:bd:ec:0e:a6:99:60:
26:25:98:c6:01:26:2a:34:48:8f:5b:d1:51:38:51:
a6:59:61:48:71:54:44:3f:21:c9:6d:5c:1b:27:f3:
ff:e0:6a:df:02:34:5e:2d:cd:32:5d:49:02:53:09:
e1:94:50:9f:22:21:c2:a6:4a:b3:e1:1f:b5:f3:f8:
d2:97:f4:59:2d:05:53:f9:ea:94:5b:30:be:d8:20:
10:36:bf:64:84:bb:36:11:06:a4:82:9d:99:f3:ac:
f1:56:13:cf:44:cd:ef:50:34:b1:7a:91:e7:74:5e:
06:7f:84:f1:1d:b0:79:ab:73:a6:fe:10:e0:ab:00:
3e:8e:0c:f2:cb:c0:62:75:bc:67:ce:d4:9e:11:ae:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6C:3C:9F:57:D0:8E:F0:B3:C9:9F:16:BE:E8:41:5F:83:92:A4:CC
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3a:82:d1:8a:f5:46:bc:f2:ff:10:7f:86:8d:dd:48:87:10:
82:ad:c8:64:d5:5f:8b:48:85:c3:04:63:3e:29:2e:c5:59:e7:
a9:b3:29:50:1e:0d:4d:47:14:82:39:89:27:a3:09:47:6b:81:
33:f2:2c:3a:43:ad:03:4b:ba:73:2b:d6:8a:70:69:97:67:f4:
fb:bd:e8:4e:e8:34:85:89:93:24:d8:22:e7:42:cf:27:f5:a1:
3e:43:c7:43:86:09:07:ec:9e:7b:7c:86:de:48:fa:1a:6b:7f:
b1:07:f4:4a:e4:d1:ca:09:5a:16:b1:01:81:d8:d2:7d:82:8b:
23:6c:7b:42:13:d6:34:dc:5a:e6:58:82:06:79:ef:2c:6a:8c:
f1:1a:c0:96:66:d6:38:f4:64:d6:d5:e2:b8:ec:e4:8c:50:e6:
75:40:1d:63:63:a9:43:d7:55:1e:da:4c:6e:73:a1:b6:8b:ce:
b9:4a:6d:af:6d:c9:a9:dc:68:b9:cc:17:4f:50:12:86:86:a6:
38:25:3f:3d:a3:3d:e1:16:cc:e7:22:91:36:66:bb:3c:80:a1:
81:dd:0a:13:4a:32:6b:27:28:63:5c:61:c6:81:bc:36:84:40:
c8:85:96:96:9f:17:3c:13:6c:71:bb:48:30:fb:da:b6:f2:af:
77:6f:a7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:33:53 2025 by rpki-client