Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: bDacgZSvBdS2pb3lewF1WdoKGYNVl3IWAT1h4/6t2CI=
Subject key identifier: 56:8C:67:08:43:63:22:85:29:6D:C7:0B:72:F1:63:9D:45:23:2E:E0
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 0196549290FC195297D8B52C8640A00CFC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0618
Signing time: Sun 20 Apr 2025 19:00:13 +0000
Manifest this update: Sun 20 Apr 2025 19:00:13 +0000
Manifest next update: Mon 21 Apr 2025 19:00:13 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: KAWNirjvWCp1Al4IM1K3HXnovGlCHnZ1aFDey5wbNFc=)
2: wvcELSI8p3zOC9FNSdvAaOhzdZI.roa (hash: aWdD7yZCiGD/jhoFXeJkT3mN7GJI55ijye/m8elp9fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:90:fc:19:52:97:d8:b5:2c:86:40:a0:0c:fc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Apr 20 19:00:13 2025 GMT
Not After : Apr 21 19:00:13 2025 GMT
Subject: CN=568c670843632285296dc70b72f1639d45232ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c9:13:f1:e0:b6:68:41:93:b2:3f:44:a2:2f:
e8:1c:3f:c5:f4:9c:74:4f:28:39:a7:ab:e5:4c:19:
ea:1f:fd:4d:97:52:6c:d7:4a:70:3d:97:e3:7a:78:
a7:74:79:ce:c7:55:18:91:a2:02:3b:e3:57:4a:5e:
ee:5f:53:9f:b2:d9:41:db:e2:bc:66:3e:e6:2a:48:
94:e9:4f:d3:57:52:fe:f3:99:f1:df:75:b9:8d:b1:
b5:e6:2b:49:91:e3:8b:8d:d8:47:c0:00:e9:bb:7c:
96:43:f0:cf:bc:19:61:24:26:9b:db:70:45:19:64:
c9:2f:d1:35:33:86:fa:2c:1a:1b:2e:ab:a8:1c:45:
74:34:62:14:0e:01:c2:d5:8a:c8:38:5c:87:c7:6f:
5d:fb:be:39:18:6d:fc:ad:46:a8:5c:3e:37:83:39:
bf:b8:87:61:6f:a6:28:b2:78:45:71:8d:c9:9a:04:
cb:fd:01:9c:0c:b6:8f:0e:09:0c:fb:d0:17:5a:f8:
f1:87:2a:8f:e5:6c:aa:f7:7b:43:e1:b4:a3:59:83:
31:4f:90:07:96:26:b0:de:d1:c7:67:e0:77:00:54:
1e:01:66:7d:90:79:58:be:b3:ce:87:27:36:32:5c:
d4:86:78:0d:5d:d8:bc:df:3c:78:99:9a:4b:9b:73:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8C:67:08:43:63:22:85:29:6D:C7:0B:72:F1:63:9D:45:23:2E:E0
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:13:87:a7:99:a0:e1:5d:4b:5b:53:3b:10:35:c1:60:8b:02:
84:31:17:34:24:1c:74:78:70:1a:59:e2:d0:e6:d0:47:64:d2:
63:25:c6:b5:d1:33:e2:79:50:c1:58:3c:3b:a9:22:04:40:69:
91:8d:2a:04:2b:ba:7a:52:d1:8a:b3:61:82:0e:c9:35:bd:d8:
d1:bc:bb:da:e4:5c:0a:df:f7:c4:8f:64:0c:9b:9b:0e:17:74:
65:17:92:25:7c:bc:10:e9:67:6e:f4:8b:5c:a8:36:0f:a7:60:
fe:4e:a6:3e:32:14:0e:da:e1:41:b3:2c:91:59:a3:84:80:56:
d5:f0:97:60:8d:c6:1e:08:6c:db:ae:9c:dc:df:c1:2a:e1:7e:
83:3c:e3:d9:bd:42:7e:4c:4b:c3:e8:92:36:6d:5f:83:bd:93:
2e:f3:c5:8b:64:55:a4:c4:e1:55:41:f3:00:ad:8b:37:08:4e:
9b:3f:35:f8:5f:55:ee:ea:38:c4:26:a6:00:d4:e3:66:c0:0e:
19:ff:cb:b6:91:79:cc:73:98:fa:3c:a1:e3:41:09:cb:be:20:
33:02:47:90:46:40:f4:79:b6:a5:00:0e:23:a5:8a:4b:16:7d:
ca:3f:b5:f8:b4:cf:d5:d8:a4:d1:f9:a6:8b:07:b5:a0:a6:8f:
39:2f:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:27:33 2025 by rpki-client