Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
File: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json)
Hash identifier: T6KXC+wP09hAKeXiFiGvXRb3EQxcrw4UG7VRIG70gh4=
Subject key identifier: 68:9E:D4:22:DC:07:8F:96:F9:C0:FC:05:B5:3A:C5:71:49:0A:DB:02
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 019654930F18B100FB85504D0E7FB8C047D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 19:00:45 +0000
Manifest this update: Sun 20 Apr 2025 19:00:45 +0000
Manifest next update: Mon 21 Apr 2025 19:00:45 +0000
Files and hashes: 1: Lhe1dIcaQ8uYC-tM4_HlulQzvCo.roa (hash: tTALYzIFh4izYkRayS1lcrRII4GdMnV6mKHpYnfWfmk=)
2: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: dPhwP2l2mP84AEHA5U3hevu6/exnosOoz/cUr/daaiw=)
3: xG6V-ZBOkUvyT-WvdOCbpNGBhno.roa (hash: Naq65ENl+tsrgyE3t3NO3AfPirgJokBnbdzMIvkSOwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:0f:18:b1:00:fb:85:50:4d:0e:7f:b8:c0:47:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: Apr 20 19:00:45 2025 GMT
Not After : Apr 21 19:00:45 2025 GMT
Subject: CN=689ed422dc078f96f9c0fc05b53ac571490adb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:6b:f5:f3:92:74:ed:b4:08:cb:94:2e:5b:
a1:21:fd:e6:5a:2d:29:fe:76:77:88:2d:64:d3:b5:
4a:91:f9:1d:76:97:cf:b3:2f:29:96:71:da:c2:57:
1d:d3:30:d2:fe:4c:4c:bb:ca:b4:5d:d2:c7:36:f2:
7d:d9:44:dd:dd:14:ac:aa:48:87:ee:b9:75:fb:f3:
ce:fd:2a:f3:be:52:53:e8:06:db:73:5b:60:c2:8f:
11:fb:99:b5:2f:05:73:ac:55:6d:87:5f:11:a5:43:
7b:53:95:c6:77:03:cd:c8:d9:7d:7e:dc:3c:bc:14:
8d:dd:3d:5f:01:58:a0:20:98:23:4b:c6:61:11:8f:
2b:73:85:38:ab:8a:85:ff:7c:56:c9:13:da:bc:54:
f4:72:f0:85:05:43:95:f0:e4:78:f0:82:9c:5f:f2:
85:02:2a:c5:fb:56:a3:5b:f4:fd:b4:20:56:01:10:
bf:f3:8f:04:0b:9c:17:70:03:8c:d5:ab:d4:c5:95:
d8:b8:b3:ea:fd:9a:5c:f3:fd:12:da:3b:2d:39:4f:
b9:c1:55:d9:01:d1:b1:b4:28:42:3d:cf:29:00:1c:
ba:c3:f3:26:33:7f:5e:07:1b:3b:14:de:45:cb:4a:
4b:59:dd:ac:6b:13:81:b8:22:14:7a:19:b2:6e:55:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9E:D4:22:DC:07:8F:96:F9:C0:FC:05:B5:3A:C5:71:49:0A:DB:02
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:29:8a:e6:63:38:c2:60:5d:eb:de:6f:e0:5e:04:f6:31:af:
34:58:a4:4c:f9:58:23:58:b8:e1:a8:ab:c9:ad:b8:29:0d:ef:
7d:2e:c6:42:88:c9:8e:68:04:7f:0f:cf:98:f2:ac:d8:f8:78:
5b:6c:d9:3d:45:78:2e:45:15:d8:06:ab:f8:44:fa:c3:c6:2f:
09:8a:d8:71:5c:29:53:63:02:96:1a:ff:c1:16:91:12:b9:21:
71:72:64:e0:f2:88:6c:f7:7b:71:f9:53:98:83:c5:28:f7:8f:
04:1d:5f:bf:8c:6a:9b:74:6a:96:5c:e2:f2:b5:11:ca:03:5f:
f5:69:8f:4d:d9:2c:52:18:f6:74:b2:a5:dc:74:9c:aa:63:ed:
ff:9a:d7:ee:1f:89:70:9d:da:2f:6c:62:4c:c7:26:3f:50:c1:
63:30:5a:bc:84:ef:e9:68:22:b6:d8:58:5b:c2:06:9e:4c:db:
28:1d:c6:73:0b:84:39:79:b5:e5:09:08:86:59:11:be:52:c8:
00:fe:f4:09:3e:0a:3b:26:c8:fb:13:b1:a9:72:46:5d:57:bd:
f0:02:83:59:29:7e:33:d2:a6:68:6f:86:8b:d0:25:5a:4e:0a:
74:a2:2f:d5:0a:31:42:3b:61:08:0b:f6:0f:0c:2c:59:7c:71:
34:9a:a4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:00 2025 by rpki-client