Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: xfm+McDijP4TNbx5Vk43BiKbkp+vKhJOTpBn94u60QY=
Subject key identifier: 80:63:95:EF:48:18:12:76:69:7B:92:7D:47:32:2B:A8:F4:E6:22:E7
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 019644E90E3BB484310D21AFED0AB58A42D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 14FA
Signing time: Thu 17 Apr 2025 18:00:46 +0000
Manifest this update: Thu 17 Apr 2025 18:00:46 +0000
Manifest next update: Fri 18 Apr 2025 18:00:46 +0000
Files and hashes: 1: HevIcw-udVLHAsRMuVL8AXS5DmE.roa (hash: /vwUjeGhMDVH5p9rxYTRis9U3GgQG40VBJ1bShqGwbM=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: wyIo5AFd3sS2SxI28WzWBQVA4KyffG07/5Z2t3TzpdQ=)
3: dfcipKIHJhkLM8tES7y9qnzOa0g.roa (hash: hdMZ+zVZPKGH8nt9Efyy+7bQ/S/VggiNWiYJsxgZkUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e9:0e:3b:b4:84:31:0d:21:af:ed:0a:b5:8a:42:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Apr 17 18:00:46 2025 GMT
Not After : Apr 18 18:00:46 2025 GMT
Subject: CN=806395ef48181276697b927d47322ba8f4e622e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7d:81:85:3d:94:b7:d7:3b:69:04:27:ea:fa:
b0:cc:8f:a4:ca:05:48:77:b8:38:4b:1b:ec:a2:31:
88:ad:21:24:92:09:77:a0:7a:9f:09:5b:8c:93:ed:
04:5f:10:a5:7e:bf:e6:36:37:c4:03:54:2b:b8:18:
fd:49:6e:35:66:4e:4c:5b:1e:dd:83:27:f0:12:f1:
a2:e0:51:07:df:84:a2:11:16:fc:de:e2:c8:60:7e:
db:24:23:4e:d8:3c:41:0a:e1:e2:20:e3:76:af:e2:
e2:1d:c4:e6:de:89:be:b1:1d:70:cd:f4:b9:8c:b4:
5e:75:5a:36:48:4f:4c:da:71:f3:95:2f:54:33:1c:
29:f3:7e:fe:23:da:51:f7:52:45:ef:1a:4b:2f:cb:
20:94:d6:2a:ad:4d:51:39:a8:76:14:af:75:0a:ee:
5a:f3:e7:d7:f9:40:23:23:35:8f:b9:53:a6:75:fa:
64:70:c1:51:e4:6e:40:ac:57:35:43:cc:5d:33:82:
93:fa:f0:63:51:67:0c:b6:36:55:54:03:6b:41:e3:
7c:9a:91:1e:1d:1f:c8:47:88:d9:2b:cc:15:ff:42:
22:ef:d3:4e:94:2c:25:b5:a5:aa:7f:26:aa:5f:d5:
ae:a0:0d:95:31:aa:c2:1f:b9:c0:17:10:7c:f9:b0:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:63:95:EF:48:18:12:76:69:7B:92:7D:47:32:2B:A8:F4:E6:22:E7
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1b:a3:0f:10:0d:58:4e:23:b0:5e:9e:53:9a:f7:20:5b:85:
b2:ca:33:df:5a:1a:6c:a2:ed:2f:b3:12:6f:d4:4c:a0:1c:55:
29:c5:a9:2b:ac:ba:46:e5:f1:f7:90:64:d1:89:a8:9f:00:9f:
fa:a8:59:db:a8:a1:7b:3b:3a:e7:ad:8d:17:23:65:af:81:44:
15:75:f6:7c:7b:93:d1:4c:fb:ed:4d:80:3c:21:0a:12:74:c9:
61:37:46:b1:31:49:69:aa:04:9d:42:6a:70:40:e2:ad:4b:03:
b7:46:4c:c9:3c:52:5a:2b:1c:aa:8e:50:90:0f:e0:85:14:47:
c4:2c:2f:e2:0f:7e:56:f9:c8:4c:af:8d:42:59:46:1a:94:b1:
31:1a:a8:71:b8:16:74:b3:e4:26:10:3b:38:49:bb:c7:8b:dc:
b4:70:02:ee:64:17:74:b7:fa:5d:f3:61:7d:6a:06:89:38:c1:
b9:31:99:b6:62:09:87:82:62:9d:19:1c:77:4d:9c:b0:64:c7:
96:ee:bb:58:d2:b8:ba:c5:47:74:8d:83:9d:98:bf:2e:6c:35:
58:25:fd:86:97:a5:e9:c9:ce:95:dc:d2:26:35:d2:e8:8a:31:
e1:eb:f2:67:cd:db:03:3d:88:43:e1:10:a7:0b:c3:d8:c9:dc:
03:c0:0a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:39 2025 by rpki-client