Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
File: _ieWxamFRTLp7WONHDmlQcLYlSw.mft (raw, json)
Hash identifier: /yYLVJQbrMiL811yYQyH5cXs+kz2axKNrKc/tHzKQN0=
Subject key identifier: 10:C3:00:AC:4D:68:EF:92:48:C3:E1:34:45:5F:29:36:B9:CB:AF:B7
Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
Certificate issuer: /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Certificate serial: 019651C88ACECF9FDF02DADA1A1731364EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 06:00:19 +0000
Manifest this update: Sun 20 Apr 2025 06:00:19 +0000
Manifest next update: Mon 21 Apr 2025 06:00:19 +0000
Files and hashes: 1: _ieWxamFRTLp7WONHDmlQcLYlSw.crl (hash: K/xcajfBHOaNnKazojI11942X+2tDBaMO5npDHMUCIw=)
2: lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa (hash: Oh3cZzMySDT+Ikxg+sUYVfiZZ5GP7qV/BWdrXyebTLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:8a:ce:cf:9f:df:02:da:da:1a:17:31:36:4e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Validity
Not Before: Apr 20 06:00:19 2025 GMT
Not After : Apr 21 06:00:19 2025 GMT
Subject: CN=10c300ac4d68ef9248c3e134455f2936b9cbafb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:58:a1:e7:d9:6e:5f:08:ae:f3:1d:a2:5c:
f0:a8:77:0f:fe:5d:82:59:fc:e0:2d:9b:3a:ef:8d:
91:76:ec:57:dd:21:b3:df:a1:c9:cc:d9:67:53:3a:
e8:b3:17:b2:e4:3f:95:dd:f8:f5:c8:7d:96:12:18:
bb:f8:b8:7c:df:d5:14:49:3d:25:60:14:29:d5:49:
aa:d9:fc:33:2c:b9:ca:fc:f4:df:83:a4:45:7b:13:
22:5f:f5:c5:74:a0:b9:6e:00:a4:d7:00:c5:b5:47:
14:78:7f:b4:10:ba:4a:77:59:ea:62:c4:ae:12:55:
f9:48:b6:51:86:7a:de:5f:3a:4a:8a:21:bb:c5:42:
bc:cc:a6:45:d7:40:da:5e:79:26:d8:e6:e0:15:8e:
6c:10:7b:ea:63:5f:78:db:89:43:d1:6b:93:ab:c2:
b4:46:4a:cd:a9:0d:13:0c:fc:18:37:62:65:e0:f3:
e8:52:97:a5:aa:fa:3f:ff:32:b1:e4:3c:a2:99:4d:
d4:21:58:43:f1:f1:3b:49:37:25:3b:d9:08:6e:c3:
1a:e4:ae:5b:23:4a:b0:c3:38:97:7b:51:39:a3:95:
46:da:c1:b4:3e:ee:7c:3a:d1:f5:27:3b:29:a5:4e:
a1:58:c8:4a:f6:80:58:47:42:bb:d1:2f:6c:94:bc:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C3:00:AC:4D:68:EF:92:48:C3:E1:34:45:5F:29:36:B9:CB:AF:B7
X509v3 Authority Key Identifier:
keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:89:e3:33:be:8b:7e:2b:17:b3:f2:93:65:99:ea:2c:12:4a:
50:40:f4:ff:ec:af:6f:bb:34:cf:e1:80:5f:4e:50:15:9f:97:
c5:fc:5d:55:e7:68:2c:27:08:6f:e6:65:6e:d6:2e:cd:c1:9c:
db:86:f9:b4:75:ec:ae:e4:a3:d1:00:52:63:8d:08:eb:71:08:
18:b3:32:be:38:66:18:7d:c8:5a:1a:28:38:38:61:af:a7:75:
92:45:57:7e:0b:77:9d:1a:4c:71:04:ce:98:ba:59:38:a1:6b:
af:17:31:ae:93:00:bc:71:69:8e:96:91:0a:62:7e:ac:82:60:
13:aa:f3:e7:a1:b4:be:f0:33:80:98:f6:b4:d5:cd:78:65:f3:
e9:07:d5:c1:7f:12:90:1d:fd:6a:4d:20:31:54:53:4c:fe:7f:
18:45:b4:c8:ec:ec:5f:30:00:9d:91:7e:20:8a:3e:17:b9:35:
65:71:42:48:9e:22:83:96:b2:75:1f:a1:43:c2:9b:fe:77:6b:
fd:f5:4d:6c:f8:cc:3d:c9:af:d4:a6:7f:48:e7:98:53:02:77:
54:58:d5:3d:67:a7:a2:03:4b:ad:3e:fb:4f:12:e8:c4:85:b1:
bd:5f:db:a9:2e:ec:03:fb:b1:8e:3a:1f:ea:1c:eb:f7:1e:fd:
14:02:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:27 2025 by rpki-client