Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: uGLFPQ7zwIbMBPwQoWCrxXCmLtxHSl895p/Cz/AyHRw=
Subject key identifier: 0E:3A:96:ED:3D:2F:B2:96:62:B2:BD:3F:ED:FC:0C:C0:65:19:5F:06
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 019612EA4DD3357B862E9B86DBCD176634DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 14DE
Signing time: Tue 08 Apr 2025 01:01:07 +0000
Manifest this update: Tue 08 Apr 2025 01:01:07 +0000
Manifest next update: Wed 09 Apr 2025 01:01:07 +0000
Files and hashes: 1: a5yaKlijnL4kZ_oj1IyssANoPrY.roa (hash: Ldfc6br/bRY5cT98+AAZmtT6be1fhfXCxblPXo1RRow=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: ZGH3wAc/XL3rhZ6E99zw/eUhCSCwORNVqWXgtYDwlAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:ea:4d:d3:35:7b:86:2e:9b:86:db:cd:17:66:34:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Apr 8 01:01:07 2025 GMT
Not After : Apr 9 01:01:07 2025 GMT
Subject: CN=0e3a96ed3d2fb29662b2bd3fedfc0cc065195f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:19:49:7c:ce:20:c6:f8:01:f9:bd:62:68:
c4:f3:d0:0b:b3:17:19:17:5f:36:83:6d:80:2b:a1:
d4:b4:12:b5:fb:79:c1:0b:5a:a4:64:66:0c:ae:84:
1f:dd:2c:1d:96:87:01:b4:94:cd:98:91:1a:9a:77:
ff:bc:57:bf:2a:f7:e6:63:81:4f:dd:d9:47:12:12:
5b:24:08:93:8b:27:ef:19:26:14:f5:25:9e:53:ee:
e5:31:58:9f:61:8f:bc:d2:74:78:97:95:14:4f:51:
97:e1:72:71:77:a6:8f:d9:d3:28:ae:7e:39:09:77:
bf:91:42:05:d3:21:24:f9:00:c4:a3:b7:bb:26:b9:
75:fe:f9:c8:f4:c7:2f:de:e4:7e:49:90:9a:f3:6e:
ca:17:42:80:93:6f:de:3a:91:01:ce:b0:e9:5c:4b:
2a:0b:b0:61:75:20:08:a8:23:f6:62:6f:f6:6a:f6:
e2:bb:13:1c:11:ed:d0:e4:b3:62:0f:e9:0b:74:08:
23:a5:26:b5:c9:f0:7a:78:d2:fe:e7:f8:32:8e:52:
51:e2:73:9b:4a:59:3c:28:f6:1a:99:54:9d:f6:0f:
77:1f:d2:ae:40:1e:e4:68:44:2b:52:bc:d2:8b:fe:
13:47:2b:fd:e1:1e:27:fc:dd:8e:7a:0d:63:ae:8d:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:96:ED:3D:2F:B2:96:62:B2:BD:3F:ED:FC:0C:C0:65:19:5F:06
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:fa:f3:97:00:a7:ba:0b:76:a9:98:e6:0f:7f:f6:ba:fb:e2:
a9:a9:6c:79:ea:81:be:8c:52:75:95:47:7d:94:be:5f:92:bf:
e4:31:02:fa:e5:dc:d3:3f:a7:b2:82:32:e0:f2:a2:cd:60:8b:
ed:14:31:d2:db:f1:e1:d6:f0:74:d1:5c:35:74:73:6d:af:45:
d9:44:78:f2:15:d8:6e:ad:51:74:17:26:1e:b6:42:de:1b:d9:
48:40:0e:b9:57:17:d1:86:7c:cb:50:2b:f8:0e:58:a8:b4:69:
14:07:81:0a:fe:49:f7:64:58:c7:5a:43:c2:11:ca:a4:cc:26:
33:4d:3f:c9:3c:d7:8d:55:57:24:0f:91:eb:64:78:20:e6:32:
aa:aa:06:81:23:24:8e:4d:bd:21:ae:78:03:f1:07:03:91:e7:
f2:00:5a:c6:4d:c8:84:a2:f3:05:61:02:77:c3:45:d5:f7:28:
ac:cd:40:a0:49:11:d9:92:fa:dd:73:98:08:1e:63:98:54:a4:
09:fb:61:27:4a:b1:22:4d:f4:6a:81:9e:94:d4:87:4c:49:25:
38:2f:b7:e4:8e:2d:21:51:00:af:9c:ea:0e:86:24:59:0e:08:
2f:96:0f:e5:5f:43:c5:f4:34:5c:45:6f:c5:29:23:3d:36:22:
e1:a1:c9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:22 2025 by rpki-client