Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
File: Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft (raw, json)
Hash identifier: n1RcTTHNHaA7m3RFOtH/YjrZsdSSV6XhAHNjwUQdrS0=
Subject key identifier: 21:5D:45:1F:F3:8B:A0:B4:B6:E4:00:7F:09:60:5A:5D:62:24:7D:4A
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Certificate issuer: /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial: 01965349C445D5123F2F2F966B97AD44D559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
Manifest number: 0EF7
Signing time: Sun 20 Apr 2025 13:01:04 +0000
Manifest this update: Sun 20 Apr 2025 13:01:04 +0000
Manifest next update: Mon 21 Apr 2025 13:01:04 +0000
Files and hashes: 1: Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl (hash: ObDbMu0CGORl1u3LPaldkNO50XwJGuvAFNVZkDZaR9g=)
2: _AGKWozlzWCnt0EVUV_nIRjWGDc.roa (hash: u4jnpeyvwfIgkyOL/DVIQbqgyc9sUOLPqmAM+WUWM1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:c4:45:d5:12:3f:2f:2f:96:6b:97:ad:44:d5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
Validity
Not Before: Apr 20 13:01:04 2025 GMT
Not After : Apr 21 13:01:04 2025 GMT
Subject: CN=215d451ff38ba0b4b6e4007f09605a5d62247d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:0d:c5:79:29:63:46:48:02:d3:44:ee:8a:
53:ee:a5:82:df:c6:a2:3d:06:0c:65:11:0d:c9:6f:
bb:53:f4:9b:87:98:71:5c:55:d4:c9:20:2e:6e:92:
49:55:07:08:cc:cc:99:23:c6:90:31:6b:b5:a3:7d:
af:1b:8c:b1:0e:d7:70:6d:b6:35:3d:91:89:ee:86:
0c:56:f0:a3:75:89:66:a5:fb:98:45:61:12:23:c9:
f8:cc:71:c7:4e:c2:7e:48:a4:9f:f3:18:68:90:1d:
eb:ee:75:d7:fd:ed:7c:c2:7a:42:05:3f:ff:bb:03:
37:8a:fe:29:2e:1d:34:6a:44:c3:85:b7:02:f9:84:
e8:56:97:79:5c:5e:1d:fc:31:79:5f:de:83:7d:9f:
49:9d:41:2c:47:df:78:cb:e2:8b:67:2a:1d:f9:cf:
d4:16:ee:39:16:79:a8:c5:e9:9a:cd:3a:5b:90:63:
c6:c6:89:2b:59:27:62:51:5c:6a:22:03:19:29:c7:
e7:ec:08:50:d4:9a:54:d9:d3:0b:ae:81:ab:b0:bd:
18:52:a5:b3:12:d5:07:9d:c3:f6:50:96:e6:70:aa:
72:7a:f2:e7:44:18:a0:ea:c8:d4:85:59:a4:38:e9:
eb:9a:cf:5d:d3:fc:5c:10:6a:5b:91:85:ee:e7:6f:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5D:45:1F:F3:8B:A0:B4:B6:E4:00:7F:09:60:5A:5D:62:24:7D:4A
X509v3 Authority Key Identifier:
keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:63:83:c2:07:d2:f5:aa:57:d2:87:df:aa:35:b3:8d:e4:40:
da:cb:9e:cf:16:26:72:ab:5b:bb:d3:2d:7f:ee:56:03:f6:1b:
79:a8:1c:44:4f:bf:e1:c8:82:8d:b2:af:d8:3b:4e:65:1a:81:
51:38:4e:9c:54:c3:a1:93:74:08:96:ef:42:6f:b9:f5:0d:f7:
2a:ad:ce:43:79:a6:1c:9f:63:ef:8d:52:ad:49:1a:1e:f4:7e:
d1:e5:22:51:f1:2a:a1:6c:3a:b7:2b:d6:48:6d:16:d6:bc:fb:
52:b0:69:1d:38:50:aa:40:16:96:4a:88:24:3d:da:04:64:b5:
ec:13:70:2b:dd:7c:3b:10:ae:3a:95:40:27:29:cb:cf:85:e3:
10:87:c2:90:2d:0e:1e:da:7a:6c:3c:d2:03:51:c6:49:63:54:
98:2c:71:c0:24:bf:33:97:f6:1d:af:fe:44:4c:af:ae:8f:25:
09:1c:51:c3:43:b5:3a:35:94:2d:82:0a:23:ca:93:fe:f5:38:
80:d7:7d:96:52:c1:e1:83:36:bf:9a:51:df:06:ae:00:9f:07:
ac:61:54:aa:5e:84:0f:1d:f4:0d:24:37:48:11:11:ab:e9:d3:
ad:a3:73:57:5e:70:9f:c3:fc:6c:f2:ec:f6:b7:a1:9c:58:76:
c3:74:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:38:18 2025 by rpki-client