Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
File: isfq5knZVHsK0KsAerTopI3tTV0.mft (raw, json)
Hash identifier: RPIrLNW5yBKfQlRKrGN686m+ELzInKXLhsySDmD2tV4=
Subject key identifier: C6:B2:17:15:2F:00:F0:20:D4:85:78:0D:20:B2:26:49:61:B9:11:1F
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 01964CA2A43B58B0DF09FD8A0595DE1BD893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
Manifest number: 14FF
Signing time: Sat 19 Apr 2025 06:00:49 +0000
Manifest this update: Sat 19 Apr 2025 06:00:49 +0000
Manifest next update: Sun 20 Apr 2025 06:00:49 +0000
Files and hashes: 1: isfq5knZVHsK0KsAerTopI3tTV0.crl (hash: lqwKh2WLnqsrqzIhxdTTcO/3CQv0q04L3/JyyoknDL4=)
2: vASHsaghbXrziZGVrZp3z_dQ0hY.roa (hash: +D8Rri+Xk/SVSUJL6LzaxDMlSw5qtTcPP6AjI3TjSIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:a4:3b:58:b0:df:09:fd:8a:05:95:de:1b:d8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Apr 19 06:00:49 2025 GMT
Not After : Apr 20 06:00:49 2025 GMT
Subject: CN=c6b217152f00f020d485780d20b2264961b9111f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:11:8e:a9:77:86:11:8d:51:d5:ef:97:26:7e:
92:97:5d:52:fd:14:a8:2f:70:7b:78:fd:b0:1b:2a:
d4:9d:27:98:dc:0c:11:32:a4:8d:64:9d:5d:ef:cb:
15:c3:b6:49:62:68:d8:6b:25:d7:f9:6e:bc:1b:fe:
7e:e0:23:69:94:04:8f:f6:37:56:de:75:5c:c2:0a:
c8:b0:1b:3a:9c:3b:c6:23:ee:ae:01:0a:c0:cb:9c:
6d:d4:06:15:e9:a5:ed:23:94:ff:61:57:52:ca:2c:
4d:3d:d6:4e:16:14:4e:24:30:18:a7:3d:a6:3a:fb:
f0:ae:6f:a0:ed:62:00:92:cc:68:1f:ea:74:3a:a0:
9f:15:b7:69:0d:eb:ca:66:ac:bb:7f:d5:a2:f8:74:
cd:32:c7:70:83:90:5c:0d:8a:29:07:f1:5f:80:d3:
30:a2:48:bb:e7:57:8a:eb:14:f2:19:8c:ff:41:a8:
ab:32:d7:1e:06:9f:18:05:79:05:11:71:fc:f9:82:
2f:71:00:80:78:21:fe:c9:3f:0f:87:7e:d8:05:bf:
34:9b:d7:ea:91:e0:01:7a:2c:ad:00:51:54:03:b7:
1c:0a:18:4e:56:da:0d:ed:0b:ad:71:d8:5b:e7:a5:
8c:d0:31:54:ae:41:24:c7:f3:8d:36:5b:f9:72:83:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B2:17:15:2F:00:F0:20:D4:85:78:0D:20:B2:26:49:61:B9:11:1F
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:eb:62:50:0d:fc:bd:57:80:74:29:d0:68:66:32:41:a9:cb:
b9:c4:02:bc:37:7a:75:87:7b:69:7d:12:5a:e7:bd:9b:f5:df:
99:40:40:0a:96:06:a6:5f:b4:cd:eb:f0:33:69:29:9b:6a:cd:
7a:35:8f:8b:bf:44:25:a3:7d:98:c9:24:c1:87:aa:f7:4c:8b:
08:fc:a9:45:3f:ba:d3:8f:0c:2f:07:42:25:86:ca:09:c8:5a:
e1:fc:06:70:e8:82:60:fb:4f:ed:dd:4d:f9:78:ae:04:9d:bd:
3d:c6:b2:90:ce:f7:f4:51:4d:b7:4f:c7:45:af:6d:1d:22:50:
d9:33:60:62:e0:d3:eb:36:53:3c:de:55:ff:a2:ba:34:d9:fe:
20:f0:ff:27:e2:7d:08:0f:c9:64:fb:36:66:4e:0f:d7:df:61:
c6:39:d4:c1:22:fb:10:d2:b1:f5:71:9a:2a:69:03:4f:c5:6b:
ec:2c:17:ae:1c:89:09:69:19:47:c5:9f:7c:89:b1:d0:47:6e:
d0:40:e2:5a:09:50:26:a3:86:e4:b2:4e:a7:91:fd:08:dc:a6:
0c:62:4d:86:45:cd:28:50:4e:ce:bf:8d:65:c4:c6:04:18:b2:
61:53:40:b9:2e:2e:fd:23:d4:41:1c:17:32:77:93:eb:b0:ea:
b0:6d:db:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:29:50 2025 by rpki-client