Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File: _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier: HYXRbdfx76T5IhblaNLKcrj3kdpSOVqgow7g9tQs9dc=
Subject key identifier: 92:36:2C:85:7F:C5:85:37:4C:32:3E:6E:AD:D6:D8:58:23:A1:7B:97
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial: 0196515BC2A17263F3F745D5C2458C8BEC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number: 12B1
Signing time: Sun 20 Apr 2025 04:01:30 +0000
Manifest this update: Sun 20 Apr 2025 04:01:30 +0000
Manifest next update: Mon 21 Apr 2025 04:01:30 +0000
Files and hashes: 1: GKGUA1ULBuEBg6UZcKqTCkNmhrM.roa (hash: S+MOcu2hV7fbEQM0gv8ckh0dyXeXiOXULnIXULZ3i+k=)
2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: Z57JsH38Qwns/1UjQ7JFNF7oMr/jgi0rtLCfeB2oOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:c2:a1:72:63:f3:f7:45:d5:c2:45:8c:8b:ec:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Validity
Not Before: Apr 20 04:01:30 2025 GMT
Not After : Apr 21 04:01:30 2025 GMT
Subject: CN=92362c857fc585374c323e6eadd6d85823a17b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:fe:bd:a1:cd:7e:c3:7e:5b:2a:66:ab:e3:
a6:b1:c2:f2:55:25:39:78:9a:e0:a5:5e:16:40:68:
1e:83:78:59:2f:22:4d:ae:d4:7a:1a:53:53:4e:25:
28:99:88:be:bc:fa:02:4d:e9:af:c1:cc:ee:4c:2b:
59:ee:a0:a5:a6:dc:69:08:ec:eb:cc:a8:15:13:3d:
19:c6:3a:14:22:2e:b8:73:6c:e2:1d:82:9d:cc:a8:
8f:d7:62:32:e0:8e:38:fe:b8:76:f3:63:83:e4:a0:
19:a6:ed:94:e1:9e:45:ad:db:68:78:04:88:da:3b:
27:fc:1e:f4:28:64:cd:56:df:1a:59:63:88:99:01:
59:96:de:aa:d5:c0:18:45:4f:4f:b7:d9:bd:3f:ef:
0e:a2:9e:39:27:3a:e5:d5:52:0f:d5:f5:05:82:9a:
6b:4f:7b:e5:d5:98:5c:5f:54:03:a3:d1:bb:e1:16:
8d:31:df:7b:73:59:c5:8e:27:94:76:20:6b:2d:ae:
0b:41:9c:67:e5:4b:99:f9:9d:88:29:fc:d9:bf:87:
1d:54:95:76:20:a6:44:40:eb:52:27:4d:21:0b:da:
f7:77:ce:35:90:a9:f7:10:93:a9:b0:7a:d3:21:f1:
75:25:75:f1:43:10:e8:3d:0e:a3:37:c8:f4:2c:e6:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:2C:85:7F:C5:85:37:4C:32:3E:6E:AD:D6:D8:58:23:A1:7B:97
X509v3 Authority Key Identifier:
keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6e:89:31:0a:3a:cd:a6:51:a4:12:d4:5b:2d:42:84:87:d6:
bf:01:9f:89:15:15:29:1a:7e:0e:4c:3f:33:d6:a3:e2:8b:2a:
89:24:e6:33:06:46:1d:d0:26:c5:f3:06:36:17:75:a1:d0:22:
6c:52:69:aa:46:ff:66:0d:2c:ac:7f:aa:2c:b5:4b:d1:ab:c3:
e3:85:ad:89:73:d6:f9:af:88:c1:9d:57:e9:7b:8b:34:8a:6b:
a0:71:f9:6c:17:9f:07:04:69:15:8f:8c:72:17:80:bc:34:2a:
44:3d:74:56:8c:68:83:ee:c5:ba:30:3b:f7:4a:b8:f0:44:ce:
c8:a6:cb:a2:f8:06:c9:1a:95:de:e0:7e:74:38:d7:24:ce:ae:
da:22:3d:4d:5e:4f:d7:e4:a1:73:87:33:1e:eb:e4:fc:e2:b1:
a7:56:cf:1e:dd:22:f6:c4:1a:cf:cf:d5:5f:e4:c0:03:7d:f8:
4b:d3:aa:97:e9:a4:34:e6:0b:c6:e8:f1:27:11:8c:21:7d:41:
12:80:1c:7d:31:0c:44:8b:94:24:d5:94:f1:36:27:87:bb:9e:
05:0d:25:1f:20:ca:9c:4a:91:c4:23:69:63:82:91:4e:94:de:
9d:8c:9f:8d:91:70:07:4e:5e:65:28:10:9c:73:ea:97:4a:83:
35:c0:88:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:04 2025 by rpki-client