Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
File: idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json)
Hash identifier: 6Mhy0GlsH0+1xZxYYxrw8r1Y8qNiH4i+qsXtzH/N+RE=
Subject key identifier: 16:98:6B:30:16:F9:92:7C:08:3B:AA:64:6C:43:47:0E:CF:FC:DF:A1
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial: 019653B797E37F596D5380A65D46E7846DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 15:01:02 +0000
Manifest this update: Sun 20 Apr 2025 15:01:02 +0000
Manifest next update: Mon 21 Apr 2025 15:01:02 +0000
Files and hashes: 1: J-tps2ELkCfcCcLwGdsaO09dBP4.roa (hash: 6YmY5CCnPEhTUSkoYzLXDEbRDQk4iktCzj/XnKUd+Ik=)
2: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: +3YrKzQx+ug+i9AUK2ZtLOUEG4ADIaw3nBsv4v8idxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:97:e3:7f:59:6d:53:80:a6:5d:46:e7:84:6d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Validity
Not Before: Apr 20 15:01:02 2025 GMT
Not After : Apr 21 15:01:02 2025 GMT
Subject: CN=16986b3016f9927c083baa646c43470ecffcdfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2d:2d:d2:f6:48:16:26:53:e2:5b:54:49:58:
bb:d4:d0:67:07:84:a2:0e:aa:3c:d4:41:3e:de:c9:
0b:f3:23:47:61:37:51:cf:14:75:4a:10:14:ae:12:
c9:d1:44:e8:73:44:c7:a5:36:bc:b4:a4:da:ae:67:
23:44:ca:f8:20:ac:05:3c:9f:24:87:de:a4:ca:b0:
ea:d7:8e:4d:3d:41:81:83:e7:3f:5d:b1:83:41:de:
20:49:01:1f:c6:2c:a1:79:fd:3d:34:34:9f:f3:44:
5e:3f:1d:d2:fc:f7:0e:8e:07:77:03:b3:0e:bb:d6:
a7:e4:6d:ad:97:04:e5:2a:35:8f:e6:32:fd:75:a8:
6f:d8:d5:2b:7a:1f:01:5d:8d:d0:29:3f:e8:cb:87:
d2:99:43:af:02:d2:c7:cc:7e:7c:7c:aa:db:ab:5e:
e4:c3:ab:0b:ee:ee:43:6b:60:b7:40:98:59:d4:8f:
c6:a4:c4:5c:0d:7b:7a:4f:99:4f:4e:35:1a:d9:d2:
8d:69:82:34:04:6c:63:69:49:0b:44:3b:03:34:12:
46:6f:d7:14:d4:23:35:80:98:ec:b4:1a:bc:97:67:
44:db:4c:eb:06:e2:4b:95:c1:cd:2c:cd:07:9b:94:
ca:be:e3:97:c9:a8:45:7c:43:34:ef:bd:fa:ea:ee:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:98:6B:30:16:F9:92:7C:08:3B:AA:64:6C:43:47:0E:CF:FC:DF:A1
X509v3 Authority Key Identifier:
keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2c:d5:08:d7:03:f4:b7:5d:ff:95:91:a7:12:83:83:e4:86:
97:aa:67:78:34:d9:33:8e:ea:a7:90:48:98:f6:96:e3:42:44:
2b:9f:19:17:bb:56:cb:ba:30:ed:33:e8:41:a6:6b:5a:3a:5a:
ed:68:3f:47:b9:26:f3:a8:8a:f3:7b:c2:08:e8:b6:98:32:b1:
85:44:a3:91:29:1d:92:5b:53:a8:dc:b7:4b:4b:3e:84:66:81:
b9:e9:d6:c5:b9:84:bc:4a:71:f6:9f:e3:2a:26:cf:24:eb:02:
91:6c:27:bf:c2:eb:87:97:28:f7:7f:92:00:de:fc:eb:64:59:
75:d0:7b:fc:3c:b7:ba:0e:96:12:8c:98:a9:9b:7c:8e:a4:66:
62:f4:f9:5e:f6:91:f7:7e:79:a5:95:16:53:18:49:b5:49:7b:
62:11:0e:ef:df:a8:07:06:9f:2f:35:e5:57:7c:b5:58:02:6a:
2d:cc:3d:2a:fe:c2:33:40:74:75:dc:18:ed:48:13:28:f6:ad:
8f:f3:c5:26:60:40:46:1e:67:de:6e:22:fa:e8:50:6e:6a:5b:
12:29:00:89:ff:7c:cf:d1:a0:8c:01:ca:9a:f2:4d:5f:7e:03:
b5:5b:bb:a4:00:8b:fd:ef:24:0b:bc:4b:44:1d:9d:33:c3:cf:
7d:74:28:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:16 2025 by rpki-client