Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: fMwHthZ0vR1p+om5SYPhmaJhmgYjHLgBKf0Uvcy2iUA=
Subject key identifier: FD:88:55:5D:12:6C:37:2C:74:D0:50:E4:39:A3:1E:E1:65:80:EE:18
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 0196515AA1EF472A3B57819C96ABFD9596C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 04:00:16 +0000
Manifest this update: Sun 20 Apr 2025 04:00:16 +0000
Manifest next update: Mon 21 Apr 2025 04:00:16 +0000
Files and hashes: 1: YOyr4rKnnzDrXdmtMOktrTLMhdg.roa (hash: 9XaoEGH44aifrIE9gnosDm/sLWWt90nSBonwPhD6BKU=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: ZpmkM0iQoIjRKvtJivi2mVd1dpQ6vmoH4AeNu4ZfrUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:a1:ef:47:2a:3b:57:81:9c:96:ab:fd:95:96:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Apr 20 04:00:16 2025 GMT
Not After : Apr 21 04:00:16 2025 GMT
Subject: CN=fd88555d126c372c74d050e439a31ee16580ee18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:0e:9c:5b:6b:11:cb:89:69:b0:b3:ed:3d:
8e:14:3d:4d:88:5a:47:a2:27:69:15:f5:98:6b:73:
c4:d2:59:49:a6:07:3c:f4:47:00:ff:32:13:c0:e3:
d1:76:a6:58:79:f4:99:5d:a2:07:2a:74:70:16:79:
0d:9a:b9:bd:f4:8e:e6:83:e7:af:94:66:99:c2:0f:
4a:ad:ef:4a:07:bf:88:29:c3:19:e1:68:2f:19:d6:
2b:6d:4b:a6:47:f6:27:3f:6f:39:e2:ad:e2:51:1a:
ff:53:2a:46:73:f8:02:50:18:8d:8a:8e:95:3f:a7:
1c:53:f6:6e:4c:7f:a3:51:7f:eb:98:9a:1c:88:4b:
bb:75:d9:a6:a5:ea:c5:93:66:31:74:d3:fe:7a:62:
58:d6:6b:0a:90:12:59:85:6c:ff:bc:be:ea:ec:c1:
7e:c8:8f:21:35:5c:5f:86:04:92:5f:30:2a:60:7c:
44:35:2b:16:2f:ad:9b:14:41:46:69:e8:9f:d2:21:
1c:47:18:4b:e3:35:63:ed:fa:bf:ef:77:a4:b5:8b:
c0:9d:f4:e7:4b:2a:e5:43:c6:0b:96:76:69:0b:e7:
f0:88:9e:ba:00:ed:9c:9b:44:99:e8:dc:d0:89:47:
96:7c:bb:bb:04:5c:41:c6:65:9f:19:8a:29:93:00:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:88:55:5D:12:6C:37:2C:74:D0:50:E4:39:A3:1E:E1:65:80:EE:18
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e9:9b:34:47:8a:9b:6d:b8:78:fa:63:d7:ea:92:f9:70:7b:
06:3d:ee:70:86:0e:40:65:32:ee:22:12:50:9d:90:70:b6:23:
b0:60:f0:45:f6:19:bd:e7:59:50:47:df:ea:18:5d:18:35:9b:
73:5b:f9:f3:b4:d8:8b:43:06:1d:9f:29:28:b1:4f:70:d3:04:
52:21:ae:94:b5:31:0d:81:ad:bb:a9:62:cd:0e:f6:9e:d8:de:
b4:a9:19:f1:c1:c3:6a:f6:0d:c3:b4:d1:9a:42:fd:eb:0e:32:
1e:46:49:01:bf:f4:14:ce:fa:a1:9d:e8:c4:55:f3:18:8f:b6:
b4:a4:ed:99:82:20:55:84:0b:81:a4:c0:f4:3e:a3:28:db:9e:
5d:2b:a9:05:a8:5b:38:73:42:a9:88:f4:ff:52:87:ea:48:bb:
5c:c6:8b:97:12:5c:21:d5:a0:85:ab:8e:12:52:01:31:78:09:
a7:c6:81:2d:0c:eb:cb:c5:a8:4d:b5:ec:99:6a:e2:9c:6b:26:
fe:09:22:e5:af:5c:2a:ba:1d:11:5d:28:65:98:82:37:67:c9:
8c:bd:92:49:1f:0c:7f:76:62:49:b0:88:be:7c:e0:9b:4a:11:
a0:ab:f7:d1:5f:45:28:4e:4d:f0:1c:65:dc:26:52:6d:c2:e8:
e5:9b:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:37 2025 by rpki-client