Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: nrTPerqnzPgEMZTYfo3GroViBSup6CFW2CMmely13Nk=
Subject key identifier: 1B:68:4D:45:6D:62:F8:27:47:55:4C:AF:08:BE:BB:13:05:16:34:A6
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 01963CC16391F649BD9F337F59FC64AD7F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 04:00:28 +0000
Manifest this update: Wed 16 Apr 2025 04:00:28 +0000
Manifest next update: Thu 17 Apr 2025 04:00:28 +0000
Files and hashes: 1: 7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa (hash: UostfHkB3oR0Iku8D5pESC2eAmHKknmIvGYXu5RiVk8=)
2: E72VdoRs1WH4lPVFyfKcgtxOU8Q.roa (hash: LmX4spgkKMlRcTCE+F8dcGQpsB1FUNFcfYjRwXtYks0=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: l1xu/Ofl61GCBRXFJhNDOZf61EsfOqv5K+PkOTDx4jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:c1:63:91:f6:49:bd:9f:33:7f:59:fc:64:ad:7f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Apr 16 04:00:28 2025 GMT
Not After : Apr 17 04:00:28 2025 GMT
Subject: CN=1b684d456d62f82747554caf08bebb13051634a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:17:ed:88:5f:f3:18:65:34:d5:c8:75:32:
29:b9:5a:e2:a5:5f:94:f7:65:03:a8:d7:cc:5b:a0:
95:b0:9b:29:eb:3e:51:e3:02:53:84:0d:2d:fe:6c:
bd:10:27:63:cd:0d:54:31:f1:3f:72:a0:58:cc:65:
c4:72:f1:96:ed:05:8f:ac:0c:8f:ca:42:f6:8a:80:
22:af:36:0b:5e:1b:ce:23:e7:ad:7f:d6:68:0b:b0:
90:e9:aa:81:47:cb:da:ed:7e:f7:23:33:6d:1d:5c:
dd:90:ec:b3:51:59:81:fe:b2:f7:32:11:65:94:2a:
e0:bf:e8:87:fc:5f:3d:e0:f5:9f:d9:40:0b:48:22:
11:a5:78:a0:51:ad:91:ff:7a:f9:e8:4a:e4:c0:98:
04:88:0d:a6:b6:a7:1c:36:e0:70:f4:d8:3b:74:96:
d3:cb:e4:5f:a0:98:4c:6f:c0:67:e5:55:08:aa:1e:
4f:14:4d:93:7a:20:1d:a7:72:64:ce:c3:81:fb:3e:
04:6e:22:f2:bb:7c:e7:74:ef:8d:c9:15:31:80:81:
4d:93:57:7a:13:cc:36:71:81:cd:54:f3:1c:8c:42:
0b:72:54:91:b1:9e:cf:95:1d:db:29:f6:5d:7c:3a:
6a:72:f6:ed:f5:6c:df:8e:af:cf:7b:07:c3:82:a2:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:68:4D:45:6D:62:F8:27:47:55:4C:AF:08:BE:BB:13:05:16:34:A6
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d2:18:9e:ca:db:ab:4b:45:47:10:21:0f:ea:a3:94:1e:30:
3e:5c:0f:fe:31:ec:a9:aa:8f:fd:78:b3:0f:ae:2f:30:35:4a:
c1:07:2f:57:10:ef:e0:4b:76:89:d5:f8:de:d5:42:b6:28:27:
44:5a:14:69:7c:a9:4d:b3:95:61:90:d6:d3:a8:04:e3:4d:66:
13:b8:6e:5b:cf:2c:10:4e:6b:05:e9:6b:3a:e6:37:6e:e2:43:
d7:03:66:6b:8a:27:24:f4:ee:f8:60:99:bb:73:b5:4d:f9:f3:
d8:a9:7d:1d:e0:44:a7:04:a4:51:37:be:b0:e1:47:dc:c7:41:
a3:49:ad:7a:ff:56:48:e1:7f:cb:d5:dc:92:f7:2c:8f:1d:fc:
34:df:aa:0a:52:cf:4d:58:63:4c:9a:cb:ed:7c:f4:06:c3:0e:
91:ce:e5:98:99:be:c1:7c:96:62:03:8c:bd:e7:d2:01:e2:38:
05:55:25:8e:f7:14:05:73:f3:55:89:ac:ba:a4:19:24:c1:df:
0d:ed:b8:30:ec:c4:10:5b:43:74:ee:b4:9c:d6:99:97:50:66:
07:2d:1e:cc:a4:34:7b:ea:5d:c6:99:3f:ea:25:c8:e2:e8:ba:
3f:42:20:9f:c5:df:00:ff:f4:bc:56:13:59:9d:00:66:ea:8c:
b3:02:84:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:50:26 2025 by rpki-client