Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier: S4LVrcUM/Q2e0bxIgAK8CdK3K/fMup7dCrcOD7riOCw=
Subject key identifier: 07:14:A0:42:0B:9D:59:21:FE:5C:BC:E9:6A:46:8E:35:5F:FA:17:9B
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial: 019650B623E37AA5CCFE916BB78139E1AD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 01:00:36 +0000
Manifest this update: Sun 20 Apr 2025 01:00:36 +0000
Manifest next update: Mon 21 Apr 2025 01:00:36 +0000
Files and hashes: 1: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: 52tS+R8/pfymIcwddPr4WMK9FO6m9k0CEGOXFc/jMOw=)
2: pA-X0SaB0DP88NQK6S16CRpbIws.roa (hash: /lnCuMiAMJ5HoCTByF87eDA744xmzbWJMwOSkdeAHzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:23:e3:7a:a5:cc:fe:91:6b:b7:81:39:e1:ad:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Validity
Not Before: Apr 20 01:00:36 2025 GMT
Not After : Apr 21 01:00:36 2025 GMT
Subject: CN=0714a0420b9d5921fe5cbce96a468e355ffa179b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:8f:43:b2:31:37:fe:cc:b8:f8:9c:b2:08:
83:50:44:15:67:46:2c:80:6d:54:b3:40:c2:1c:e4:
76:18:61:3c:1b:19:1c:bf:0b:e9:40:c2:59:9e:df:
46:2d:fc:dc:3a:41:b9:25:06:06:42:57:5b:a4:30:
9d:76:c7:62:85:ab:7a:25:28:3c:b5:dc:ff:af:65:
da:78:f0:7d:c2:f2:e1:0c:0b:12:2e:51:68:7f:34:
81:f8:8e:7e:c9:20:ec:78:26:39:11:cf:81:2b:89:
40:4a:a3:ca:b1:1a:7d:dc:c5:b8:d1:f1:2a:39:f7:
df:b6:be:46:ab:a2:54:23:5c:2b:44:3f:11:30:e0:
2b:f0:eb:bb:b1:40:fc:4d:cf:d0:3d:04:ea:e1:c7:
d0:80:78:19:c5:fe:ac:60:42:01:2f:39:bf:22:20:
b7:ef:dc:0b:5a:9c:62:b6:01:95:ab:ba:6c:bb:48:
f5:c3:80:80:ca:8a:ea:e1:2c:f3:d4:48:90:db:3e:
77:af:94:52:b5:62:a2:df:d1:3f:c6:d9:96:c4:34:
f8:d0:c0:d0:27:1d:d9:31:4e:99:b9:d5:6a:86:27:
f1:f0:21:5c:8e:32:f9:8d:05:83:42:d1:f4:f9:91:
30:73:42:06:bb:10:b9:8c:c9:b8:a6:3a:0b:73:50:
41:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:14:A0:42:0B:9D:59:21:FE:5C:BC:E9:6A:46:8E:35:5F:FA:17:9B
X509v3 Authority Key Identifier:
keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:27:31:ff:cc:c2:7c:b4:5b:f2:46:a0:29:de:bf:74:2a:2a:
0c:36:e8:99:6f:5a:41:29:20:fa:d1:b3:ef:cb:de:9d:aa:90:
14:a8:9c:da:7a:df:81:7f:9b:51:58:db:4c:65:74:cd:30:30:
b8:f5:96:6a:fa:42:5a:d8:eb:7f:15:b7:0a:f1:eb:f4:e8:39:
40:9b:84:39:25:e9:06:35:8a:ca:68:ad:77:26:7b:62:5c:b4:
1d:e8:90:32:99:a5:b7:c6:21:1a:5a:74:87:aa:fa:e2:b8:a2:
a3:99:1e:b5:99:c6:1d:69:a0:05:1b:d9:1f:5e:53:33:27:f3:
21:dd:83:87:b1:f9:f2:b3:52:35:8f:5f:64:43:e1:76:f5:20:
e5:d9:c8:15:76:90:0f:42:d3:73:5e:50:20:8e:28:f0:5e:d8:
5c:04:05:14:36:55:21:d0:c1:f8:f7:9c:9e:32:1e:ff:4d:6d:
a1:33:86:9a:c3:50:71:50:60:1b:66:24:ff:3e:fa:ee:b4:be:
d2:c6:88:83:4b:85:fb:0e:5a:e6:cc:9d:ef:cd:e0:ae:3e:9a:
e1:90:03:80:d7:20:ec:6a:40:d8:70:0f:ce:5d:78:c6:e8:8b:
0f:f1:47:85:ab:94:d4:fc:3a:94:54:fe:45:80:b9:a6:c3:08:
2d:6a:6d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:11:07 2025 by rpki-client