Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: c94hdpGuzugfE0FihJCTYwan38xl8kh9JChvUNI8Mjc=
Subject key identifier: F9:99:D7:94:BF:5D:A4:97:B0:38:73:4E:91:75:CA:0F:C1:FC:02:DA
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 019629A9B47753F87D5A7B10B4A6F3F1B6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 1027
Signing time: Sat 12 Apr 2025 11:01:49 +0000
Manifest this update: Sat 12 Apr 2025 11:01:49 +0000
Manifest next update: Sun 13 Apr 2025 11:01:49 +0000
Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=)
2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=)
3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: vtp1QuO4v9bZeKWVBLOZg/Vfivkd7UsjpLhci9xkqUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 11:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:a9:b4:77:53:f8:7d:5a:7b:10:b4:a6:f3:f1:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Apr 12 11:01:49 2025 GMT
Not After : Apr 13 11:01:49 2025 GMT
Subject: CN=f999d794bf5da497b038734e9175ca0fc1fc02da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:c1:a9:49:ce:2d:a4:79:af:f5:56:aa:0b:
2f:33:c1:99:a7:a8:9d:84:1f:66:12:3a:4a:3d:d0:
4a:61:ca:4d:e5:e1:c2:6b:4b:4e:ce:15:3b:f3:f9:
5c:69:70:50:94:56:d1:3d:04:3b:da:39:83:9c:fe:
63:07:62:b3:f4:4f:b1:b7:cd:a5:c8:9d:89:51:81:
18:b7:05:0b:4b:90:7e:21:60:c6:11:9b:e6:34:c8:
ac:5d:23:9a:17:9c:c1:b9:cc:f6:67:d2:64:bb:6a:
d6:72:fc:97:42:28:4c:40:60:1d:55:7f:2b:30:9b:
69:f4:3d:24:38:0b:bf:bc:e1:3b:dc:a2:d4:7b:6f:
88:09:ea:64:78:2f:98:a8:09:a0:61:39:eb:6b:d1:
85:f8:53:7e:89:e6:ef:a9:be:27:87:7a:09:c3:1f:
a0:0f:42:62:16:cd:2e:e9:39:11:3a:a3:49:a8:f9:
e0:78:3b:a8:06:2c:0e:a4:b3:1b:75:e4:3b:cc:fc:
b2:f0:39:d5:8b:a2:8c:95:15:7e:e7:88:36:76:c6:
d6:49:25:eb:0c:d8:ab:f2:06:97:38:85:1d:76:ec:
cc:5a:52:99:8f:f6:59:a1:7d:19:a4:d8:84:83:b9:
da:6d:9a:ce:79:dd:24:f3:25:97:bd:b0:56:28:70:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:99:D7:94:BF:5D:A4:97:B0:38:73:4E:91:75:CA:0F:C1:FC:02:DA
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7a:46:b6:f0:f6:bd:a0:66:3c:cc:f6:d3:70:d6:8b:34:e3:
b6:34:75:30:ef:a2:7b:b0:ba:d9:13:a1:85:ea:ef:d9:a8:b3:
8b:c3:94:a8:2b:0a:a6:ef:74:7b:3a:4f:ba:08:b4:ce:7d:70:
ae:2a:fa:b6:d3:07:ae:03:fb:40:91:01:53:80:fa:bf:c2:3c:
77:93:27:68:e9:92:92:af:c3:61:19:62:6c:a2:93:4b:cd:fe:
e3:6e:1e:69:a6:3c:0c:b2:7a:dd:6a:1f:ef:2d:84:68:9f:03:
60:4d:6d:f7:c6:2d:00:7f:bb:2e:a6:f9:69:4f:9c:83:89:e6:
a3:18:95:24:a7:30:c0:c0:cc:03:df:3f:08:35:16:f5:4c:f9:
19:9e:de:10:6c:eb:6a:ec:1a:ff:69:e7:d0:88:d5:3e:cf:39:
67:4b:5b:36:1f:da:2b:85:64:58:08:62:75:f4:c0:6d:37:d3:
b7:6c:a1:59:ca:ad:3c:50:15:6c:38:a8:6b:bb:44:0e:6b:7c:
82:e2:37:71:d0:b7:72:df:89:aa:bb:cb:a0:86:fa:d1:fb:ee:
2e:fb:8a:59:55:37:70:2e:6c:73:48:c2:de:cc:8c:e5:6f:54:
d8:f9:a1:b4:fb:ec:65:e0:70:9b:07:0b:89:85:c1:14:fc:82:
cc:54:cb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:50:31 2025 by rpki-client