Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
File: F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json)
Hash identifier: 7l7UEg7cD6gpYtlSOb8PtKLxk3ZGv7B5Dc1TPtOD/pc=
Subject key identifier: 0F:60:7E:3A:4A:41:DC:E9:2C:36:DA:DC:02:76:D6:00:49:72:4E:B5
Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Certificate issuer: /CN=17e568417f59a21129fb2487f5e57bc171631f7b
Certificate serial: 0196575CA2612CB4ADC096646B8FC10B45BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 08:00:10 +0000
Manifest this update: Mon 21 Apr 2025 08:00:10 +0000
Manifest next update: Tue 22 Apr 2025 08:00:10 +0000
Files and hashes: 1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: gDfZRnEZbW+ie16sx67SHHh0MTLKpnV4UmaZHf4lT8o=)
2: MrFlnTciZWg6d5AqneKivrwpXHY.roa (hash: FLxls8UmKZo8IiJFx4AFIzBNESyxcnNxQs1Lj9129+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:a2:61:2c:b4:ad:c0:96:64:6b:8f:c1:0b:45:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b
Validity
Not Before: Apr 21 08:00:10 2025 GMT
Not After : Apr 22 08:00:10 2025 GMT
Subject: CN=0f607e3a4a41dce92c36dadc0276d60049724eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:fe:7c:50:c0:67:4a:2b:b7:95:6e:db:df:
46:ac:74:4d:03:a5:6a:b0:53:fe:cd:ee:2f:63:16:
ef:4c:2b:3d:b5:fa:16:79:9f:39:cc:64:80:c8:66:
95:6c:ec:6f:62:a2:97:8c:f7:24:53:d7:60:86:af:
43:12:87:5f:14:75:db:43:a7:dd:0e:88:f5:fe:f5:
e9:9a:a2:15:9e:41:7a:19:10:81:2f:8a:ee:8e:a5:
65:bf:82:8c:b7:6d:94:67:74:c1:d6:78:81:e7:fe:
4f:28:a7:64:42:d5:66:01:3f:36:b6:c5:bc:23:a7:
ff:08:c0:0d:d7:6c:d3:e1:8d:7a:25:65:0d:8f:90:
35:d8:fb:03:2d:20:87:a6:0c:81:3d:84:89:4c:97:
ed:1e:f8:0b:67:8e:cf:b1:95:fb:28:f8:2e:de:7f:
a0:5b:f7:6b:04:a6:47:5f:b0:5d:fc:b8:63:ef:9d:
7b:a0:f9:5d:32:34:90:18:09:42:f1:ef:10:df:60:
28:4b:d5:76:98:66:0d:24:b3:5a:99:69:b3:03:c3:
6f:33:ff:df:45:83:05:0a:f7:0b:a7:44:c9:d0:50:
57:9e:b7:00:a7:89:04:76:df:9e:2e:31:f1:7c:fb:
02:c9:2d:45:31:6d:50:6e:c1:bc:71:2a:82:30:72:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:60:7E:3A:4A:41:DC:E9:2C:36:DA:DC:02:76:D6:00:49:72:4E:B5
X509v3 Authority Key Identifier:
keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:91:86:d1:0f:fc:4a:48:e6:e7:bb:85:4f:b0:e3:28:c8:f1:
1a:e3:bc:ba:f7:98:33:b6:b1:e9:25:b6:b0:78:0d:c4:bc:96:
47:67:ae:a3:02:0b:43:1a:c5:24:c4:9c:bc:81:d6:cf:92:d0:
a9:70:5a:5d:64:af:c1:2e:eb:04:d3:91:42:45:97:cb:16:2a:
16:a2:57:d0:e0:3e:72:97:7b:97:ff:23:c9:53:49:f6:0b:05:
43:e5:1d:3c:30:3a:94:9c:95:0c:8f:35:d2:95:c3:3c:12:45:
65:19:96:34:9d:d2:19:b0:72:cd:63:37:0f:37:ad:f2:90:2b:
7d:50:3b:ff:56:08:6f:8c:f4:b3:0c:e9:cb:13:f4:00:cc:e6:
7a:f7:4a:64:62:19:d4:77:29:93:35:db:14:bb:74:32:c2:24:
8f:2d:48:e7:8a:26:ee:19:0c:8d:ce:02:9b:bb:a9:8f:b7:b8:
e7:0b:11:21:77:85:1a:69:35:a4:7b:03:22:ec:2f:d2:a5:97:
ed:0f:6f:7d:d4:05:a8:53:b2:6f:7a:9a:e5:f8:40:dc:9d:e0:
d0:92:ce:dc:04:fc:4c:ce:5e:a6:be:4e:91:26:ff:6a:23:02:
50:90:de:20:8d:96:c7:3f:24:c1:f2:95:ae:cc:94:48:44:c0:
d2:70:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:47 2025 by rpki-client