Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: Mcw6S4c/QWj8FUhKb86aIoICVXsMOjLsT87pys9Atks=
Subject key identifier: F5:9F:ED:2F:20:F3:DE:89:76:67:C1:69:ED:24:06:E1:59:4B:DF:9C
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 0196496A58C264EF3639FEDB4819754E0DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 15:00:28 +0000
Manifest this update: Fri 18 Apr 2025 15:00:28 +0000
Manifest next update: Sat 19 Apr 2025 15:00:28 +0000
Files and hashes: 1: M_ZucCsuJb1Fkv6phLwqAkn6J0Q.roa (hash: f0NnZS14FEEVK+otZH9sTWdHvzqdq6zBgg0/lm/taxs=)
2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: ZBEmMVkAI8/pbtyFXDdSfBCzIURxMrSc51B3xckNyQg=)
3: kNpqx0tZlqJV-cV06kVoinEAEvE.roa (hash: yXJYbGR5++qBsVQrRHL4bHSCZiui648QCWfzX8PBFak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:6a:58:c2:64:ef:36:39:fe:db:48:19:75:4e:0d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Apr 18 15:00:28 2025 GMT
Not After : Apr 19 15:00:28 2025 GMT
Subject: CN=f59fed2f20f3de897667c169ed2406e1594bdf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:7e:27:d8:25:c3:90:87:4a:8d:4a:eb:fc:
eb:87:92:af:a7:92:ff:82:6d:51:30:5f:c8:fe:ef:
c7:b7:7e:d9:90:ba:ef:2b:d2:39:0d:50:c5:83:4f:
8c:ff:50:29:89:29:81:99:8f:a0:89:9a:ec:d1:9a:
73:3f:65:c1:b4:3f:1b:c4:cd:4b:65:a7:06:5b:26:
a8:cc:42:d0:f9:ee:e3:0b:3a:64:83:74:a3:e9:28:
78:f8:d4:3c:21:5e:3e:44:71:d0:8b:3c:fd:ea:87:
21:ec:78:54:37:95:10:8d:d5:84:09:16:63:0b:bb:
bc:50:19:ae:42:ad:28:b0:33:a0:be:cd:fc:fd:09:
58:f5:92:91:b7:bb:e3:a8:63:98:86:4f:dd:1f:34:
b8:31:47:e3:9f:53:f1:70:9e:1f:f1:2d:73:6c:b1:
2c:81:e3:07:56:1e:73:2c:73:8c:a4:84:b8:e1:7c:
c0:37:d2:7d:fc:21:60:0c:9d:9e:53:ab:b9:2d:40:
14:5c:b5:61:26:f5:9d:f6:46:1b:ca:af:3b:82:9b:
48:83:35:1e:75:cf:61:bc:01:61:64:2b:fc:bd:64:
1c:34:26:85:12:2d:8c:d4:03:69:de:22:e6:32:47:
5e:64:fb:0c:63:7c:0a:1f:16:10:73:d6:92:aa:df:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9F:ED:2F:20:F3:DE:89:76:67:C1:69:ED:24:06:E1:59:4B:DF:9C
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:de:b1:76:a6:8c:0a:67:19:d0:e3:4d:89:42:b3:72:c8:04:
ea:01:36:e2:d0:45:83:3e:ef:90:f0:d8:24:a3:f1:96:8a:ee:
82:fd:2b:18:a6:c3:e6:85:f0:9e:26:66:ae:67:06:d1:3e:60:
b7:40:30:9a:4d:e7:18:46:1e:50:30:06:51:c1:a0:dd:a4:c6:
1c:6f:71:ae:99:25:c2:0e:79:40:54:9d:a4:5b:ba:21:2c:3e:
3d:35:89:fe:11:5b:98:46:d6:06:ad:9f:6e:ae:c2:c2:f5:14:
84:c7:b7:f8:e5:0c:4b:ea:c1:e8:cd:5b:5d:85:90:f6:1f:ad:
d9:df:65:35:64:63:1b:9b:1c:99:02:9a:10:7e:c6:b0:3b:5f:
8e:51:51:2b:22:5d:17:08:36:e0:b7:5c:2c:b6:35:09:34:21:
94:8e:91:04:4c:84:86:c2:89:c0:e2:73:53:99:52:41:8c:08:
14:75:ac:9b:f8:c5:85:f9:c1:91:14:d0:b6:2d:55:44:4b:e7:
58:f2:e2:b1:b7:e7:e1:6d:d8:81:b9:cb:79:b0:56:c4:17:58:
8f:95:63:82:ed:95:04:13:8b:d7:82:0d:4b:06:66:dd:d0:d6:
19:2c:bf:2f:bb:d0:1e:7c:5a:5c:51:4b:48:07:93:3a:e7:81:
c3:c1:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:05:09 2025 by rpki-client