Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
File: inFQB06m_dHoTdleCwaDZAfpQRs.mft (raw, json)
Hash identifier: N+1jGnEAr3AliWiIgxDOti8K5XYsd2gHgM03khE77gc=
Subject key identifier: 63:1A:67:2D:CA:36:73:80:EB:9A:C1:02:F5:E2:D6:04:AE:4A:91:9B
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 01964D7E5B810F12AE161E66014625F5925D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
Manifest number: 0631
Signing time: Sat 19 Apr 2025 10:00:48 +0000
Manifest this update: Sat 19 Apr 2025 10:00:48 +0000
Manifest next update: Sun 20 Apr 2025 10:00:48 +0000
Files and hashes: 1: Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa (hash: rz8wrfdxxW9MCDam/a85dhszclSCd3rA7daMzdL/WN0=)
2: inFQB06m_dHoTdleCwaDZAfpQRs.crl (hash: dy9nnYeXf1YI+xumzsm/mAjHMI4JIMWaGTYQvy0imu0=)
3: swlD7NexiqeUhjpippjXSrPfBRU.roa (hash: a8BMuK2ewbTVEG8qjtK3NV+IeXc5gmKfF4oUMOgajuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:5b:81:0f:12:ae:16:1e:66:01:46:25:f5:92:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Apr 19 10:00:48 2025 GMT
Not After : Apr 20 10:00:48 2025 GMT
Subject: CN=631a672dca367380eb9ac102f5e2d604ae4a919b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:62:06:2b:62:0d:a0:4e:50:42:e2:4f:b1:
95:36:f1:25:9e:70:88:f2:9c:93:d0:5e:c4:ba:3e:
e0:fc:5c:ec:e0:7e:df:75:a7:88:5f:31:2a:ab:8d:
be:f3:70:8d:3b:a4:ce:b6:33:aa:88:89:99:d7:34:
1d:ae:28:60:06:66:72:63:80:a9:ff:1c:6e:a5:26:
d8:85:1a:22:d3:f6:ee:50:ae:af:7e:71:2a:8b:60:
1f:ff:8b:42:99:85:d2:b6:b6:03:69:97:13:e4:d2:
e4:46:cc:49:0a:15:8e:5e:24:e4:d4:b5:43:88:65:
a0:e3:16:ec:eb:b4:19:1f:3d:6b:e6:34:10:cf:05:
78:6d:75:b9:be:e0:06:46:44:cf:a5:13:f6:03:e9:
c1:45:1e:58:d6:c6:90:b2:b8:f2:33:d8:6e:e6:3c:
3f:ba:28:3e:f6:dd:2d:ac:b8:65:20:25:d0:4f:de:
4e:9d:c2:e8:e0:38:ac:a1:91:27:04:f0:1c:b1:56:
69:01:c8:37:71:b0:86:9f:cb:8a:7b:6b:18:6f:60:
a4:92:9b:2d:22:89:82:7b:6a:6d:ae:f3:dc:3b:f3:
e3:b9:ef:12:89:ed:79:58:be:ae:b2:45:1b:d8:3b:
f6:72:f3:05:26:76:a6:1e:e6:71:06:89:a0:89:c7:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1A:67:2D:CA:36:73:80:EB:9A:C1:02:F5:E2:D6:04:AE:4A:91:9B
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b3:2f:13:bf:1e:3d:d4:dc:e9:9d:1e:a8:b8:2c:60:8b:19:
6b:f1:e9:09:79:ba:65:64:8e:c8:c3:0b:f7:c9:ae:31:f8:70:
f7:2d:84:d6:fd:97:40:5e:23:a0:32:64:00:18:7d:99:76:f5:
70:13:d1:ff:ab:d6:46:98:e5:e0:ff:1a:bb:ca:17:fe:a0:12:
14:17:2c:b6:b5:fd:b0:06:70:71:88:52:54:e8:34:2b:cc:bd:
a8:69:9f:85:a0:a0:33:e4:c4:c5:de:dd:2f:2d:f7:91:08:6d:
59:7f:39:46:ae:8f:b2:9a:77:cb:9d:80:fc:03:78:2e:cc:b7:
0f:a6:cd:25:08:97:4a:7d:57:07:e4:bb:fc:13:86:cd:f4:33:
d7:2c:a9:c2:00:47:fb:f5:02:07:6a:cc:56:61:e8:e9:17:17:
94:b8:1c:b0:c3:aa:49:d7:a1:b4:b4:13:ac:ca:d5:c6:22:42:
cc:a5:0e:3f:72:3c:86:78:b6:e1:ba:33:f5:b4:5b:27:d6:49:
05:7c:0b:56:13:a3:4a:1e:31:b6:a2:83:a4:e1:d3:79:9e:0b:
b4:9c:66:54:0b:6b:1b:35:26:6c:2d:9c:9f:07:92:be:6c:ce:
a6:ac:1d:0c:42:e5:fc:5e:c9:61:42:76:fd:a6:5c:86:ee:ee:
ea:85:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:29 2025 by rpki-client