Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
File: _i4izBWFntSgeEv9CFhLPI-yn5o.mft (raw, json)
Hash identifier: ezkTdrXT6k45gcg1KuSNSmaYTaztMo7//5Fz/JElQAY=
Subject key identifier: 5A:A6:31:A6:E8:74:AA:01:DB:B1:48:5A:D0:86:B4:50:8F:BE:82:FA
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 01964A7CBD605965283FE8AFCA015427372C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
Manifest number: 0B2C
Signing time: Fri 18 Apr 2025 20:00:10 +0000
Manifest this update: Fri 18 Apr 2025 20:00:10 +0000
Manifest next update: Sat 19 Apr 2025 20:00:10 +0000
Files and hashes: 1: 3GJal5BlkwMpqI0aUPXNpdisEd0.roa (hash: N1IIZPB15h65xX22ALfpxQG++svVYLQW4hUhjHJNwow=)
2: _i4izBWFntSgeEv9CFhLPI-yn5o.crl (hash: zxtLdt6JX+21Zce1sXZJFNWWdLaIw1ncAEvZFpwGg40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:bd:60:59:65:28:3f:e8:af:ca:01:54:27:37:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Apr 18 20:00:10 2025 GMT
Not After : Apr 19 20:00:10 2025 GMT
Subject: CN=5aa631a6e874aa01dbb1485ad086b4508fbe82fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:89:2a:6e:29:39:97:8b:22:a3:de:c5:59:
ff:e0:a5:89:a7:15:06:8c:7d:3b:fe:64:37:8d:9f:
51:78:ab:5d:9e:45:fd:e6:24:62:e5:c8:d5:51:2e:
a7:3d:db:0f:b6:2a:a0:7a:a6:55:ee:30:24:e5:1e:
6f:a5:b5:ff:f4:6a:9f:0b:d0:87:cd:8b:aa:1e:06:
07:74:3d:80:1b:23:5c:4e:fa:a0:a3:67:ea:28:28:
98:42:f3:c4:f0:98:6b:0c:46:d5:96:d7:e0:b2:46:
ee:87:be:75:45:f6:43:fd:2a:b3:50:df:f1:c1:70:
17:10:a4:6d:33:b8:d4:84:ea:f3:4f:87:90:c6:60:
0c:a8:09:50:e5:f5:7a:b6:3e:9b:07:62:50:f4:fc:
36:5a:8f:f0:de:2c:7a:37:ca:31:6f:78:52:2a:71:
70:a0:e7:14:0a:32:9f:5c:5e:3e:2b:95:51:29:32:
c2:70:e3:4d:33:c8:62:e6:fa:d3:bb:70:52:8c:2d:
60:3b:bf:b7:fe:28:5b:4f:d7:8b:5c:61:41:7d:13:
6e:70:d7:5c:17:14:9d:0a:05:17:8f:31:4b:d0:e5:
57:55:85:9a:03:05:fe:71:07:4c:32:7c:79:a0:3d:
3b:67:70:22:1f:0a:ee:42:b4:68:98:15:3c:2c:fd:
7f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A6:31:A6:E8:74:AA:01:DB:B1:48:5A:D0:86:B4:50:8F:BE:82:FA
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f3:c9:d1:77:10:99:f0:e9:85:64:4a:84:e5:e7:b0:82:c5:
ee:69:7b:e2:43:00:05:e2:c5:da:a1:16:3e:1e:fc:4b:b6:f5:
f0:57:07:c8:5e:9a:67:78:70:09:04:3d:d0:0c:ad:81:88:89:
eb:53:18:96:df:f1:02:8a:9a:78:ca:5c:29:db:59:8d:2d:7e:
49:36:50:a8:18:b7:61:9a:58:77:e1:d1:94:cd:eb:36:d9:83:
d2:68:e0:ad:67:57:85:f1:dd:b5:c7:a4:95:67:55:1e:cc:63:
1f:8a:94:13:42:03:74:7b:4c:a2:ed:b5:45:64:63:4c:4a:de:
cf:85:32:57:9f:45:5d:20:30:40:f5:d7:8b:2c:86:ec:39:86:
a8:c4:e9:d1:ff:72:5b:1c:cb:92:fa:63:f2:3f:14:d6:cc:09:
f3:2c:ec:35:ea:ac:4e:08:cd:ff:1c:d1:5f:c7:cf:a5:80:8e:
34:99:4c:01:05:44:b9:ce:94:ba:7c:e3:f0:dc:e3:be:35:29:
f2:d7:af:52:35:08:98:94:16:73:be:c1:c8:22:1b:8c:7d:57:
c7:27:ce:04:0a:43:4d:93:88:0c:88:b0:a7:f7:d6:50:98:97:
f2:0b:d4:a7:19:63:f4:71:72:eb:9a:7e:d4:c4:9f:f6:ba:d0:
02:5e:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:33:24 2025 by rpki-client