Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
File: 82ct8ORpiLvu2b5UENoSo_Fw1pE.mft (raw, json)
Hash identifier: KFsqaXoBdos+5YhZg2ynOI91Rj1/RmBYmPZWB8C7f3k=
Subject key identifier: AB:4E:84:4E:CE:4E:2C:D2:CF:81:13:53:A7:3C:87:28:4D:AA:C9:B2
Authority key identifier: F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
Certificate issuer: /CN=f3672df0e46988bbeed9be5410da12a3f170d691
Certificate serial: 0196613BF8F199FD555A830CD2CA0F3B4A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
Manifest number: 1507
Signing time: Wed 23 Apr 2025 06:00:42 +0000
Manifest this update: Wed 23 Apr 2025 06:00:42 +0000
Manifest next update: Thu 24 Apr 2025 06:00:42 +0000
Files and hashes: 1: 82ct8ORpiLvu2b5UENoSo_Fw1pE.crl (hash: Cl/0tJDwU3jMlJ7530ExHapegpw4b2u5W7CEk3n3fLk=)
2: qF15Fek2B8QG87gZ7XIr-H3O168.roa (hash: 5FnSKwJ5Mf9Vo3kgskFawnnVLq6cD4vo+8P1ZuvgDrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:3b:f8:f1:99:fd:55:5a:83:0c:d2:ca:0f:3b:4a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3672df0e46988bbeed9be5410da12a3f170d691
Validity
Not Before: Apr 23 06:00:42 2025 GMT
Not After : Apr 24 06:00:42 2025 GMT
Subject: CN=ab4e844ece4e2cd2cf811353a73c87284daac9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:3c:13:ba:91:bf:18:ab:bd:a0:3d:25:d7:
f6:87:33:13:fc:6e:13:f8:0d:b8:a6:ac:0f:4b:cb:
19:61:33:f0:ad:05:65:32:4e:42:52:41:81:ce:c0:
73:0e:f8:1c:0f:02:7b:84:81:ee:a4:82:2b:b9:48:
87:66:78:9f:97:17:b0:34:c2:49:34:e5:12:9e:86:
ac:ff:a7:6f:d1:3b:c7:2c:12:aa:72:70:3b:fb:a3:
42:c0:05:19:c3:93:07:98:58:dd:a1:7f:4c:57:28:
a1:86:43:95:7e:4d:7d:96:e8:28:94:64:ba:d0:90:
b4:db:60:77:bb:2a:a6:77:62:9c:02:bb:de:f3:7b:
f0:62:75:20:2e:7a:53:a0:f6:0e:20:a9:c3:6d:9a:
e6:d5:72:a5:a2:ea:31:ee:0d:7f:fb:df:36:d1:17:
f3:62:1e:e8:ee:70:71:3d:bc:8c:88:ce:8b:86:68:
e2:35:37:9c:d8:ae:c4:4f:23:31:3d:fe:86:33:5b:
7f:55:bd:8f:5f:f0:2f:12:10:0c:e9:21:e5:d3:20:
1d:c1:c0:9a:7d:d6:d2:51:b9:1b:9a:a5:af:33:fd:
b6:1b:c0:bc:be:e8:29:89:09:30:e2:ba:ff:81:e3:
d4:57:e6:2c:21:01:ce:8a:59:b6:b5:77:ba:4b:f2:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4E:84:4E:CE:4E:2C:D2:CF:81:13:53:A7:3C:87:28:4D:AA:C9:B2
X509v3 Authority Key Identifier:
keyid:F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:19:92:81:76:e1:ce:31:9c:26:b4:6b:78:e1:f1:6b:c1:c2:
8f:52:07:ff:e0:47:66:21:38:59:95:69:b7:af:0b:ea:40:f3:
ee:93:52:1f:c2:8b:57:6b:e5:b6:2a:b9:9a:a7:74:a7:6e:d7:
ef:de:b8:4c:cf:a3:6f:1b:2c:aa:ea:73:3f:51:fa:c0:ca:60:
94:14:79:34:13:8c:67:f9:32:36:41:a9:10:8b:05:fb:9d:ff:
a4:67:30:d8:4c:ee:d4:36:06:e9:3e:a9:7f:8c:32:ef:cf:b8:
0a:81:f8:ed:ef:e3:16:63:99:16:cf:37:0c:3b:54:ea:1d:86:
cc:06:68:35:fc:1f:a0:f3:9d:30:b2:87:83:a0:14:8c:35:21:
4c:b3:b9:15:ad:e9:7e:71:2b:1f:86:73:b8:9e:20:0f:c1:cd:
86:6b:95:9f:4a:9f:9f:be:c1:c2:fa:0d:76:fc:91:b6:34:bd:
94:95:45:e7:46:0e:99:25:fb:6f:28:35:35:19:ed:ec:f3:dc:
bc:7a:13:b1:cd:7c:44:ca:4f:57:46:65:4f:bc:e5:dd:b2:ef:
01:03:73:ea:12:1a:41:d2:e6:5e:f2:35:03:7d:ec:6b:21:ea:
08:22:f0:1d:63:86:7d:4d:07:4f:15:bc:67:99:51:6d:c3:1e:
06:33:42:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:02:48 2025 by rpki-client