Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
File: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft (raw, json)
Hash identifier: j/FnzRSZs1oH1AQD8eeHudDh2PREUDH5FhjnvDaYE0k=
Subject key identifier: C6:15:97:F4:30:33:CD:43:3C:BA:63:74:B1:8F:26:CC:A9:F8:13:F0
Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284
Certificate serial: 019647452D4F0DD1C0D94883DF0D7D24BAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
Manifest number: 10E8
Signing time: Fri 18 Apr 2025 05:00:38 +0000
Manifest this update: Fri 18 Apr 2025 05:00:38 +0000
Manifest next update: Sat 19 Apr 2025 05:00:38 +0000
Files and hashes: 1: GA0RPX0Ob2MlFQ2Rid7QsDPJvlM.roa (hash: 3tIOpxV3dFmPnHX5pAbw7q08MNAptrdhnPG7hgsjWKs=)
2: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl (hash: g4VTUNVQofwuRkgL0ernNOUdxvOK8bgVRyc48QKRgvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:45:2d:4f:0d:d1:c0:d9:48:83:df:0d:7d:24:ba:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284
Validity
Not Before: Apr 18 05:00:38 2025 GMT
Not After : Apr 19 05:00:38 2025 GMT
Subject: CN=c61597f43033cd433cba6374b18f26cca9f813f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:57:02:a2:58:cd:a9:61:f2:b2:50:6d:cd:
13:c4:5c:26:ac:92:a5:06:d4:90:08:2e:be:45:67:
99:3e:b1:e8:28:37:44:38:b2:5e:56:4e:ef:11:3c:
d0:44:93:38:7e:9e:d1:b5:7b:27:05:4d:5e:b3:09:
d7:81:d2:77:7d:54:71:1b:b2:62:53:6e:73:5d:b0:
34:d2:4d:a7:16:5f:c4:7d:6e:ca:81:2c:d8:1e:4b:
08:e2:b5:53:dc:90:a3:da:e3:84:e4:0c:44:90:e5:
26:dc:f0:fc:31:73:b1:9f:04:4e:06:25:e0:50:7b:
89:1f:d1:1d:fb:20:ec:44:c4:04:0f:e6:1a:5d:7b:
7e:84:f1:8d:09:a2:b5:84:8f:6d:22:c7:df:57:a7:
80:87:3d:1b:3d:d4:f1:64:66:9b:fd:14:a7:9d:f4:
51:e5:d1:01:2a:a0:44:c1:49:0f:ff:6f:85:ea:d1:
ce:3d:12:81:a5:fe:e2:d6:d8:d9:3e:ca:a8:c9:dd:
e1:93:1c:d6:cf:e4:92:ab:35:ee:7c:e2:e5:38:86:
52:92:31:84:16:5e:7d:85:fb:07:41:0f:8d:0f:1c:
61:73:6b:4b:76:06:d3:55:3f:2c:92:2f:54:e9:a8:
27:a7:0d:f3:b8:0e:8f:ff:81:0c:98:ad:e9:b0:45:
a3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:15:97:F4:30:33:CD:43:3C:BA:63:74:B1:8F:26:CC:A9:F8:13:F0
X509v3 Authority Key Identifier:
keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e4:40:82:00:6d:82:09:29:bb:ca:a0:7e:c0:f5:98:da:ed:
e3:c5:6b:fa:20:1c:dd:62:bc:54:8f:75:3f:53:e2:70:2e:5e:
5d:8f:8a:72:7d:35:8e:09:ee:da:46:99:64:c0:d7:20:1f:ae:
18:5a:fb:66:93:8d:49:d9:b2:e6:3b:c7:de:1c:05:a1:61:ef:
b8:42:d7:1b:37:95:6d:20:37:13:2a:bc:3f:53:9e:88:8e:99:
f2:bd:7c:ee:f6:86:be:b8:f4:a9:9a:7e:2d:f6:11:2d:b9:54:
56:cc:fd:00:35:ab:30:9f:20:f9:55:da:f3:93:b8:db:d6:3e:
90:32:dc:f3:00:d5:b8:23:d2:d0:62:cf:33:4d:e8:92:23:2a:
92:ef:52:23:07:57:b5:97:a8:e9:72:d6:e8:d9:6e:9a:6c:8f:
c4:f2:e8:46:65:11:be:b0:05:02:ed:2a:e1:d3:f3:a5:14:8f:
85:8a:4c:6f:d9:f4:b9:cd:4c:3b:d2:0c:1e:d7:f2:5e:81:83:
93:3e:f3:be:ad:5e:85:01:e6:a1:4b:57:21:ef:a8:94:18:e5:
b8:f5:83:80:fe:4f:14:ad:d3:52:31:fa:9b:fc:e7:5d:e0:5a:
f8:13:c6:5c:51:64:e6:b1:4e:0f:0c:1e:ed:63:61:97:99:e2:
89:8d:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:26 2025 by rpki-client