Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: N3IQG7JVC2HSBtV0J/dkKa8cz6ZzfMhjDOCqIzAxYQY=
Subject key identifier: E7:10:13:5A:E3:D6:DE:9D:0E:A3:58:2C:DF:61:6F:FE:AC:78:62:F7
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 0196568124F366EC2655C4A50A9C79A38974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 04:00:26 +0000
Manifest this update: Mon 21 Apr 2025 04:00:26 +0000
Manifest next update: Tue 22 Apr 2025 04:00:26 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: +rGMdx3ezcFEZxM3ZVRvHKSj9KlKLDTuZF2PImQ3cbs=)
2: NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa (hash: Y5m51ite4A5LbDxUmGbQiHLBy8E1baqu+BrJUl8RNq4=)
3: VhwEbxUgJOza67qJ4K_i1Uqq3ms.roa (hash: aCXGgi5AYKAi5vfsurTRm09inwo+Mr6Oxc+TCBbgaZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:24:f3:66:ec:26:55:c4:a5:0a:9c:79:a3:89:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Apr 21 04:00:26 2025 GMT
Not After : Apr 22 04:00:26 2025 GMT
Subject: CN=e710135ae3d6de9d0ea3582cdf616ffeac7862f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:6d:aa:04:34:37:ce:14:de:a6:13:a7:c5:
1a:b7:a1:47:0f:d9:f1:70:a6:e9:32:bf:89:fd:2b:
29:79:a8:f5:c0:ee:10:91:cd:94:74:7e:35:22:55:
6d:cc:8a:1b:f5:c5:9c:81:90:fe:69:e2:2b:14:87:
76:5d:ce:70:a7:98:80:76:e9:bb:a4:87:a8:99:94:
22:ea:37:26:b1:47:04:a7:79:4a:a9:a2:b2:12:97:
f2:b1:45:6c:44:f8:ad:80:8e:5e:d9:7f:9f:a9:b4:
44:c1:1a:b7:ef:b2:5a:5a:6d:49:f7:92:09:02:f1:
68:0e:df:58:b3:12:79:07:c9:f1:84:58:76:e9:86:
51:22:a6:57:74:f0:cb:9f:10:94:93:de:08:84:b1:
6f:4d:85:31:a8:dd:67:13:25:66:9a:09:98:db:00:
a8:35:5a:00:45:b5:45:2b:2a:3d:90:3d:1c:ec:f8:
45:97:dc:9f:a5:42:54:93:d4:7b:0d:99:63:3c:59:
bf:ac:ab:69:4e:d1:ef:cf:c7:99:e4:f0:a8:b1:31:
f4:8c:21:20:31:bc:42:07:17:9e:2c:ea:4e:76:52:
a2:2f:b3:77:5d:1a:4d:fc:a0:da:66:f1:c5:ea:5b:
86:a6:1e:42:8d:21:48:d8:22:78:72:f8:85:b7:5f:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:10:13:5A:E3:D6:DE:9D:0E:A3:58:2C:DF:61:6F:FE:AC:78:62:F7
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:93:40:92:7c:e4:b6:80:66:9a:b6:2e:fb:ee:15:15:f3:c3:
33:c9:2d:75:f7:66:d2:2e:6d:b7:8c:03:8e:1f:31:0d:43:ec:
0c:89:35:58:b4:2d:99:8f:c1:e2:b3:30:fb:3d:8f:e7:89:27:
6d:16:52:ce:90:70:7d:2c:64:0e:ec:9f:bc:1c:1b:c2:ab:9e:
d9:4a:32:3a:1c:59:be:68:15:c8:c5:5f:5c:b3:fd:83:56:1f:
51:25:ff:08:ac:ca:a1:3d:29:12:20:62:f7:4b:a9:b6:4e:b0:
c3:96:84:d6:2b:76:86:15:fa:02:c3:0e:d8:6d:29:8a:da:b5:
f0:92:6f:05:5c:49:09:ee:a0:9d:87:ba:88:03:b7:5d:96:85:
16:16:55:46:79:c2:6a:02:ab:85:19:f7:1e:26:5d:d2:d3:78:
b0:61:fb:3a:7d:82:8a:92:39:51:22:e2:f9:4d:ec:c6:95:1c:
ee:d8:59:ca:ef:bb:1e:e0:9d:0f:30:ee:41:4e:d1:3f:58:26:
bd:5e:05:f0:5c:da:57:da:09:33:1b:4a:fd:51:fb:da:fb:a2:
1b:df:c3:f8:7e:cc:c8:99:6c:4d:98:a9:7f:27:48:b5:83:9a:
da:21:30:49:22:89:e6:1b:7a:d5:12:84:83:54:61:b1:b2:57:
ae:ba:49:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:43:02 2025 by rpki-client