Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: CnqfagMwmiWK3/bqxtKHeyuvg/Ggp0rYFfppV9+GZBE=
Subject key identifier: 5F:8B:38:54:00:BF:24:D0:9A:46:BC:90:67:B3:0F:F6:F2:E9:16:90
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 01974D0D8EC63C7D41FE178B834581B95688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 01:00:23 +0000
Manifest this update: Sun 08 Jun 2025 01:00:23 +0000
Manifest next update: Mon 09 Jun 2025 01:00:23 +0000
Files and hashes: 1: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: +HcyfXGTAYjiPcCnIyP872Skue76O219fFemgLujYIg=)
2: UipKreH4zZ-JKObDVFkMEdQTy8E.roa (hash: 2lFb7AbIOkpByp+mzj8V6olwzUC3cjME2INFe+siQFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:8e:c6:3c:7d:41:fe:17:8b:83:45:81:b9:56:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Jun 8 01:00:23 2025 GMT
Not After : Jun 9 01:00:23 2025 GMT
Subject: CN=5f8b385400bf24d09a46bc9067b30ff6f2e91690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:11:3d:d0:e8:ae:51:ad:e0:ad:a8:6a:c6:
f8:32:ce:18:08:bc:e9:4a:7e:07:0f:04:15:79:d8:
d1:24:80:f5:d0:7a:ce:ed:d5:d3:3b:b8:1f:77:90:
5a:fe:b7:af:19:c9:ec:2e:de:85:7e:d3:2d:b7:c4:
89:aa:d7:4b:86:52:46:7d:a6:59:c3:6d:13:8d:32:
76:05:5d:88:4c:4a:37:48:de:83:79:60:82:15:8e:
2a:c6:57:58:77:6f:31:f9:6d:a7:af:a1:c4:56:f4:
98:8d:a7:85:af:fe:9e:a0:f3:e6:a1:1b:39:09:ca:
ec:48:01:74:de:6d:4c:9a:e1:79:3e:4c:0d:ca:13:
32:35:3b:f1:4c:23:7f:63:41:5a:c6:ba:88:66:c7:
1e:cc:fc:ac:3c:2a:2a:ab:2b:54:94:58:f0:90:5b:
a7:69:70:54:f5:d4:3b:b7:8a:9e:ab:61:0b:74:85:
75:2b:b8:07:45:44:7c:3d:aa:75:fb:0f:61:b7:a4:
33:19:5e:5b:1a:ee:f9:04:7e:71:fa:25:11:4f:fc:
20:8d:c5:67:53:e3:21:1c:92:9e:f9:55:b3:9b:0d:
0e:9c:27:51:76:f6:ec:2c:51:15:22:eb:bd:89:0d:
92:ba:7f:b8:64:a9:d6:57:88:74:ac:1e:d6:12:01:
bb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8B:38:54:00:BF:24:D0:9A:46:BC:90:67:B3:0F:F6:F2:E9:16:90
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:61:b9:80:ba:39:38:fa:9e:d8:04:b3:4b:fc:f0:5a:a6:92:
a5:be:72:d8:f2:00:4e:4f:19:46:af:92:7c:c8:f4:99:23:55:
b6:96:78:45:e2:35:a7:9a:fe:ad:93:8c:a5:84:5b:41:39:d9:
2a:5c:30:f2:9f:d0:31:25:ad:4c:d1:fa:48:4c:5a:4c:2f:1f:
f9:e2:a4:4d:5d:b4:89:d3:86:d0:53:24:4b:dc:f3:90:de:40:
79:b5:26:ec:be:98:6f:34:aa:04:42:42:a4:2f:29:ab:20:fc:
cd:16:09:b1:aa:33:a5:39:fd:5f:57:be:b5:02:55:6f:20:53:
81:5f:30:b5:90:56:28:d4:65:d2:c1:74:48:0b:2e:ba:cd:84:
75:6a:da:2a:2f:82:7f:91:d9:8c:66:30:40:2e:51:05:bb:09:
88:9f:8b:f9:5c:58:5c:24:bc:7d:c0:73:6c:35:58:01:6c:c6:
bc:98:7d:28:7d:e2:31:4b:4d:a2:95:bc:ff:98:f8:ab:cc:46:
16:ba:c3:f0:35:f4:59:f4:45:c6:a8:4e:2a:45:35:fb:27:66:
87:12:25:09:89:15:b5:e4:b0:bd:3e:c9:2d:af:0d:be:9f:d6:
5f:ed:0e:ed:f5:08:9b:1f:7a:33:35:a8:1f:dc:b1:10:2e:b1:
60:9f:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:57 2025 by rpki-client