Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier: RsA7mDnINDjbnyf98+fmPtDDwvxjIplN/8KSnlc7RlM=
Subject key identifier: 09:1D:6F:06:3F:B0:6E:3A:5B:C3:6C:0F:2A:4E:AF:A2:9F:CB:C6:D1
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial: 0196507F449E51358AC37D36C7ACE4B0A58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number: 0273
Signing time: Sun 20 Apr 2025 00:00:39 +0000
Manifest this update: Sun 20 Apr 2025 00:00:39 +0000
Manifest next update: Mon 21 Apr 2025 00:00:39 +0000
Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: Xh8V2Nj3APCyMk6/CrWrttkFRqPL83hI3Fs3vYJbNcg=)
2: zVisEWOE63cgJitrBEvJgl69e3s.roa (hash: XbX4/gD81xbjCKcZpF0h9K2QmjSBOOrAtln50jZvE7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:44:9e:51:35:8a:c3:7d:36:c7:ac:e4:b0:a5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Validity
Not Before: Apr 20 00:00:39 2025 GMT
Not After : Apr 21 00:00:39 2025 GMT
Subject: CN=091d6f063fb06e3a5bc36c0f2a4eafa29fcbc6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:bf:04:f7:78:77:ff:a1:ab:1f:7e:57:dd:
5b:8e:b5:81:30:5e:7c:c7:5a:6f:68:ae:93:4e:65:
d2:08:fb:68:08:6f:0d:75:35:29:88:bd:a7:40:4d:
61:3a:77:66:93:dd:3c:4a:ce:7b:09:2e:f3:a3:47:
85:68:2a:ef:5b:41:46:2b:f5:a8:2c:70:ec:39:29:
af:a3:73:a6:93:68:48:97:aa:a5:fc:a5:9e:c3:cb:
33:47:cb:5b:14:c4:eb:2e:3f:99:34:f6:29:27:aa:
ff:bb:54:d7:b5:c4:d0:e7:44:1f:01:24:c5:3a:8b:
f2:4a:94:93:cb:62:62:3a:6c:63:b2:71:cd:ea:cf:
d8:44:08:eb:ca:3f:3f:34:71:d9:3b:60:f8:25:a5:
56:b4:26:a9:0e:81:5b:ee:bd:f8:37:dd:66:92:52:
59:0f:2a:90:62:c7:8e:74:c3:cc:10:30:7f:67:cf:
d7:c4:cf:b7:16:27:67:1a:c4:2f:c8:b6:44:dd:3a:
4f:4e:80:e0:6e:b5:26:59:f9:3b:a6:d2:20:70:5e:
65:58:94:c2:5a:94:1a:c7:71:2a:d4:a2:05:c1:62:
93:4a:23:dc:1d:c4:b2:6c:b8:f2:5d:85:22:a1:a7:
df:19:03:1b:b7:d0:ff:a8:41:a5:fa:61:eb:fa:e9:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1D:6F:06:3F:B0:6E:3A:5B:C3:6C:0F:2A:4E:AF:A2:9F:CB:C6:D1
X509v3 Authority Key Identifier:
keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8e:ea:51:15:7a:61:8e:7e:b2:4b:7d:9b:12:b3:b2:7a:f2:
d6:5d:c6:d2:8d:4b:88:e9:d5:9b:08:cc:a6:0b:98:03:00:d6:
8b:33:34:6b:47:d9:35:19:5d:c6:90:40:b4:c7:ef:c4:0f:ea:
f1:36:5b:d9:fb:ea:d3:50:3f:56:c8:36:f4:a2:44:e8:19:73:
d3:73:af:e0:d1:42:e2:d4:a6:a9:b6:ed:11:8d:ca:75:ef:a7:
f3:b3:4a:38:78:99:cb:45:27:d6:55:8d:90:c9:95:0f:26:ea:
31:83:35:e9:c2:aa:78:7b:96:b9:e2:1f:f1:76:1c:34:d6:a6:
ec:10:e3:3b:3d:82:33:4a:80:e8:3a:fd:8d:f1:b8:d6:27:89:
56:87:5d:9c:98:e4:a4:ab:7e:48:89:1d:03:fe:e7:9b:19:a4:
5a:f9:bf:69:cd:33:c0:02:a2:ca:e8:f9:60:7c:84:e6:5e:58:
c3:a4:ab:bb:a8:8f:af:1b:7a:0c:7a:59:47:30:93:e9:79:8b:
38:e6:12:4b:33:a0:ce:7f:1c:04:c1:dd:bb:91:63:56:5d:c3:
44:1a:a3:84:79:04:7e:c8:c5:13:41:54:fa:49:8e:3f:87:54:
dd:78:f1:34:cf:9b:f6:e4:ad:9e:ed:e8:4d:14:34:88:2d:c0:
fd:30:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:38 2025 by rpki-client