Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File: _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier: +aeagMrnuT0R2gOs2UTZfLJZ+ioFpxOu8eruj7BBAq4=
Subject key identifier: C4:DE:D1:13:D6:2D:A4:A1:C4:3C:F4:F4:BA:C8:50:B6:39:99:5E:9E
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 0196507EECCA9702429D96FB85DFF7A5833A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number: 142C
Signing time: Sun 20 Apr 2025 00:00:17 +0000
Manifest this update: Sun 20 Apr 2025 00:00:17 +0000
Manifest next update: Mon 21 Apr 2025 00:00:17 +0000
Files and hashes: 1: Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa (hash: aS0+JitqaJojivrvqxvVApMU+OsS1deS84dQZzA8Tnc=)
2: YaQeUaPm7DT5i6DIJSP2oPk6asc.roa (hash: Xe3hwh1S9IdquQYZSTUC+SBDReDUDM3Us/vWljHz8KQ=)
3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: NwRr/oOdxOo/oDyEPJmRVQRAfDIsCTbtafg97XHFX7M=)
4: b3VRvUBoZO6M6gjGueykiziKPRc.roa (hash: VBIsT3fCceZgm7iHJXEBP5n/OLHn0+1WoqHHXWi6Cy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7e:ec:ca:97:02:42:9d:96:fb:85:df:f7:a5:83:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Apr 20 00:00:17 2025 GMT
Not After : Apr 21 00:00:17 2025 GMT
Subject: CN=c4ded113d62da4a1c43cf4f4bac850b639995e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:16:93:93:24:82:f7:24:5d:e9:1e:15:80:
ca:20:2c:ca:55:f8:f0:89:5a:65:2d:9a:b3:82:f7:
b5:97:7a:62:bb:2f:29:c2:c6:11:33:23:49:e4:83:
ea:84:d3:d3:03:25:87:c1:de:13:0d:0c:7f:9b:46:
c6:dd:44:bb:da:d3:ee:a0:6c:9e:47:92:28:de:42:
18:f2:72:ca:dc:ba:71:4c:68:3f:09:3c:a8:02:8c:
e1:9d:36:be:74:25:65:59:a0:46:10:1f:76:1e:1d:
71:5b:72:c8:5e:2a:ba:de:22:e5:77:6d:1c:18:b9:
8c:3a:18:f4:fb:69:29:c7:a9:eb:bd:5b:e1:5a:46:
da:a5:45:53:1b:43:fc:01:4c:95:52:4c:68:7c:6f:
2c:d3:53:b9:78:de:86:76:25:42:48:69:df:53:82:
40:4b:40:ed:03:f1:f4:13:a4:1c:00:11:30:fc:b6:
cd:0b:3d:db:b4:a0:fa:3c:a3:b0:b7:78:37:24:f4:
9b:c2:da:47:39:cb:96:95:9a:f3:9e:cc:f1:0d:77:
8c:7c:fb:0c:29:5d:88:99:7b:44:df:c4:67:fa:d4:
82:d7:13:be:99:7b:e9:0b:6d:9e:d5:f9:ae:c6:0d:
91:4a:62:0a:b2:83:47:91:3a:5d:d8:d9:31:44:67:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DE:D1:13:D6:2D:A4:A1:C4:3C:F4:F4:BA:C8:50:B6:39:99:5E:9E
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7b:2e:52:78:ef:2f:cc:32:b4:45:f4:87:8e:f5:40:c5:5a:
cb:ea:70:e6:fb:73:ac:c8:7e:4c:c0:07:18:c5:81:32:12:05:
16:59:03:79:47:a6:de:be:1a:60:7b:26:ba:c2:4f:01:32:a7:
e9:83:27:95:45:d8:7d:7f:d6:8e:2e:aa:c6:24:c8:c8:d9:8a:
25:76:b2:86:e3:c6:6c:91:29:9e:ea:a5:37:c3:34:6e:2e:2a:
11:01:85:3a:63:1b:1f:e4:24:16:fa:3b:51:79:fa:98:e3:1b:
5c:85:1e:43:4f:ec:de:12:5b:35:31:b6:88:ec:62:fd:fe:21:
ae:7f:ed:84:e5:db:7a:21:7e:46:23:91:c9:3e:66:22:b8:da:
e7:27:da:19:18:83:41:7c:e4:68:b3:30:2f:f3:b4:37:eb:c6:
88:1a:7b:a3:13:2d:dc:fa:c4:ab:90:f3:fb:2c:6c:12:5c:e1:
b5:9c:af:3f:24:00:d3:a5:31:23:51:fc:f6:81:3b:e7:d1:bd:
6e:8b:12:e0:fe:cb:96:85:84:1b:4d:8b:71:97:7c:c5:6a:24:
dd:df:a5:3f:74:11:3c:81:f0:e8:2d:76:4b:2e:9a:0f:a8:22:
92:ab:c5:d7:9f:20:d7:b5:46:64:18:0a:ad:2f:42:99:6d:2d:
c4:1e:63:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:43 2025 by rpki-client