Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
File: I06fdccyb3ZciWbC7cAKmCpep_A.mft (raw, json)
Hash identifier: UHSh2rDwb5xN1ExNlKkQlo7YGAlB4Qn0EAr0tAOQy3c=
Subject key identifier: C1:40:6F:1B:70:35:F0:1F:AE:85:69:71:50:0A:10:16:0B:EA:8D:43
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 01964D476D0D4E1BE29720EBAC4B2531D88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
Manifest number: 1268
Signing time: Sat 19 Apr 2025 09:00:48 +0000
Manifest this update: Sat 19 Apr 2025 09:00:48 +0000
Manifest next update: Sun 20 Apr 2025 09:00:48 +0000
Files and hashes: 1: I06fdccyb3ZciWbC7cAKmCpep_A.crl (hash: bQvchKknoO7hCnk3l15vIUnmqeDpdvXGKWJ99eZoGY0=)
2: _abtUqDmMxDQ2RmQqkGL8N8DjTE.roa (hash: CRHU3YWrzulAziPCk+beyoXQoDHAl8oOT3cyglDGbAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:6d:0d:4e:1b:e2:97:20:eb:ac:4b:25:31:d8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Apr 19 09:00:48 2025 GMT
Not After : Apr 20 09:00:48 2025 GMT
Subject: CN=c1406f1b7035f01fae856971500a10160bea8d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:9c:dc:72:98:cb:cc:c2:3b:62:6e:76:56:
10:5c:fb:55:59:b3:f2:53:12:92:fe:18:72:a3:d3:
00:0a:ca:4f:01:c2:5a:87:5b:44:70:7e:d6:0d:40:
df:40:87:e3:8d:b6:53:9d:7c:b3:fa:b1:f5:f7:f8:
d8:41:50:a3:50:fb:f2:97:34:c7:ef:4f:80:9c:ad:
bf:dc:2a:ac:85:50:20:b6:7b:f3:cb:ec:3f:b3:c2:
77:82:e0:9c:1e:1e:12:20:8d:44:48:87:af:c5:f2:
e3:1b:fd:41:4e:48:75:5f:21:6d:3c:6e:13:0b:42:
c1:ba:71:a1:aa:49:b4:06:54:f7:10:c6:91:c7:25:
e0:60:38:a9:ae:bf:14:ed:e3:c0:b8:de:26:fb:75:
4f:7f:7b:37:74:cd:85:67:43:c2:2b:e0:72:7e:cd:
25:51:95:91:a5:f7:22:ed:04:9d:43:f2:db:d5:30:
d3:68:2f:05:2c:cc:b7:65:04:14:88:85:33:71:21:
61:23:9c:23:03:25:ef:0e:ec:f2:24:19:c2:af:f7:
6c:a6:67:69:37:26:b9:09:1f:2b:94:21:f1:f4:05:
91:47:f6:10:97:bc:44:32:06:99:b4:22:20:92:bb:
b5:ee:9e:fb:f1:ec:df:58:65:f7:d5:f4:5e:88:bc:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:40:6F:1B:70:35:F0:1F:AE:85:69:71:50:0A:10:16:0B:EA:8D:43
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c8:0f:76:b2:8b:cb:59:d1:f2:39:ff:32:92:f7:12:5b:72:
0b:84:1b:fc:7c:9f:12:fe:ae:05:70:01:c5:43:d4:82:b7:a7:
28:34:bb:d9:ef:0c:b6:19:e9:25:cb:93:c5:74:4f:f3:9a:0f:
43:be:27:d9:ca:8d:a1:7c:c2:89:75:b9:43:af:fc:a1:3d:e8:
7f:bd:7c:ff:71:c6:69:e8:35:66:1e:ed:2c:dc:bb:21:5d:a6:
70:3a:0a:72:59:07:a0:4c:c7:8b:c7:d4:59:62:70:b0:74:c3:
73:1b:53:30:8e:cc:a4:68:d8:46:4f:fc:6c:f4:10:ad:37:45:
69:ce:8c:14:d0:71:d7:b0:d1:d2:52:2c:24:68:eb:f5:23:77:
ba:84:f6:dd:93:b9:02:75:6a:28:7c:7c:e0:18:10:02:55:b8:
d0:ed:a6:4b:06:f6:87:5c:40:48:23:01:c7:ab:37:3d:f3:54:
40:bb:db:6c:76:3c:b3:d7:13:0f:95:59:77:b4:14:7b:c6:6e:
1c:b6:60:20:17:84:bb:58:15:54:e4:1c:7d:f0:db:36:41:51:
7d:82:87:b0:f9:6f:12:b3:4d:da:1a:41:3b:ca:f3:56:c5:94:
70:75:e0:a5:48:e0:f3:34:25:87:5d:b1:38:ae:13:22:d9:16:
5a:e9:d2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:33 2025 by rpki-client