Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
File: _IJp9C5GRBqx7ZlMifdHuqVU4yA.mft (raw, json)
Hash identifier: W1wXobNdVCsmi/EulDZccEBMNEwSijBBsO/p7E1Hyi0=
Subject key identifier: 9B:9D:45:49:AD:09:BE:35:D8:95:8A:E4:AE:55:C4:D1:A8:5B:44:2D
Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
Certificate issuer: /CN=fc8269f42e46441ab1ed994c89f747baa554e320
Certificate serial: 01965500C4673CDCED725B416202509465CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 21:00:35 +0000
Manifest this update: Sun 20 Apr 2025 21:00:35 +0000
Manifest next update: Mon 21 Apr 2025 21:00:35 +0000
Files and hashes: 1: _IJp9C5GRBqx7ZlMifdHuqVU4yA.crl (hash: 4BKXnH1y5bNOf3GoLV53iCapjiVmWAI/PEvhNbA8dw4=)
2: eJpm7vOqN0K6_-N5ZvgNj0bJa14.roa (hash: ZjNNKQofgKq/YUnavRCCV2cjVOzm2yU0UKdAMKHM4p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:c4:67:3c:dc:ed:72:5b:41:62:02:50:94:65:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320
Validity
Not Before: Apr 20 21:00:35 2025 GMT
Not After : Apr 21 21:00:35 2025 GMT
Subject: CN=9b9d4549ad09be35d8958ae4ae55c4d1a85b442d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:af:cb:fa:57:82:a8:b2:88:14:c6:9d:f4:
2a:b4:62:59:c4:ba:e5:02:d1:83:bb:62:50:6d:1f:
2f:70:64:6e:67:ef:54:e7:f1:df:63:a8:fd:12:95:
bf:b0:28:17:de:cb:5f:c0:42:a1:b4:d9:7b:09:9d:
cd:ca:0b:b4:fa:80:50:ab:71:f2:67:29:50:df:7a:
61:b6:d0:fc:cb:50:7c:84:96:fc:52:47:cc:a4:22:
1d:47:7a:f7:43:e2:06:6d:e0:96:0d:8b:33:db:cf:
d4:1d:61:e2:7b:8b:40:71:68:af:33:61:1e:e4:50:
7c:45:8d:a6:1b:a0:a8:b7:52:0f:76:ca:2f:d7:42:
2a:04:aa:5c:82:7b:64:13:39:b3:3c:b1:79:38:b1:
dc:33:b8:37:d2:4b:24:a4:86:71:50:b5:58:1f:c4:
8e:7a:98:bb:e1:2f:45:2b:89:8c:63:79:da:54:29:
a2:ab:29:0d:77:9e:52:c6:33:ae:16:6e:2c:f9:41:
bd:9c:4e:1d:46:24:85:da:fb:41:58:44:6f:ca:63:
4e:aa:bc:b7:e7:06:1c:cb:4a:70:a3:22:95:23:b3:
7a:72:a0:10:73:87:63:d0:31:31:18:0e:04:69:cd:
17:1b:b2:d2:ce:e0:6b:32:7c:e3:eb:04:68:76:3a:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9D:45:49:AD:09:BE:35:D8:95:8A:E4:AE:55:C4:D1:A8:5B:44:2D
X509v3 Authority Key Identifier:
keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4d:5e:fb:43:a2:d9:0e:58:0a:21:31:aa:6a:2a:4c:c0:fd:
64:b5:74:bc:0f:71:61:e6:9c:19:bf:a7:60:a1:92:13:95:61:
e6:f7:ae:b0:3d:a9:b4:85:50:a5:5f:91:d8:eb:39:a0:42:65:
49:4c:85:43:ab:9c:b5:53:1d:5b:62:96:d1:4b:2b:51:c4:0f:
f4:1f:0d:d2:d5:42:25:7d:0d:d9:04:af:e0:0d:08:00:45:e9:
ee:e7:e3:70:6a:97:c8:e0:50:b7:20:b5:6a:0b:8e:77:00:d6:
88:68:46:0a:5c:ed:84:fa:09:6b:db:0e:76:82:ca:ff:9d:72:
c9:cf:d4:d3:5f:22:65:de:19:c5:95:18:63:c0:2e:e7:3e:6f:
56:54:41:7e:91:2d:61:22:f5:98:a2:a6:45:86:7b:b9:9f:d3:
b9:a6:58:8c:84:b3:1e:92:3c:7c:89:5a:45:a9:a8:f0:1e:35:
f0:9b:74:ff:ed:6a:20:f8:1a:60:f9:c7:ed:6f:a4:0b:17:6b:
6d:c8:bc:2c:35:ea:87:82:29:8c:c9:76:d4:3b:c3:98:0b:0a:
94:04:fb:d3:ac:19:c0:86:f3:84:15:ac:eb:25:fe:74:71:16:
d1:3d:43:67:77:90:31:73:b8:69:1d:6b:36:4d:d1:2e:29:9e:
7e:a1:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:51 2025 by rpki-client