Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier: QCkwnJ6jqxKh2AwWXClr3gAExJP8SQe2SLSmZcqFkR8=
Subject key identifier: 8E:F9:4B:DC:F6:D5:83:D9:24:8B:63:29:17:16:C2:7E:50:D6:CC:7A
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial: 01964E90B0D51E893C5CA546587CF2F6FA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number: 10F1
Signing time: Sat 19 Apr 2025 15:00:27 +0000
Manifest this update: Sat 19 Apr 2025 15:00:27 +0000
Manifest next update: Sun 20 Apr 2025 15:00:27 +0000
Files and hashes: 1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=)
2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: 61XhMOjKJzrfzZdm67jvRB/fPGh8iOc84cUg5I8a8+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:b0:d5:1e:89:3c:5c:a5:46:58:7c:f2:f6:fa:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Validity
Not Before: Apr 19 15:00:27 2025 GMT
Not After : Apr 20 15:00:27 2025 GMT
Subject: CN=8ef94bdcf6d583d9248b63291716c27e50d6cc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:fd:22:27:b8:bb:d9:ca:26:32:b4:4d:60:
4c:49:21:0a:1f:c1:e7:94:af:cd:13:6a:14:e3:d0:
e5:ff:c8:04:c8:af:1c:83:b2:e9:62:4f:f4:64:00:
94:62:35:fd:e4:c3:06:9d:54:e6:58:01:5d:35:8d:
64:b5:6b:94:25:c0:84:56:ec:99:76:66:fa:cd:51:
3f:b5:d9:f5:b4:a9:2d:84:50:3a:9f:e8:50:0e:f9:
ae:71:d1:85:84:08:7b:21:a1:dd:09:1d:57:4b:bc:
05:df:41:ad:4c:96:c0:97:a7:85:73:46:a4:94:aa:
df:11:42:90:f1:81:52:6e:41:db:9d:3f:0e:f1:70:
ff:d4:ad:14:96:4f:5f:97:9f:2e:13:05:2c:8c:69:
dd:47:79:39:8d:87:e9:3c:44:af:a7:66:c0:87:9b:
ed:bc:c1:3f:a6:51:1c:a6:7c:b6:89:ac:e6:b4:94:
60:a6:f3:ea:8e:2f:17:8d:45:d1:7a:fc:b6:a9:f7:
2b:7b:60:1e:e4:ae:f2:93:cd:6f:fa:e4:ec:71:c2:
f8:27:6b:1c:1f:bc:69:6b:12:5e:03:ac:77:de:ca:
5f:5b:46:62:96:f3:5a:63:43:2c:8e:b3:41:f7:de:
a0:db:4f:b4:09:45:8d:37:05:36:cf:fa:19:d0:31:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:4B:DC:F6:D5:83:D9:24:8B:63:29:17:16:C2:7E:50:D6:CC:7A
X509v3 Authority Key Identifier:
keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ae:60:b1:ed:15:10:df:b4:aa:70:d2:55:f2:f8:59:77:f2:
85:71:96:14:ff:ae:57:25:4e:41:f1:21:e0:43:fc:9a:c7:73:
2c:68:60:3d:a7:9e:a7:b7:e6:36:0f:0d:7f:2c:d6:92:48:c4:
42:9f:70:8d:7e:eb:64:e5:d9:08:88:02:cf:48:62:41:03:89:
9f:cc:e7:f9:63:60:86:00:0d:77:06:1b:61:12:25:33:36:86:
c9:0f:fa:59:3c:d0:73:3b:da:0c:85:dd:34:f2:b6:3e:9b:ca:
59:2b:15:97:79:fe:92:19:28:31:15:24:e4:f0:0a:d3:dd:8a:
19:28:af:0d:27:a5:2b:df:dd:51:62:87:fc:22:3c:73:cc:e1:
d1:da:46:0f:2a:ff:39:a0:95:4d:28:88:41:02:ff:17:e4:af:
ce:2e:bd:dd:ed:ac:56:35:be:62:30:3e:1a:e8:72:99:57:1f:
f7:78:65:34:a4:22:9b:40:bf:ac:49:b7:a7:82:e5:44:ca:5e:
4f:9c:25:08:66:de:32:60:89:a5:88:c2:c3:2d:9c:b1:28:b5:
e5:36:ca:ec:9c:ee:6c:2e:0f:b4:f1:09:5e:06:4f:f9:15:6c:
dc:15:81:7c:58:cd:94:79:8c:a2:6f:1e:09:d4:5e:70:11:03:
b5:bb:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:06:41 2025 by rpki-client