Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File: I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier: eJOFbIvLwDlqyifESyWxBUkJVTLcPdu65735rUsszj4=
Subject key identifier: 87:40:A5:30:99:AC:57:C1:DE:CE:97:AA:C4:38:25:85:27:2A:1A:C7
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 01965123E035430C38E4EF9A9CAF366B32CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 03:00:27 +0000
Manifest this update: Sun 20 Apr 2025 03:00:27 +0000
Manifest next update: Mon 21 Apr 2025 03:00:27 +0000
Files and hashes: 1: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: ku2Q55uQ5HDYCavxbTnv4f2u94zVZkgkYffggnUDNlw=)
2: bjCXA7rp-GRMTkdMkg_zXfKYrW0.roa (hash: FxnvNnw+IOeKtHJC0KTXpxkTr4pA05J6vavAi4HV2BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:e0:35:43:0c:38:e4:ef:9a:9c:af:36:6b:32:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: Apr 20 03:00:27 2025 GMT
Not After : Apr 21 03:00:27 2025 GMT
Subject: CN=8740a53099ac57c1dece97aac4382585272a1ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:26:75:8b:ea:c9:42:2a:96:16:0c:f4:e9:
cb:0d:47:7c:34:3b:7f:bf:2f:8e:86:9a:a1:71:6b:
f2:d2:d4:2d:87:f1:3f:20:73:57:da:1b:48:02:38:
30:a0:89:87:71:94:0e:6e:fe:a4:5e:d2:be:c3:56:
6d:53:e3:22:30:45:f4:de:96:08:8f:6f:5a:36:b8:
b2:b0:22:50:32:78:99:b7:c8:ec:a8:a3:d9:03:47:
c5:b1:f0:db:78:5a:f7:b2:c8:16:a1:3a:20:72:c6:
14:31:86:fd:0f:91:82:0c:c0:f5:3a:96:cc:f7:66:
5d:80:97:3f:51:73:3c:df:62:3e:ba:61:19:a5:53:
ae:8b:66:e6:4d:80:ee:3b:39:91:97:f8:a4:c4:34:
b6:67:8d:7f:d6:20:52:11:19:da:f1:79:c8:a8:29:
70:07:39:10:92:47:16:84:41:63:8d:7a:e8:87:48:
33:02:f2:0c:16:cf:7b:3c:cd:02:99:2e:43:f0:5e:
f2:7b:e5:fd:84:76:c9:2d:c6:cb:8d:92:3a:76:f4:
94:8e:d4:55:a2:8d:30:4a:2d:f0:9a:37:30:16:41:
e9:ab:60:bb:84:7b:ef:24:2e:ae:0e:82:eb:36:9a:
d6:87:29:b9:94:18:33:9a:f3:1c:a6:29:78:31:0a:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:40:A5:30:99:AC:57:C1:DE:CE:97:AA:C4:38:25:85:27:2A:1A:C7
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:93:1c:b0:3f:c3:b0:9f:f0:59:37:94:72:85:ae:02:b3:b4:
f7:a0:b3:78:fa:4a:a2:3d:37:bd:45:d5:11:ca:a2:af:32:bd:
80:ab:3f:5e:3e:2d:5a:42:0b:bd:ee:30:ce:59:62:db:50:6f:
a9:b7:83:79:c7:c7:94:01:f6:16:3e:6e:67:bc:0d:90:61:e6:
11:7c:f6:11:59:fe:dc:ae:a4:6f:14:bc:b8:fc:7e:2f:4f:42:
83:fa:61:c8:34:c1:bf:f6:8e:0c:bb:aa:e4:64:03:50:e3:b8:
3c:5c:93:c1:46:65:5d:d7:50:2a:c2:0d:14:48:90:7d:69:87:
0e:df:d2:9d:2b:54:1b:37:31:00:f0:be:d4:6a:49:a7:64:94:
5a:f0:71:e0:20:07:71:22:78:5d:6a:2d:e3:01:dd:b2:de:13:
0c:0f:4e:0c:29:c3:e2:2d:79:b5:aa:f8:c9:a7:1a:81:fe:6b:
09:2e:12:66:e4:cb:2c:34:b5:91:09:cd:7d:96:0f:29:b5:50:
aa:22:2c:3d:fe:56:35:32:d6:c5:ae:be:96:33:9e:87:53:6f:
89:b7:bb:07:d8:3d:5b:be:5f:51:78:dc:51:d3:b4:05:14:3c:
e0:83:ca:21:74:91:64:a4:67:82:93:09:e1:45:92:58:9a:e6:
a2:2d:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:54:54 2025 by rpki-client