Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
File: IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json)
Hash identifier: bSUMaCHPy1AXEBUijSs2cDRCrnL7TRBywiTq6l2oKwM=
Subject key identifier: FF:0F:83:9E:C8:58:55:07:5F:0D:B7:B4:73:2B:E2:ED:DA:0A:9D:9B
Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Certificate serial: 01964F6CA20F70B061BF80304D17DE4D042D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
Manifest number: 04EB
Signing time: Sat 19 Apr 2025 19:00:41 +0000
Manifest this update: Sat 19 Apr 2025 19:00:41 +0000
Manifest next update: Sun 20 Apr 2025 19:00:41 +0000
Files and hashes: 1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: dCgmINlZgPzqTcw40J/IetgQMir44gMXL2U341d/1lM=)
2: ZXtK8i0ZkTBxTFkF4gT8SCIZTmw.roa (hash: KikSjMlfZMQPJYB8hmRvlc00FrgqM6UWZDTUG/QEicY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:a2:0f:70:b0:61:bf:80:30:4d:17:de:4d:04:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Validity
Not Before: Apr 19 19:00:41 2025 GMT
Not After : Apr 20 19:00:41 2025 GMT
Subject: CN=ff0f839ec85855075f0db7b4732be2edda0a9d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:15:fa:1e:26:df:c9:22:46:70:be:3a:9e:
b8:95:23:5c:06:c1:e4:f4:26:7c:a5:c3:04:7d:54:
9f:d7:1a:db:14:89:5d:71:31:e7:c3:66:a1:88:3c:
8b:0b:99:58:17:1c:de:a9:8a:e1:eb:2c:7b:28:6e:
00:82:6c:07:1b:50:02:6a:dd:c8:08:71:5e:0f:e4:
f2:98:3a:36:74:8f:01:f8:fe:26:83:b1:b2:fb:93:
5d:42:9e:b2:d7:1c:44:90:1c:d1:4b:4b:c0:84:92:
6b:39:c2:10:9d:67:dd:4e:a8:d2:ac:e8:f1:89:3f:
e7:f7:f7:74:27:df:22:14:41:41:0e:ec:79:a1:2f:
71:6a:58:25:2f:da:f1:c0:20:64:88:79:c6:0f:99:
0f:09:d1:c9:3a:92:0e:d8:df:e6:44:62:d6:19:92:
19:48:de:69:80:6d:2f:d7:44:d9:6b:00:94:28:9c:
47:55:62:2d:d6:62:e6:6c:ea:b8:9b:42:56:bf:f0:
62:09:c0:32:54:22:81:e0:63:5c:cd:53:4e:8b:a8:
27:5d:6a:f0:3d:62:39:27:f0:71:b1:b8:5c:1b:a6:
1d:63:91:cd:93:93:b1:6c:96:c4:e1:ef:db:28:52:
05:f3:53:3c:c3:6c:81:36:a6:14:72:f2:a6:47:40:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0F:83:9E:C8:58:55:07:5F:0D:B7:B4:73:2B:E2:ED:DA:0A:9D:9B
X509v3 Authority Key Identifier:
keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:56:fe:e8:36:5a:b2:ad:d5:25:fc:1c:72:8e:18:9b:62:6c:
5b:41:c3:04:d9:dc:65:92:70:fb:5a:f9:c2:e4:a3:61:c1:1c:
6b:a4:c2:32:08:f5:a7:01:ee:75:dd:63:e4:7c:5f:91:c5:40:
1f:06:38:4e:4d:64:02:a9:ba:20:e4:4d:b0:76:d8:bf:46:9c:
07:65:ae:fd:56:bf:90:96:8c:62:69:f1:bb:43:b8:aa:59:0d:
2e:cd:98:15:80:ee:b3:25:43:19:2c:df:df:ef:5e:89:ad:b4:
b1:25:b1:61:95:91:ff:2e:87:8e:fc:e3:ab:81:4b:95:b1:73:
da:7a:b3:7a:9b:10:42:43:dd:48:2f:6a:57:39:3e:dc:56:25:
7d:39:71:ff:4e:45:3d:96:b2:be:1d:9a:f2:5e:4a:5f:d9:af:
4b:df:6c:a4:d4:b3:fd:c4:df:14:b0:5d:59:4b:34:d9:a6:19:
2d:37:e5:04:92:db:e0:f3:81:2b:cb:d1:bc:c6:00:8a:fc:c7:
53:45:d6:7e:c5:9b:d9:cf:ea:1d:5c:1c:be:fb:28:e6:9c:d0:
45:c0:84:29:c0:06:f8:df:7f:19:e4:a9:b1:8f:22:d5:3a:6c:
ba:6b:40:44:ca:6a:96:37:16:e5:04:33:fb:c5:ec:43:b5:b4:
9e:19:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:46 2025 by rpki-client