Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json)
Hash identifier: tg4m5eJbQG159v6U0RQhDmX6tkc9vqANQkvTroZ4SxE=
Subject key identifier: F0:EC:FC:DF:C0:A1:8A:19:32:49:40:7D:46:AC:C6:39:C2:42:FC:16
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 019611A0CE331CF2DD71EAB38D19559610DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
Manifest number: 14E6
Signing time: Mon 07 Apr 2025 19:01:13 +0000
Manifest this update: Mon 07 Apr 2025 19:01:13 +0000
Manifest next update: Tue 08 Apr 2025 19:01:13 +0000
Files and hashes: 1: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: dwaeweFs/BfFhCDDulWSnJRai3BblYnkVOMxcjhH0Bs=)
2: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=)
3: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=)
4: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=)
5: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=)
6: TUZ6y7pTC-5h8yiVjQcSGGkQXIQ.roa (hash: RP8h/kz7Pd7+pel4dUfykVi8a9ETWLO7hEEL7qoA3AU=)
7: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=)
8: eOgvquigvzDPj-8dhQt95xkui_E.roa (hash: zEpy4lJB9tJ5de8zvRSwkcXfAVk3pin2iihLqa8DHd8=)
9: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a0:ce:33:1c:f2:dd:71:ea:b3:8d:19:55:96:10:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: Apr 7 19:01:13 2025 GMT
Not After : Apr 8 19:01:13 2025 GMT
Subject: CN=f0ecfcdfc0a18a193249407d46acc639c242fc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:88:c4:5f:dd:a5:69:c9:92:21:7f:3d:09:
c9:c8:1c:56:e5:66:d7:97:c2:6c:5e:0a:19:9b:bd:
10:78:bb:0b:d0:3b:2e:c9:0e:d6:c7:a3:a1:59:a4:
c6:4d:8d:9d:93:e8:43:c7:e8:d5:f0:06:67:32:33:
66:4b:17:c6:02:1c:82:b7:17:d8:11:17:dc:51:2b:
56:37:59:98:99:a2:40:92:e1:65:ca:46:cb:6c:e2:
95:8c:20:8e:ae:1c:29:b5:da:e7:8f:50:c5:61:a9:
cf:26:9d:12:ae:03:81:52:e4:fa:63:03:b1:fc:18:
14:db:b0:12:99:dc:88:b1:5b:cc:66:eb:f0:68:b0:
82:f2:c3:70:d6:47:cb:b2:a9:7d:be:40:76:95:ac:
bf:77:7f:59:0d:95:2a:8b:d0:71:b6:e6:9f:a3:d6:
a4:db:bb:ad:e0:66:6c:2c:c6:96:34:f6:52:28:40:
48:32:e3:c6:01:25:87:4f:44:07:44:e6:70:c7:7a:
30:54:91:09:e2:0e:6d:0b:2b:e3:2d:48:6d:52:36:
38:73:2c:23:45:5d:71:d7:1d:1e:ee:61:ac:a5:9c:
e6:89:3c:4e:f6:4d:2f:88:75:d2:cd:01:32:f5:78:
0e:cc:9c:65:33:3e:9f:92:16:bc:2b:7a:38:82:77:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EC:FC:DF:C0:A1:8A:19:32:49:40:7D:46:AC:C6:39:C2:42:FC:16
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8f:7b:26:75:7b:f3:6d:ad:b0:06:66:dd:3b:d2:97:5a:65:
9d:6b:73:5d:d0:09:a8:8a:e5:fd:c6:5b:39:d9:0d:2b:0d:94:
f4:5d:28:89:0d:ba:0d:85:fd:47:b0:86:ff:fa:ce:02:fa:29:
1b:69:0c:bd:56:f8:9f:41:e7:b5:6b:ba:f9:1e:7b:b5:80:60:
94:23:ff:29:a9:85:86:10:b2:8e:1d:a3:35:59:78:56:ef:25:
33:fc:99:32:b0:6c:c3:db:70:a1:1b:72:6a:ef:ac:c1:34:43:
d5:fe:18:8d:26:79:f6:4b:a0:97:39:d1:ce:cb:08:f5:7c:df:
78:a4:7f:8f:c8:5c:05:eb:5c:d5:ef:33:ea:31:cc:ec:fa:1e:
ea:c2:8c:8b:84:69:1c:4a:8f:7b:9e:0e:18:c3:70:91:53:aa:
01:69:ba:ab:f7:8a:5f:c4:97:50:c9:3d:30:b8:24:16:f7:d0:
29:78:0c:6c:ab:e6:05:3c:a8:26:13:c3:76:95:d7:fe:af:bb:
b9:4a:3d:3c:0b:52:86:da:80:ad:4d:ca:c2:76:33:2a:68:d0:
d2:3a:0f:e1:26:aa:81:17:68:3c:95:88:37:bc:85:84:6b:be:
e3:b2:a3:b2:b0:4a:a5:9f:d8:4b:97:9d:a6:f4:29:ad:36:59:
28:ac:2e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:35:23 2025 by rpki-client