Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: 0ffgr9TdPE7cjrgOVznR+daUmxATCzI9PAFw4ot82EM=
Subject key identifier: A2:DB:13:86:D7:4D:10:32:CD:E9:C3:86:47:99:8E:CF:9A:F6:B1:77
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 019612B378AB39FE125F438A1CE26004DE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 14DF
Signing time: Tue 08 Apr 2025 00:01:13 +0000
Manifest this update: Tue 08 Apr 2025 00:01:13 +0000
Manifest next update: Wed 09 Apr 2025 00:01:13 +0000
Files and hashes: 1: CaD8SfEdywooETv97hW1lj5NkpI.roa (hash: dNHQXwrYM02G5vgMbWxu9GN4iMzITZjOe38V63Kd+Zg=)
2: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: qHOT3Np+NAwQxW13jikmg1d8o396uH9w+bJBka4tIYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:b3:78:ab:39:fe:12:5f:43:8a:1c:e2:60:04:de:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Apr 8 00:01:13 2025 GMT
Not After : Apr 9 00:01:13 2025 GMT
Subject: CN=a2db1386d74d1032cde9c38647998ecf9af6b177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:cf:78:0d:62:b5:0b:d8:c7:f9:a8:d4:cd:
2a:b7:b2:ab:46:88:d6:1f:71:c1:2f:5c:da:e4:00:
0d:ba:46:3d:b3:0d:a2:4f:27:40:03:e4:9c:fc:a3:
14:ee:99:7b:7d:96:1b:3a:b2:f0:7f:e6:b9:23:e2:
72:cb:5d:4e:2e:02:c7:c8:e4:3d:4b:70:b9:c9:fd:
ef:8b:95:d6:db:11:5c:ed:4e:c9:a1:22:7a:69:35:
ef:3c:11:c4:d0:27:cb:72:57:3b:b9:c8:41:c5:bc:
59:e7:71:c9:a7:3e:e1:d8:c3:f9:16:e4:74:78:66:
f9:87:71:9a:1a:a1:9f:15:c8:79:f9:93:25:72:85:
35:21:35:ac:91:49:74:b7:2b:56:1a:2e:88:eb:0c:
54:8e:19:03:ef:0f:3f:66:2c:8e:53:e3:a3:56:31:
86:f4:8e:30:ce:29:a0:62:81:8a:18:1d:f0:a9:63:
d1:04:95:8f:99:f6:87:90:40:58:99:2a:2f:d8:d4:
2e:8b:73:4a:46:da:43:89:bf:10:0d:96:d4:85:82:
dd:6b:88:16:8e:d3:c9:bf:00:8d:1d:96:77:38:a9:
e7:50:2c:31:2c:34:8a:33:42:24:70:2a:f8:f4:d2:
c6:09:f2:5b:1d:3e:15:76:4c:38:14:36:fa:04:c8:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DB:13:86:D7:4D:10:32:CD:E9:C3:86:47:99:8E:CF:9A:F6:B1:77
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b4:c7:74:d8:94:af:16:63:07:6d:b8:dc:2a:30:a0:f2:0e:
46:b1:f7:80:5e:b5:24:df:0f:f2:c5:39:09:b7:97:38:74:45:
db:c3:9b:33:c3:de:30:de:fb:e7:18:00:b1:45:42:1d:89:c0:
44:62:49:b1:76:b7:6c:d9:aa:99:45:de:75:6d:ed:9a:7b:d8:
1d:df:0c:52:75:4c:8f:69:4b:8d:c3:75:15:38:c1:74:e4:2f:
7a:fe:f1:85:2f:ef:92:92:20:b1:9c:b9:b7:63:66:f5:33:bb:
4e:12:e3:d0:88:86:5f:23:37:43:cf:88:23:44:32:b8:de:e7:
29:5a:0d:50:e3:c1:19:2f:f3:de:be:47:3b:11:84:29:c3:f6:
bf:79:2e:ee:0b:9a:c7:eb:78:cb:fd:d4:db:24:33:de:99:02:
03:ef:fe:39:af:05:0b:fa:59:ba:b3:0e:6b:8a:d5:29:a0:52:
5a:1d:b0:39:4a:36:b0:02:63:12:99:b9:fe:63:73:c0:bc:f3:
52:ed:fa:b9:92:c3:c1:3c:bc:72:5d:61:9c:89:32:44:2a:4d:
28:04:db:a4:d6:90:77:fd:05:83:64:01:25:4e:35:bb:31:1e:
bb:07:46:c0:95:1d:75:59:a0:b6:4c:65:5c:5d:48:e4:d5:38:
99:fd:9a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:03:49 2025 by rpki-client