Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: 3YtbD7jdV86CTkogIfrg+EZTRihLnQSmy53c17M7jII=
Subject key identifier: 73:5D:0B:E6:6D:3A:88:B3:1B:BB:C4:69:9C:7E:B9:62:68:E4:57:6B
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 019628CDC4EEF3CD05B5F62A897D2A8A7076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 03FA
Signing time: Sat 12 Apr 2025 07:01:35 +0000
Manifest this update: Sat 12 Apr 2025 07:01:35 +0000
Manifest next update: Sun 13 Apr 2025 07:01:35 +0000
Files and hashes: 1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: onIUN7QSbPyq1vREZVorGfFcWXZT2TkoLFCzfpven08=)
2: bMgRIHfe9czZPsPUKpcmfdHESeA.roa (hash: xt+uVWCgpmniCKO9lfh4KPFwtigjOiclhRJVmau9h3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:cd:c4:ee:f3:cd:05:b5:f6:2a:89:7d:2a:8a:70:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Apr 12 07:01:35 2025 GMT
Not After : Apr 13 07:01:35 2025 GMT
Subject: CN=735d0be66d3a88b31bbbc4699c7eb96268e4576b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:4d:b8:21:be:f9:94:5c:42:ae:22:cc:5d:40:
45:4b:ef:c0:8e:30:de:53:e3:bb:ad:38:b1:80:6b:
63:f5:b7:7e:e8:24:97:33:8a:bb:35:cb:a3:cd:d3:
10:42:53:8c:9a:70:ec:eb:f4:c2:f5:6d:df:a7:14:
cd:3e:c3:5b:10:e7:de:98:27:5c:79:31:34:73:a8:
8f:10:1a:92:1d:15:9f:1d:98:6d:5b:44:89:ef:54:
59:8c:79:f6:67:5a:97:cf:7c:9c:be:83:60:d2:a5:
28:34:69:55:2d:03:ba:fb:51:df:fc:f4:0c:b9:67:
89:6f:a2:c8:26:d0:ca:7a:6d:b5:c2:2d:de:f8:6d:
03:a6:65:5c:29:73:1c:66:02:49:1a:ca:28:86:96:
bc:da:53:97:bd:4d:b1:51:68:b2:a4:ab:0d:f2:c5:
14:28:b8:c9:2a:08:08:c2:c7:c4:25:6a:e3:e1:13:
25:4d:0b:17:04:4e:4c:8f:7d:2f:65:0d:1f:47:ef:
94:a2:99:c6:57:37:ef:fb:02:7d:7f:d9:a4:03:3d:
f5:68:ca:2a:db:79:65:02:59:d2:99:53:c2:60:7f:
2d:37:00:5c:c2:c1:aa:87:b3:93:45:db:17:f1:d3:
e7:29:b2:20:67:d7:48:9c:ff:2e:13:5a:ef:10:62:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:0B:E6:6D:3A:88:B3:1B:BB:C4:69:9C:7E:B9:62:68:E4:57:6B
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0b:7a:dc:4a:2b:97:2d:38:a2:61:8f:d9:4c:79:82:5a:cb:
29:ac:36:9e:ec:3d:98:eb:a9:88:65:af:2a:a5:a2:c7:cd:35:
19:e1:02:08:ba:9d:36:67:6e:cf:42:5c:c6:a7:bb:b5:b4:c3:
07:0b:a2:5d:7c:9e:b5:21:2e:d0:fe:bc:a4:7d:c6:fa:c4:b8:
4e:36:43:f7:85:59:95:e2:6f:a1:31:d8:ff:98:cf:87:2d:9d:
ca:96:9a:f1:8f:9f:f8:f0:0d:b4:6d:93:5d:13:ce:e2:7c:55:
e0:32:ad:a3:b4:35:db:a0:87:2c:15:b5:17:be:88:39:c9:50:
57:c2:37:71:94:66:d1:5a:80:9f:7d:f1:62:30:b2:0c:bc:91:
2a:fe:c2:f4:d2:c0:2b:70:ca:10:08:57:47:61:81:2f:aa:fe:
25:7d:71:76:3e:92:17:17:8f:e3:d7:f2:60:84:b2:c3:16:08:
f4:19:66:32:cd:18:96:cd:a4:bd:e1:20:5b:b6:e1:b8:51:da:
10:b3:f9:c0:ea:06:17:7b:30:1b:30:b9:0d:18:80:92:54:06:
57:ca:36:60:89:e9:05:da:85:a4:a9:4d:22:a5:7e:59:ad:30:
61:24:0f:6a:e8:3f:51:eb:c6:f4:22:6e:17:a8:6e:cb:e1:f4:
1f:c1:70:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:44:23 2025 by rpki-client