Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: UIYo5pr+s/QjiL/8777BU8ro3pMBrurnQKwY5AcDyzw=
Subject key identifier: D1:6A:57:D1:3C:92:0A:AC:FC:F8:46:18:CF:90:7A:F0:76:58:9E:41
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 0196501164447F88E98742165E66BF1B9C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 22:00:39 +0000
Manifest this update: Sat 19 Apr 2025 22:00:39 +0000
Manifest next update: Sun 20 Apr 2025 22:00:39 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: PnftEs8qoH+9+39xHwf0Rn19hB6ZPZbNehl8QXAmBxE=)
2: KzggZS0_EU2z31ZVy2dRybNt5fE.roa (hash: 0/EVa9A1y2LsZKtv+12bHp3FGMOEZd7rpEDZ7/wagAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:64:44:7f:88:e9:87:42:16:5e:66:bf:1b:9c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Apr 19 22:00:39 2025 GMT
Not After : Apr 20 22:00:39 2025 GMT
Subject: CN=d16a57d13c920aacfcf84618cf907af076589e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:86:1d:f4:a5:d4:1d:71:1e:56:d1:a5:40:
b7:fb:e3:ac:ed:e7:48:9b:77:c3:4d:d0:d0:d0:ae:
41:30:f8:05:c6:d2:3a:8a:d1:f3:2e:20:59:6b:97:
ab:e5:6b:d9:df:38:7c:7e:81:8e:ad:e7:0a:5f:0d:
23:c0:62:6e:02:fe:ed:49:ed:d8:2d:d0:37:fc:62:
5e:a5:74:3d:e8:c9:01:47:d8:25:04:ba:d8:bc:1d:
d5:6f:78:2c:2e:fa:4b:22:b7:94:cf:7b:4b:64:56:
0e:25:67:c6:fa:00:90:2a:63:3c:c1:4f:6f:36:d1:
40:57:64:52:b9:4c:c7:b7:28:84:1a:1e:1b:81:ad:
f5:6d:b9:19:66:2f:cb:2d:aa:23:c8:e4:f0:fa:ab:
17:e3:05:64:00:82:1a:50:09:d8:aa:54:45:ec:38:
d9:66:d7:a6:14:2e:67:b2:b3:db:d4:9c:a3:50:6d:
05:ae:50:59:fd:ac:ec:48:31:e8:2a:aa:3c:26:96:
2c:60:45:92:98:15:83:fd:55:06:29:de:82:d3:4d:
70:91:33:b6:b1:87:95:1f:75:b2:9c:69:1c:13:34:
36:97:8c:7d:57:d3:8a:53:d5:79:64:fe:e5:9e:0a:
2b:d0:8a:4d:23:07:8f:a6:41:47:bb:0c:8e:49:8e:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6A:57:D1:3C:92:0A:AC:FC:F8:46:18:CF:90:7A:F0:76:58:9E:41
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:85:51:4c:ee:1a:74:e6:3d:3c:8f:21:da:44:65:87:58:21:
ae:78:1e:d1:a3:ab:16:19:a3:16:f7:70:0b:9f:4f:57:cc:91:
64:19:24:3f:00:20:ca:bb:e7:2c:0d:0e:74:d2:c9:28:be:78:
25:ce:f5:b2:a6:95:14:36:76:ac:ad:14:da:97:8f:2e:e2:ec:
91:6d:d9:6f:9a:c9:4a:5e:ca:6b:0e:06:1a:02:91:8d:3d:52:
f7:4d:f3:0c:3e:7a:35:69:bf:82:4d:fc:e3:f0:bf:e4:6c:1a:
8a:63:4b:1b:1a:13:e4:68:2d:cd:47:42:30:90:c4:38:c3:59:
7f:cc:a9:81:21:98:12:8f:07:22:01:da:29:c2:4c:1d:99:5f:
38:c8:60:01:a5:39:e2:9f:96:f8:a6:d3:5a:de:84:1a:11:cb:
af:47:71:6b:ca:60:da:68:88:a4:de:9c:b8:48:45:35:fe:51:
a1:9d:b1:17:db:4e:39:cb:1d:f6:ee:0d:5f:1e:af:e0:32:44:
70:0d:4a:32:e4:9c:f3:96:db:25:1b:21:83:24:bf:ab:5f:ba:
9d:b0:f9:9d:66:a1:0b:86:89:d4:c7:61:5d:38:0c:00:e7:fe:
0f:49:47:5b:80:f1:d1:d6:41:ee:3d:ed:90:99:8c:87:cc:3f:
e9:ad:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:53:43 2025 by rpki-client