Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: CeTFXTE+ghwPKvHf6aLOtxMUXnQJr7v/4rC50qWnrj8=
Subject key identifier: 98:BA:82:80:44:DE:50:88:F1:2F:5B:D5:6A:F8:BA:AA:75:39:5C:90
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 0196470E810B7A35B58CAD077301533BF6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 14DB
Signing time: Fri 18 Apr 2025 04:00:54 +0000
Manifest this update: Fri 18 Apr 2025 04:00:54 +0000
Manifest next update: Sat 19 Apr 2025 04:00:54 +0000
Files and hashes: 1: 5dE_GC4RYmruYsEQCosEswqhvMw.roa (hash: PKjCYy3vCzlACHchkXt5SVZDwsnRqMCgtgL6CJOnCUg=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: 8evgA1pK7wJcmsfyg/+HHxI5Wl7+ZUw8R5O1FY4Nqac=)
3: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (hash: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:0e:81:0b:7a:35:b5:8c:ad:07:73:01:53:3b:f6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Apr 18 04:00:54 2025 GMT
Not After : Apr 19 04:00:54 2025 GMT
Subject: CN=98ba828044de5088f12f5bd56af8baaa75395c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e5:41:ce:c9:1d:4f:8f:70:53:b0:46:a4:0a:
e1:b3:21:24:88:5b:ad:5d:0c:aa:d9:b9:22:01:1b:
34:59:e3:18:ee:2e:29:64:e4:fa:53:dc:35:d0:91:
61:87:f4:50:f1:d2:76:ef:0b:44:b6:b9:3e:60:05:
7d:a2:03:d2:b8:35:a4:55:fa:f7:3a:cf:87:2a:d2:
f1:28:0c:e1:92:4a:68:96:8c:da:a7:6c:77:38:f0:
46:05:49:1d:ef:7f:86:3a:af:cf:9e:4f:4d:e3:da:
70:86:ba:f6:88:6f:db:6f:76:7f:ac:43:cf:a1:2d:
9b:6c:0f:23:ef:69:f3:47:77:93:08:50:11:67:7a:
e7:a7:a8:3e:12:34:2e:38:ca:c0:c6:82:5f:65:65:
d3:15:b6:6a:1d:39:65:27:e2:45:eb:dc:26:8c:2f:
3f:3b:b6:25:db:b4:5b:c5:39:44:df:a2:e3:ea:e8:
37:6a:32:95:9d:3b:98:36:21:82:74:5e:9d:98:02:
cc:0c:e8:fa:79:32:87:f2:2a:ff:a1:fe:0e:33:00:
d4:9e:22:76:3c:e1:41:ed:7d:b2:6b:3c:c0:3c:b6:
b0:be:20:2f:4a:1b:41:0d:e3:9f:b2:21:dc:ec:1a:
f1:af:c2:03:33:f9:2a:bc:6b:53:b4:93:45:d4:d3:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BA:82:80:44:DE:50:88:F1:2F:5B:D5:6A:F8:BA:AA:75:39:5C:90
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4d:fd:3d:93:d0:7c:64:6e:1e:d7:41:e7:63:0d:f6:70:38:
f4:08:37:ab:93:24:05:4b:dc:6d:fb:e8:45:6d:c1:70:ad:54:
48:4b:fc:23:41:3c:71:94:04:9e:ca:b3:a3:39:7c:e0:30:13:
02:65:69:2a:d3:78:67:5d:c5:77:39:37:a0:64:0f:e8:c7:e0:
6a:5e:c9:8d:cd:52:39:00:bc:ef:59:bc:42:aa:ac:ea:9d:70:
15:f5:11:66:58:c1:dc:ba:70:ab:4c:1a:91:02:8e:15:8a:73:
68:9e:26:6e:64:d9:25:1e:9c:0b:0d:f5:b1:99:70:11:ed:35:
4b:57:e1:51:c6:b4:e8:98:48:8a:e2:f8:37:9d:cc:8c:58:49:
1f:68:40:a4:38:09:97:82:df:84:0d:88:2f:17:dc:50:9c:6d:
17:0b:25:65:6b:d0:c5:7f:b0:8a:ba:a8:0f:21:c1:c9:3f:d4:
01:6b:97:2b:46:75:95:63:64:9d:ab:f2:99:13:8f:54:b4:05:
d9:d5:cd:5e:de:c5:63:22:93:04:e4:a0:4b:a1:9e:5b:0b:4c:
91:43:7c:59:90:b8:bd:f6:c8:af:a7:d9:c6:5a:98:7d:46:e8:
c6:27:bc:e3:2e:dd:90:d4:f0:16:f6:43:30:2e:e8:ee:69:aa:
b4:9b:b7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:27:36 2025 by rpki-client