Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: fovXQYGZrcuWyGmzw05Si6iKUzKoNsK6VGME4lMqIhQ=
Subject key identifier: D1:B4:BC:40:1D:F3:A0:61:9A:EF:CF:5E:F0:D6:1B:16:2B:F5:3A:5A
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 019618B56B8FB060A7D98D03E238F9EEDDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 0F69
Signing time: Wed 09 Apr 2025 04:01:04 +0000
Manifest this update: Wed 09 Apr 2025 04:01:04 +0000
Manifest next update: Thu 10 Apr 2025 04:01:04 +0000
Files and hashes: 1: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: iZ5jFcp1P9yTfgugaz94qr3afW6pUDBmZxF2umBYFy0=)
2: ff-qexzHEUD1WgOGjo1dcXlM5zw.roa (hash: okd5E/DUi3wr0dkKGYnxuoMgYENizBl6tX2uR1KatU4=)
3: o-JKFkGOw7b9iS81cGqL_sPqhTE.roa (hash: LeiOclwc6FMh1dAwDJxgRxawRJ1HHtp5FtwQRdIanPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:b5:6b:8f:b0:60:a7:d9:8d:03:e2:38:f9:ee:dd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Apr 9 04:01:04 2025 GMT
Not After : Apr 10 04:01:04 2025 GMT
Subject: CN=d1b4bc401df3a0619aefcf5ef0d61b162bf53a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:c6:df:36:b5:58:ef:97:b5:9d:70:7b:f6:
23:4e:6d:2b:f7:fc:1d:99:a2:fc:49:bd:8a:4c:74:
1a:e8:56:05:73:43:d8:a1:97:5e:b1:ef:8a:f4:3d:
a1:e3:aa:8c:81:84:ba:bc:ea:59:34:58:b9:f9:b4:
6e:34:ed:2e:ad:d0:e0:b1:4a:b5:42:8b:d5:8a:a0:
4c:a0:1a:5f:c5:18:c9:2b:dc:fd:30:5d:43:25:82:
d4:97:f4:9b:73:1e:4b:f7:cd:da:eb:8b:21:75:b8:
dd:0d:34:29:45:58:95:1b:6e:d8:32:d8:bb:04:a0:
90:97:12:61:cc:4f:7b:cd:50:57:5b:bf:ec:7f:26:
01:1f:08:f5:7c:39:ac:90:2e:85:07:97:f8:a6:8c:
72:74:18:46:69:e8:ff:e1:04:8a:de:43:9e:8c:b1:
60:5d:3f:3c:49:4c:e3:8a:aa:64:32:83:a8:f1:39:
e1:c8:97:d2:03:c9:61:a5:ba:2b:49:bd:fb:06:81:
f3:f6:89:d4:38:fd:eb:71:bb:8f:e9:df:f7:13:08:
3b:d6:94:9a:c8:cb:7d:be:f4:2b:f9:32:6c:49:94:
9e:6a:4f:f8:0d:49:ad:14:8f:cf:6a:73:14:82:87:
7d:b1:ab:92:b7:bc:c3:3f:0b:3a:4a:28:71:76:18:
8e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B4:BC:40:1D:F3:A0:61:9A:EF:CF:5E:F0:D6:1B:16:2B:F5:3A:5A
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:45:a6:57:b8:8a:5e:c4:23:2e:f2:b1:5c:a8:bf:af:42:6d:
d2:1f:2d:9a:6a:13:3c:f6:7d:17:3c:58:1d:f5:6e:bb:ee:6b:
91:3b:7b:a3:e5:eb:dc:b7:f0:ea:f2:13:2b:71:33:1f:25:1e:
53:bc:e7:af:76:84:3f:e1:28:2b:b9:0c:a5:1d:df:1e:9d:39:
f8:66:89:96:ae:cc:10:fc:29:71:32:33:41:ba:88:fd:9b:98:
c1:f3:94:d7:e7:45:1e:71:1d:77:7c:26:d9:47:0b:ad:17:db:
39:ae:6e:a3:d3:2c:76:19:ba:56:c9:c1:b1:80:35:d9:d9:05:
4d:0b:03:4a:a1:85:c7:0a:b5:2d:82:15:90:d4:d2:2c:e0:e0:
97:ba:78:25:b7:ff:1b:e1:bb:0e:9c:ae:5c:b9:aa:dd:14:39:
b6:7c:61:ee:30:4d:b6:c1:45:08:25:f5:55:a5:c3:68:4f:45:
71:79:2b:e6:94:03:44:44:06:e6:c6:fd:27:d5:4e:aa:35:b6:
ae:da:9d:35:02:e2:8d:3b:18:75:c9:5a:24:f1:26:9f:6a:15:
fe:55:1f:18:55:22:c8:4e:48:48:1e:f8:23:ee:2e:26:5c:99:
f9:fd:3a:35:db:7d:76:f4:76:83:77:2c:cc:b9:79:73:77:23:
11:b3:dd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:15:25 2025 by rpki-client