Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: NKrH4ewP1GVrKy+EB6lcf+XFRwdqbgdWUAilThA8mV8=
Subject key identifier: 1D:AB:77:45:B9:33:8F:55:6D:AD:A7:5F:AE:B0:EB:B9:F8:F9:0F:1C
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 019674F9C5FB775BB7879F75A5F171668350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 13A6
Signing time: Sun 27 Apr 2025 02:00:48 +0000
Manifest this update: Sun 27 Apr 2025 02:00:48 +0000
Manifest next update: Mon 28 Apr 2025 02:00:48 +0000
Files and hashes: 1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: tVNBOq80UAMcxteW22lfc4e+hsMT/a+FOTBMnOow8Cg=)
2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=)
3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:c5:fb:77:5b:b7:87:9f:75:a5:f1:71:66:83:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Apr 27 02:00:48 2025 GMT
Not After : Apr 28 02:00:48 2025 GMT
Subject: CN=1dab7745b9338f556dada75faeb0ebb9f8f90f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:87:3c:95:3d:9b:e7:5a:13:2a:5b:37:a6:
2c:8d:32:95:49:4c:a5:43:41:e8:2a:e4:25:ac:df:
c3:12:64:f7:6d:a4:74:f0:f9:c8:01:c6:8e:54:9f:
f8:1d:16:fa:0f:7f:44:3f:39:d6:ba:cf:f1:f8:d5:
e0:b6:4f:9c:15:19:7c:51:b4:9b:be:b7:ca:9e:78:
6c:0c:b7:1a:0c:dd:39:ff:7a:ce:9f:b7:b6:d1:b2:
db:48:1f:52:ab:ae:d5:79:b1:3d:b1:2a:8f:b5:68:
e3:5a:99:7c:ef:d7:77:cd:2d:ec:84:87:1a:e5:2c:
df:7a:8d:6b:de:a4:db:0b:d3:7d:63:7d:d0:f8:72:
d8:e5:92:33:8c:fa:5e:b7:5d:c3:96:73:a1:3a:0d:
5f:a1:98:ac:ca:db:43:60:f8:57:b7:ba:79:cb:0e:
46:46:c2:b5:c3:06:41:6b:df:84:a3:e6:9c:18:88:
02:b4:24:85:3e:df:4f:6e:9b:02:67:10:56:ac:da:
dc:f3:ca:b1:39:99:d1:73:e1:b9:c4:58:5c:68:7b:
4b:07:ae:e2:f1:6a:20:21:17:52:7a:6d:77:28:f1:
7f:f6:d7:72:16:50:8d:12:05:75:52:bb:1d:19:d0:
71:15:17:01:2c:31:e3:86:7e:72:01:10:26:19:24:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AB:77:45:B9:33:8F:55:6D:AD:A7:5F:AE:B0:EB:B9:F8:F9:0F:1C
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9e:aa:73:aa:5a:e7:57:ff:6e:e6:e7:88:67:55:3c:5b:85:
a3:7a:1d:07:39:9f:16:5a:23:44:bf:dc:db:86:dd:a4:c4:05:
b8:7c:39:46:ed:c4:85:f7:af:db:be:9e:74:1e:80:c2:58:3e:
93:1b:6d:5e:3b:bc:d4:1b:de:6e:df:96:36:64:ba:b7:29:3c:
86:94:18:1c:97:e7:9f:d5:0c:a9:59:c4:4a:cb:0c:dc:ed:84:
47:56:29:9e:fa:bc:7a:fc:d8:6f:92:e7:7d:7b:c1:d7:59:6f:
bf:27:02:ba:8a:11:04:13:bd:5d:dc:8f:e6:c6:f4:ab:15:7a:
ce:81:7e:34:ba:60:f4:f5:59:62:08:3d:f8:53:5a:62:8d:f6:
1a:fd:7f:7f:20:74:1c:4d:f1:2a:52:cb:f3:cf:0b:f6:2b:7c:
ae:57:ab:43:75:79:c1:0c:2b:9a:71:6f:8a:99:50:ea:88:d6:
e5:45:1e:04:a6:da:47:e2:07:53:2a:93:b1:31:b1:b4:87:0c:
94:df:01:2e:21:91:53:32:8d:60:04:d3:bf:62:6b:dd:69:f1:
e6:b4:35:2e:9a:ec:9c:2d:c0:d1:aa:6b:2f:5d:95:34:cb:bc:
cf:cc:f0:c6:1b:28:7b:94:e7:d7:a4:97:cc:db:a3:38:4f:5d:
65:9f:c5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:51:01 2025 by rpki-client