Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: ibEa2fUy6iLzjZEdXdF8JaP8VRbaice9NZJXabu0zKg=
Subject key identifier: 20:FE:54:C2:E6:3D:6D:87:65:36:B5:D2:40:82:8A:96:6E:45:3C:D8
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 0196760C6BD395F426575E550FD2EC260A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 02A0
Signing time: Sun 27 Apr 2025 07:00:47 +0000
Manifest this update: Sun 27 Apr 2025 07:00:47 +0000
Manifest next update: Mon 28 Apr 2025 07:00:47 +0000
Files and hashes: 1: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (hash: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: yAnvvMACYCM/HmA8E7+lS4IPdP+21L8BWzWlKtdNw0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:6b:d3:95:f4:26:57:5e:55:0f:d2:ec:26:0a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Apr 27 07:00:47 2025 GMT
Not After : Apr 28 07:00:47 2025 GMT
Subject: CN=20fe54c2e63d6d876536b5d240828a966e453cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:0f:86:e9:0b:fe:a7:b3:76:7b:a1:61:a2:
1e:f8:d1:bb:03:af:10:41:92:8a:e6:a4:ea:f9:71:
72:4c:e6:c4:b2:4e:1d:f5:a3:5c:d5:e8:6e:08:dc:
e5:b1:1e:65:96:c2:d0:8b:ec:d7:28:ce:05:56:cf:
ea:43:1e:be:23:5e:ee:fc:ad:42:ea:dc:44:0d:6a:
ba:18:2a:6b:02:ee:43:a5:5a:ab:b5:14:b7:18:37:
c2:f7:04:f6:12:58:74:e5:97:d4:20:32:9d:5d:12:
8b:c7:b6:b5:f2:ab:af:15:6b:b7:82:d0:8d:70:dd:
24:00:c9:67:f8:c4:d5:98:f7:bb:03:4c:1b:4a:12:
d1:4b:90:4d:47:3b:42:3a:23:08:86:e4:39:8e:81:
a5:12:c2:3d:95:7b:b8:58:86:de:92:d1:a9:af:6d:
28:d1:17:71:68:f1:b2:fb:bd:f0:12:82:1b:24:ad:
23:92:07:3e:c1:2e:06:03:62:ba:f2:5c:5b:fc:3f:
84:e6:ac:43:28:1e:7b:78:5e:d8:be:55:89:5f:42:
3e:75:e9:ce:df:28:c2:cb:0b:01:5b:67:f8:c0:5a:
a0:21:60:fb:c4:2b:c8:87:39:a6:96:f8:13:65:b6:
75:3a:29:3e:45:1c:d5:a1:87:08:8c:b2:fa:de:d0:
e3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FE:54:C2:E6:3D:6D:87:65:36:B5:D2:40:82:8A:96:6E:45:3C:D8
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:43:54:ab:26:d7:23:2d:7b:6c:ee:92:78:81:33:79:74:7d:
ac:13:db:fd:64:01:3c:50:bf:98:d5:06:1f:ae:5a:6d:17:46:
7a:bf:ac:e2:e8:db:60:80:c5:6c:df:1e:f6:b0:7f:79:ec:4e:
9d:49:0f:79:af:af:1a:c9:a2:09:b4:56:03:00:a9:4c:e2:d3:
1b:69:61:61:3b:2c:0f:ad:e3:53:63:e4:3c:34:d1:d9:30:b4:
6c:43:27:a0:49:0b:7d:da:c0:f6:a0:94:8c:9f:08:e8:d8:b4:
e1:a7:f4:d0:d9:0f:52:d3:b5:24:8b:77:fd:d6:d0:2b:18:39:
ab:04:7f:b2:f4:70:57:ca:04:eb:51:13:ba:f9:1d:26:9e:72:
28:b0:1e:bb:96:8e:77:16:9e:ee:42:07:67:4d:ae:15:2a:43:
4f:da:e2:57:fd:9b:c9:36:91:cd:db:ef:9a:4b:36:da:9b:d9:
41:9a:47:45:90:e5:00:0a:b9:73:eb:cf:c3:d1:19:ca:ca:bc:
88:39:3e:86:a2:cb:98:ec:e0:3c:48:50:87:b7:c2:0a:6d:97:
88:2b:35:83:4e:61:a7:fd:fa:38:e9:61:62:90:90:64:c6:7a:
15:d0:de:a9:ad:78:87:92:91:d0:3b:f8:a0:59:64:a2:22:cb:
22:c3:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:38:54 2025 by rpki-client