Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File: _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier: 6qADwII7wJfYIEEsrn8imEpBtx4MaQHTG6ADW0cqy1A=
Subject key identifier: C7:E7:F9:12:03:B4:A1:69:48:7F:66:36:1C:61:AD:82:B5:63:9D:E0
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial: 0196741EA94DF7E1D4AFE6048310BF7AA670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number: 12C3
Signing time: Sat 26 Apr 2025 22:01:28 +0000
Manifest this update: Sat 26 Apr 2025 22:01:28 +0000
Manifest next update: Sun 27 Apr 2025 22:01:28 +0000
Files and hashes: 1: GKGUA1ULBuEBg6UZcKqTCkNmhrM.roa (hash: S+MOcu2hV7fbEQM0gv8ckh0dyXeXiOXULnIXULZ3i+k=)
2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: ZxLPBjQasi5AJ4v29CxjqmRv1uVDWAbAjLMGgb2k5k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:a9:4d:f7:e1:d4:af:e6:04:83:10:bf:7a:a6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Validity
Not Before: Apr 26 22:01:28 2025 GMT
Not After : Apr 27 22:01:28 2025 GMT
Subject: CN=c7e7f91203b4a169487f66361c61ad82b5639de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:f0:88:4b:e1:1c:43:83:ce:11:f9:9b:8d:
b8:df:ed:2d:65:46:48:1e:42:90:9e:1a:90:42:63:
0c:84:69:34:65:d1:45:1b:25:54:8f:98:54:13:3c:
4d:96:00:73:ef:e6:17:27:69:c1:e4:27:c7:36:78:
57:df:61:44:22:2e:9c:f3:ea:c7:0d:93:3a:94:69:
9c:12:55:b3:5b:93:01:8a:23:03:d8:73:9f:10:94:
71:c1:01:f9:36:09:a3:1e:ff:c8:b3:7e:3f:6f:c7:
95:db:64:5c:6e:f7:b4:e0:38:e7:c7:d2:48:12:db:
f5:b9:1b:f5:79:ff:e2:9d:a5:af:7d:cc:da:cb:11:
cf:d4:83:5d:67:35:55:5d:11:45:3c:43:27:35:55:
85:a5:ff:97:36:6b:1a:ba:dc:ea:eb:fd:d6:1a:7d:
8e:f8:f4:7e:09:3d:35:f0:8b:7a:34:a8:33:96:08:
be:2d:a8:aa:0c:5c:80:6a:e8:10:18:1a:32:68:e6:
7f:8d:ee:f6:23:72:01:18:6c:23:14:ea:2d:e6:2c:
28:b3:3a:af:c7:36:e7:c9:a2:a0:52:dc:f3:df:07:
2f:8b:ee:38:29:11:ee:e2:ad:52:a6:da:a5:5e:59:
c9:20:92:f7:c2:6c:ae:a9:fe:a9:fe:e9:0e:ef:04:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E7:F9:12:03:B4:A1:69:48:7F:66:36:1C:61:AD:82:B5:63:9D:E0
X509v3 Authority Key Identifier:
keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:04:80:1f:95:7d:dd:64:70:73:e9:aa:01:25:4d:b1:64:35:
0f:a1:25:d9:ad:35:d8:2a:8c:d2:60:22:c5:2b:10:6a:95:78:
3c:16:92:18:52:78:43:c5:18:d7:90:c4:44:37:69:09:67:c5:
ed:50:a8:a6:b5:e7:79:d8:af:a5:f0:94:5d:0f:b8:7c:32:e6:
cd:5a:8e:27:8a:1d:47:05:35:93:e9:1a:81:47:3c:a6:7a:ae:
1e:d5:77:a0:ca:d3:a9:db:bb:01:01:e8:c6:96:dd:ae:85:ca:
bb:0a:13:26:26:42:64:93:14:0a:cb:68:ee:dc:c5:23:e4:d7:
02:24:3b:ec:a3:60:ab:d9:3e:51:c2:9f:97:f2:cd:26:66:26:
6e:b4:68:80:2e:72:51:44:df:df:92:4c:0e:c1:62:5d:af:27:
2d:9e:63:7e:09:cc:c8:9f:3f:d3:5b:43:3b:ab:91:f9:50:90:
52:f9:35:a4:32:3d:07:b3:3d:59:7a:59:06:18:d1:94:40:c6:
97:c5:9c:4e:fb:da:df:2a:5e:3b:75:6c:55:3d:6b:ee:f0:b0:
6c:88:19:a1:71:27:04:e7:e5:c0:77:13:6a:30:d5:1e:fc:de:
30:bb:29:e8:a5:2e:cb:a2:a6:f4:dd:e3:59:01:cb:82:ca:e7:
23:ec:12:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:41 2025 by rpki-client