Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: V7J0yP6c3oY2+8Hmqi6ZBp5QuJTnVAhJ94vxsmWVmD4=
Subject key identifier: 80:FD:B5:5F:57:A9:FE:E2:46:58:DD:7A:FB:D5:7A:EA:C4:1F:4D:99
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 01968A382A5221E0FC30B4B35890974FBD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 14AB
Signing time: Thu 01 May 2025 05:00:58 +0000
Manifest this update: Thu 01 May 2025 05:00:58 +0000
Manifest next update: Fri 02 May 2025 05:00:58 +0000
Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: JFN5ExbIS345iO/LoS3DcH99oj1MCniJYV/2JpyJkRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:38:2a:52:21:e0:fc:30:b4:b3:58:90:97:4f:bd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: May 1 05:00:58 2025 GMT
Not After : May 2 05:00:58 2025 GMT
Subject: CN=80fdb55f57a9fee24658dd7afbd57aeac41f4d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:e9:52:ef:13:1b:51:48:39:a0:08:9b:e9:
b6:2a:08:82:63:21:2d:38:42:5e:3e:e6:41:58:47:
00:ee:67:77:c8:e7:19:08:35:48:a4:f5:f3:f8:3e:
39:2f:a2:be:a1:11:53:60:56:97:84:1d:d1:9d:b1:
24:a8:e8:24:38:4e:72:c2:98:8a:b1:86:19:c8:2b:
1e:9b:23:d7:34:7a:e4:6e:80:1a:5a:94:16:9d:fe:
c1:ff:1a:82:08:d2:81:19:d2:04:8f:aa:42:24:17:
a6:2d:89:28:ad:ee:14:88:91:8b:f1:65:8d:96:36:
9f:1c:60:fb:b0:c2:c2:6a:44:fe:9d:23:bd:6c:bf:
19:fb:54:bd:64:42:6f:bb:06:05:e4:3c:65:f6:a0:
ac:09:38:24:8d:66:3c:8a:ce:49:ed:18:06:cf:44:
52:63:ae:41:27:f0:c1:19:27:12:36:75:49:ea:b2:
42:20:39:c2:7b:c1:b7:76:e5:8b:b6:b8:1c:5d:c7:
d6:d1:a9:3c:05:22:07:9d:bb:22:6b:e7:f1:7b:a4:
b9:e7:03:b3:25:b8:a5:83:e2:cf:f6:47:8c:77:f1:
cf:ef:94:fc:eb:a7:2e:38:9b:9f:03:6f:35:5c:2b:
e7:c8:19:dd:76:a4:5f:3a:6e:24:16:e1:18:94:bf:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FD:B5:5F:57:A9:FE:E2:46:58:DD:7A:FB:D5:7A:EA:C4:1F:4D:99
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:09:ba:b4:45:32:cd:52:80:0b:e7:c8:04:e6:52:af:ee:ba:
e2:70:81:0f:dd:51:f3:db:6b:20:d4:d9:62:46:0d:ed:2b:fb:
4a:b2:9a:bb:78:dd:c3:58:12:3a:41:0a:6f:c3:c6:d5:4e:8d:
72:ba:4b:51:7a:9b:cd:1b:a9:1c:95:4f:3e:ab:54:b7:80:e3:
b8:d2:8e:66:9f:3d:83:ff:56:3b:1c:eb:88:7f:af:48:46:fd:
c8:db:79:03:41:63:7b:f0:7a:eb:be:49:b9:e9:7a:44:0e:2a:
fd:4d:56:51:4f:5a:cb:51:43:9f:2d:85:80:1e:72:29:da:11:
ee:72:62:c3:90:89:20:f9:20:5c:e2:48:42:84:e8:ed:58:4c:
4a:bf:d7:37:2d:9a:43:58:56:ca:48:49:73:6d:06:20:32:e2:
aa:98:ac:bb:23:8c:f3:0f:26:20:81:17:39:47:ad:0d:a2:f3:
e9:ee:a6:cf:b9:a3:6b:51:88:09:77:07:5e:90:bf:2f:15:70:
6c:25:ba:6c:a3:0c:a0:a1:91:ce:79:8e:71:4f:8c:ae:54:b0:
b9:fc:2e:75:56:40:bc:75:aa:0b:5a:94:2d:6d:a3:5f:2a:68:
e0:a5:22:d3:ff:e9:cf:95:7e:da:48:75:c1:c4:a2:e1:2b:d3:
f6:c8:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:07 2025 by rpki-client