Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
File: fIwTcd1q_V_XnqmE2j-9oblK_iM.mft (raw, json)
Hash identifier: +lUw3cW/KApP4GJ7HSQLiYn964a0Dwqm474u7CnS830=
Subject key identifier: 90:29:D2:BF:08:B4:D4:6D:F8:43:0D:DA:3B:C4:1B:6B:C4:DF:8F:DE
Authority key identifier: 7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
Certificate issuer: /CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Certificate serial: 0196764359C5A5B574D8B4F5010716904330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 08:00:47 +0000
Manifest this update: Sun 27 Apr 2025 08:00:47 +0000
Manifest next update: Mon 28 Apr 2025 08:00:47 +0000
Files and hashes: 1: EeK6cauICbjiVCSXw89JJKbgWuI.roa (hash: dQibGt3eUNBx7bxOeGKDFYcaj4qO4S1imLS16SxshcI=)
2: fIwTcd1q_V_XnqmE2j-9oblK_iM.crl (hash: WuA3HAtDC2DnBxiPB0V7JI1cDa4afHPuUEbqFOlvZew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:59:c5:a5:b5:74:d8:b4:f5:01:07:16:90:43:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Validity
Not Before: Apr 27 08:00:47 2025 GMT
Not After : Apr 28 08:00:47 2025 GMT
Subject: CN=9029d2bf08b4d46df8430dda3bc41b6bc4df8fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:7f:9a:d6:4b:b3:e5:1b:f6:6c:88:88:25:
68:3b:1e:94:45:85:39:c0:50:16:57:6a:26:ab:c4:
67:f7:12:14:28:ca:54:28:e3:52:47:f8:47:4a:37:
ef:cd:f8:cb:87:92:59:38:7b:37:29:78:f7:64:20:
5f:79:22:2e:4c:29:cb:09:70:40:77:9f:c9:2f:02:
63:89:71:c5:e0:b8:29:2c:37:76:7c:e4:8f:43:88:
d2:ea:b7:35:01:89:0b:9d:50:ec:db:af:b8:f3:37:
8e:4e:60:09:a0:e3:8f:86:05:36:34:cd:14:7e:be:
e1:58:16:b3:9e:cd:b7:9f:1f:c8:b3:f0:af:ed:46:
e0:a8:9f:51:52:6f:ed:07:3b:73:f6:c7:43:d4:98:
35:dc:5b:d9:ea:0a:43:94:76:0e:d6:48:b9:59:8b:
77:61:59:62:50:90:89:49:f8:a3:19:a5:63:60:46:
a7:e7:52:2f:07:d8:e0:e3:b7:e1:4a:15:25:ab:c7:
06:43:ab:81:9f:76:0c:83:5b:89:0c:23:88:2c:75:
ec:80:9d:de:99:c1:72:5c:8d:26:a4:10:6a:03:6a:
e2:5a:1e:10:34:46:76:40:88:2f:77:3a:c9:bd:c3:
5f:1f:2d:4c:19:df:ee:96:24:97:16:b7:f7:51:64:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:29:D2:BF:08:B4:D4:6D:F8:43:0D:DA:3B:C4:1B:6B:C4:DF:8F:DE
X509v3 Authority Key Identifier:
keyid:7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f5:09:a3:c2:b9:c1:99:ed:fa:84:ce:eb:96:18:11:57:d7:
8c:dc:87:1e:a0:5c:7a:b5:08:4c:60:4b:c4:42:4d:0e:d2:a4:
c4:f8:49:36:bc:fe:6e:d3:3b:48:12:87:98:69:09:62:03:ed:
82:87:56:a4:3a:1f:89:c7:67:4d:4e:e5:dc:19:37:2b:19:a2:
f1:93:2b:f9:48:ff:f1:20:2d:67:ec:d5:cc:de:74:b5:78:94:
c2:04:59:77:77:22:c4:e9:d2:6d:3b:0c:e6:41:3d:16:d3:70:
65:5f:77:36:02:99:55:5e:00:e7:3d:60:ec:96:03:bc:9d:f2:
ae:25:6b:45:57:b0:de:29:ae:ba:b2:1f:80:80:eb:b7:43:2c:
1e:e0:82:ce:0b:40:60:69:5c:6b:9e:ae:fe:fb:8e:f4:6b:70:
19:26:f0:a6:fb:da:1d:05:37:bd:6d:a7:25:5d:32:63:53:5f:
0c:7e:e8:b2:ec:53:c5:d6:d4:1c:a1:50:82:1b:50:6f:44:ec:
61:3f:23:17:f6:a0:99:fc:b9:bd:c3:96:b6:3b:19:b8:62:16:
b1:87:44:f0:35:ce:df:bb:78:0a:e3:2c:89:c4:17:cc:53:27:
41:d8:db:cb:9a:86:2e:bb:39:12:59:79:f3:e0:a7:5d:f1:55:
4e:99:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:22:17 2025 by rpki-client