Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
File: f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft (raw, json)
Hash identifier: LNaCBdcFiTytj02kcjugSLIuzCI25JOfozDdFV5oedg=
Subject key identifier: 9B:39:EA:76:12:8F:D7:61:3C:D5:46:04:CA:F0:98:3F:13:BF:E1:02
Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Certificate issuer: /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Certificate serial: 0196771EDD0E4ACE180672D253192F2C16D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 12:00:33 +0000
Manifest this update: Sun 27 Apr 2025 12:00:33 +0000
Manifest next update: Mon 28 Apr 2025 12:00:33 +0000
Files and hashes: 1: AfxHVZhw7S6ij1s6ZJ4SMYoOQJc.roa (hash: LJW5Y4vZe3G/aI05TP+NUCTrdwpagASD2p69Aj70Dcw=)
2: f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl (hash: 82+BZouEJSs970H7EUuUtR0wRVKvNgyhyGFvG4pS044=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:dd:0e:4a:ce:18:06:72:d2:53:19:2f:2c:16:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Validity
Not Before: Apr 27 12:00:33 2025 GMT
Not After : Apr 28 12:00:33 2025 GMT
Subject: CN=9b39ea76128fd7613cd54604caf0983f13bfe102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:6e:26:5a:a6:32:a1:90:df:a9:ec:ee:aa:
8b:17:c7:6b:48:19:d1:af:91:2c:16:af:10:c8:66:
b4:42:3d:f2:d2:a9:4f:b3:99:97:e8:e7:aa:74:ed:
c1:21:12:1a:85:52:77:91:a0:46:30:01:28:8a:90:
ad:2c:82:ad:0e:5c:1b:49:a7:e6:c4:f7:fb:c3:75:
12:23:ea:df:ef:0e:72:18:f5:d2:bc:66:96:60:7b:
b8:29:8e:15:6e:aa:30:54:7b:53:73:8d:10:ce:49:
66:9d:c7:7c:ad:e3:80:25:75:d7:23:d8:42:20:bc:
3b:54:20:ef:c3:35:6e:54:f6:b3:38:c8:fb:b6:5c:
5d:17:39:84:ff:f4:78:06:1a:10:11:ff:d7:50:bb:
a5:8a:1d:1a:cb:fa:a7:1d:3f:73:74:8c:3c:57:e0:
9d:31:80:7c:71:6c:d2:a4:3a:83:89:6a:16:9c:08:
4e:b8:2b:9b:e4:34:f0:2f:7d:ab:5f:45:ef:ca:bb:
b0:d2:01:bc:cf:61:2e:03:6e:b2:92:0a:7f:b3:a3:
1b:d6:09:39:26:3a:6d:5d:f8:15:5b:2f:b4:94:1b:
41:26:e8:ec:f6:35:c3:28:6c:90:62:ba:a0:27:da:
37:0c:97:59:b6:a4:70:33:3a:a6:79:c5:36:cb:06:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:EA:76:12:8F:D7:61:3C:D5:46:04:CA:F0:98:3F:13:BF:E1:02
X509v3 Authority Key Identifier:
keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ea:e2:83:d9:d1:2a:0c:33:08:6a:03:e8:c4:ad:ba:04:83:
0d:0b:87:ed:0b:06:01:ca:89:ee:53:ad:cc:9d:49:eb:c0:67:
35:b5:5b:5e:80:a6:64:ce:d1:65:90:88:34:72:18:93:e3:d0:
63:39:88:e0:cb:d6:39:c1:72:da:4b:29:73:1b:a0:54:91:2c:
bc:f5:b6:f7:14:35:15:98:a8:22:ec:1e:83:c9:83:d9:b1:86:
1e:3e:8d:d4:b0:7b:e8:88:9c:1d:ba:f7:8b:9e:bb:52:e5:9f:
4d:fd:ad:ea:e6:52:85:45:cc:1d:d9:30:3f:fb:37:4c:73:30:
3e:26:ab:9e:fb:8d:d5:48:e4:a0:fd:e0:b2:7e:94:85:e3:21:
c8:93:a2:4a:5f:ba:2d:f4:99:2d:04:56:34:b3:f8:e8:7e:12:
ad:72:77:eb:72:5c:30:1f:32:e0:ea:0c:1a:39:35:8e:67:d0:
b6:58:f3:4a:7b:64:93:93:a9:3d:63:d6:df:28:7d:82:97:00:
b4:8d:7a:ef:dd:c3:43:ba:0d:07:cd:f4:fa:8d:57:09:ac:d1:
fa:07:23:5e:a5:be:25:ec:8c:60:cc:51:21:2d:01:43:09:9b:
e7:60:0a:4d:ea:1b:63:7b:49:9a:b5:eb:6c:e4:16:24:3b:8f:
21:8c:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:08 2025 by rpki-client