Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File: FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier: +4fVPO7V4g8gSBE4U+8z0ajML6UISVYpGX3btdaAJCY=
Subject key identifier: 21:4E:19:98:60:F8:67:C0:0E:77:BE:96:FE:1B:80:B2:89:62:F9:1B
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial: 0196881220E1D0F3D371C91EAD49AF3A5E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number: 0D9E
Signing time: Wed 30 Apr 2025 19:00:11 +0000
Manifest this update: Wed 30 Apr 2025 19:00:11 +0000
Manifest next update: Thu 01 May 2025 19:00:11 +0000
Files and hashes: 1: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: FDub73c+b+DwqXVgnV/Uz3jtODBc6nlM+XEygAHzERE=)
2: saR7C8jPhSxxp1U0l0fw1iLpggA.roa (hash: YzILylPp9VZQ/IVzqGiVAC4yp8xtNGEqB65NyOh5ynQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:20:e1:d0:f3:d3:71:c9:1e:ad:49:af:3a:5e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Validity
Not Before: Apr 30 19:00:11 2025 GMT
Not After : May 1 19:00:11 2025 GMT
Subject: CN=214e199860f867c00e77be96fe1b80b28962f91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:70:96:27:cf:a2:bb:9d:98:86:f4:4f:60:
4c:73:fd:31:96:64:5d:4b:59:76:c8:4e:52:29:06:
27:4f:20:6d:9b:04:94:5f:03:8c:d5:6d:9a:b2:78:
14:ca:ed:46:65:21:f8:62:bd:fd:72:cb:2c:58:3e:
4c:08:18:a4:91:4b:77:00:e6:af:dc:ff:1a:52:e8:
93:26:03:97:7f:10:f8:de:70:a2:96:5a:c3:de:91:
16:02:b6:27:b5:bb:6e:7a:c7:84:af:95:6a:40:84:
e3:8f:be:22:fe:4b:28:41:15:04:00:9b:08:c4:f0:
72:ee:cc:cf:73:2b:a8:f3:72:ba:c3:a8:1a:3a:c2:
81:45:51:35:5a:95:bd:2c:19:58:6c:5e:dc:7b:40:
e7:37:e1:5d:1d:85:6c:a4:fc:5f:12:5c:4d:a6:82:
70:3f:a1:b4:a0:7c:92:cb:cb:27:4d:47:19:38:f0:
6d:ed:52:58:4d:68:b4:91:a5:6f:92:a3:f3:1d:46:
a3:fa:58:4b:53:95:47:76:ce:68:16:ec:ce:df:45:
b8:fb:6b:99:38:dc:dd:74:7f:a9:34:56:12:42:49:
fa:c6:be:70:a9:9c:38:37:d7:3d:e6:55:1f:87:92:
97:b8:33:d3:a2:50:fb:2c:c4:0c:7d:5f:30:78:11:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4E:19:98:60:F8:67:C0:0E:77:BE:96:FE:1B:80:B2:89:62:F9:1B
X509v3 Authority Key Identifier:
keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c2:88:54:cf:c9:28:b4:c6:06:3d:ff:06:52:c1:bf:b3:0a:
47:4b:44:6a:7d:f3:f6:f7:09:cc:c8:00:03:b7:02:53:75:6f:
40:a7:92:ae:95:23:7f:95:46:62:1b:20:d8:65:91:29:1c:0b:
35:26:f1:75:2e:9c:4d:91:fc:01:35:66:cb:bb:65:0b:f8:b7:
d2:fa:ac:81:5a:49:5e:07:db:c8:e6:48:5e:75:f3:ad:5a:85:
e5:0d:bf:df:fa:3f:4d:da:a8:01:4e:0d:6c:b1:e9:4f:ee:8e:
51:54:85:f4:bf:df:09:c4:2c:10:02:db:c3:20:d8:e7:da:17:
96:ed:02:77:c4:86:d6:ae:09:4b:37:55:9b:eb:96:9c:d9:c8:
75:37:6e:40:84:e9:9f:06:45:e6:8a:82:b3:20:55:f5:53:b7:
f1:6b:fb:fa:cc:3b:de:b1:0a:79:01:ff:6a:c0:01:10:fc:e8:
e7:68:4f:f1:68:6a:63:73:61:d5:95:49:c9:67:44:82:53:39:
83:ba:20:27:77:f3:3a:6d:e7:d3:06:3c:ef:03:3f:dc:6e:ce:
cb:61:11:2b:42:4f:c1:4c:9e:87:16:87:ef:9b:92:74:03:59:
d0:73:20:97:58:6d:c7:1b:dc:5e:54:c8:6a:4f:5f:25:87:7c:
89:60:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:30:02 2025 by rpki-client