Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
File: F5meIRkUpo24Pq8_f9OExT50dFU.mft (raw, json)
Hash identifier: asOD5o3q/Ve97hWIl7R0Vwf9+y/0831soU3ZFe6IvHc=
Subject key identifier: 6F:9A:93:3D:3F:6C:6F:DE:EF:1D:6C:1B:2A:0F:8A:1B:35:53:D4:FA
Authority key identifier: 17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55
Certificate issuer: /CN=17999e211914a68db83eaf3f7fd384c53e747455
Certificate serial: 0196808FA96CD01ABEF7CFEA90311DD8EEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
Manifest number: 135D
Signing time: Tue 29 Apr 2025 08:00:20 +0000
Manifest this update: Tue 29 Apr 2025 08:00:20 +0000
Manifest next update: Wed 30 Apr 2025 08:00:20 +0000
Files and hashes: 1: F5meIRkUpo24Pq8_f9OExT50dFU.crl (hash: l1F+0JSoMO9C8ZGGgYwmOvq6i+pDipKvSRS/MOE8FzA=)
2: jdjC0ww4NA_4Jmou2NIqk7PauVQ.roa (hash: DpdKiPWViVyeUlQa6RYjsV7wbTabm/grnxVTUMHIZOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:a9:6c:d0:1a:be:f7:cf:ea:90:31:1d:d8:ee:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17999e211914a68db83eaf3f7fd384c53e747455
Validity
Not Before: Apr 29 08:00:20 2025 GMT
Not After : Apr 30 08:00:20 2025 GMT
Subject: CN=6f9a933d3f6c6fdeef1d6c1b2a0f8a1b3553d4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:20:60:0d:c2:74:f4:08:cb:39:83:2d:ec:
be:cb:2a:78:77:78:31:a1:43:22:20:11:16:1c:4d:
69:0c:f7:7b:d1:00:e9:96:2d:ce:e2:f7:25:92:f6:
6a:9e:f0:26:9e:70:bc:99:f0:6c:80:8f:42:25:f4:
76:df:b8:d9:e2:20:8f:d1:f6:cc:f5:42:9d:63:0d:
a0:65:47:cf:e1:e5:24:bf:8a:e0:3a:9b:ae:34:f8:
fb:25:93:eb:a7:79:ae:21:84:52:23:92:e2:d8:93:
43:3f:e3:ce:83:28:9a:7c:60:59:6b:74:2f:51:01:
a7:3c:32:a5:9d:35:f6:06:22:96:8f:be:cc:f1:ef:
4c:ec:d1:a6:6e:1c:f7:4a:38:71:f0:91:0e:b8:36:
0d:74:70:83:cf:31:ab:8a:01:c7:44:62:f8:af:96:
98:e5:66:89:c7:13:b4:ac:f0:1f:2a:2c:9a:df:06:
f1:35:7b:87:ac:2f:4e:f7:6c:49:46:fb:03:98:50:
b5:63:28:b2:34:d0:91:4f:93:24:46:17:70:40:8c:
87:1b:dc:76:41:3e:ab:4c:c8:28:7a:2b:7c:bf:83:
e5:82:2f:79:6f:76:78:11:79:db:fa:3e:35:43:41:
a0:83:f2:6a:fd:fc:8f:b2:3f:66:88:54:4f:e2:77:
0a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9A:93:3D:3F:6C:6F:DE:EF:1D:6C:1B:2A:0F:8A:1B:35:53:D4:FA
X509v3 Authority Key Identifier:
keyid:17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:61:07:1c:18:7e:0b:26:27:74:1e:3b:12:11:3c:24:ea:d8:
ee:ae:d8:99:86:27:68:02:e2:1f:99:73:a6:db:35:8c:48:66:
50:e9:24:58:0c:b9:2e:fb:fc:21:18:aa:1f:39:10:39:f0:47:
20:70:2a:00:9b:04:c6:d4:28:5f:d1:9d:b1:9b:64:53:6c:bc:
a7:0c:c8:57:4f:cc:c6:d5:00:2b:ea:7b:4e:59:d9:9e:76:79:
dc:8d:b9:15:41:61:b1:8c:19:6b:e0:b4:e7:3d:ea:f8:e5:f7:
b5:5d:66:a2:32:12:50:96:45:40:b3:26:a6:02:66:af:68:50:
f6:bf:22:26:bb:1e:cc:23:1d:4e:a0:d0:9c:39:ee:92:32:2e:
56:42:3d:5e:39:4d:14:a7:ff:60:44:cd:31:24:c7:9d:06:75:
ca:f0:e0:28:20:d5:0a:cd:fb:95:fe:0a:d1:30:24:23:06:50:
a1:56:1d:20:72:1b:b9:ce:ca:4e:cb:c0:4b:d5:99:35:5a:0f:
fc:33:3e:bc:58:be:3d:50:49:14:b2:89:41:18:24:c7:06:3f:
68:c6:1b:92:19:1a:36:c2:75:c8:e9:11:21:bf:9c:8d:7c:df:
9a:ca:90:30:99:31:b6:33:3a:0a:25:95:3e:4c:3f:ab:07:4e:
75:1f:0f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:16:36 2025 by rpki-client