Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier: KB4qQc0aEqB4xItgt4x+pH4Cntvy0JeR0jwt7TlfHkI=
Subject key identifier: B4:D4:7E:9C:9F:B4:DF:61:81:49:3A:9A:61:A8:B1:65:F5:B3:E8:AC
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial: 01967A56A559051D60C933F72F7E25560CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number: 09BF
Signing time: Mon 28 Apr 2025 03:00:20 +0000
Manifest this update: Mon 28 Apr 2025 03:00:20 +0000
Manifest next update: Tue 29 Apr 2025 03:00:20 +0000
Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: 9HszaeS8CC2D5NDF4SHi0IX8+8lqGZ1aZQk4cstu8Ks=)
2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:a5:59:05:1d:60:c9:33:f7:2f:7e:25:56:0c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
Validity
Not Before: Apr 28 03:00:20 2025 GMT
Not After : Apr 29 03:00:20 2025 GMT
Subject: CN=b4d47e9c9fb4df6181493a9a61a8b165f5b3e8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:aa:08:7c:51:e8:85:6e:2b:cf:ea:45:8b:f8:
ee:ff:a9:4d:8c:58:f2:af:ed:d8:4d:11:a2:47:19:
d0:7a:69:4f:42:76:bc:60:bf:e7:81:a2:92:db:93:
58:0d:29:25:18:56:45:54:09:39:c8:66:8c:aa:0b:
41:6a:9c:94:41:73:47:6d:aa:75:6c:58:31:d3:4a:
df:ba:99:a8:11:ef:35:5f:76:ee:7b:fb:7e:32:64:
54:38:14:ad:b1:db:1e:8f:03:37:e2:55:7f:89:2e:
51:95:a4:c7:43:56:2c:13:90:b1:a9:12:24:f0:e2:
34:35:17:ea:22:89:2d:b0:49:f4:ba:85:ac:5a:f2:
c5:6d:fb:5b:2f:e6:33:03:6c:7c:55:f4:ec:08:87:
d7:b4:dd:f3:2b:9b:c1:d8:1b:b6:45:35:46:20:50:
76:72:d5:53:30:d0:f3:53:3d:e2:9e:2c:af:4a:da:
23:9c:a5:5f:ce:62:54:76:87:1e:0e:81:13:a7:a1:
05:c9:fe:d4:09:5b:fd:67:75:05:b1:dd:d5:6e:48:
04:69:2f:9c:b9:0f:2e:df:71:32:ad:7e:c8:ac:b6:
f2:1e:91:59:83:24:5f:bf:f5:e2:dc:ef:2d:47:a7:
ce:2c:9f:85:67:48:9e:0b:77:1e:bc:e9:51:85:32:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D4:7E:9C:9F:B4:DF:61:81:49:3A:9A:61:A8:B1:65:F5:B3:E8:AC
X509v3 Authority Key Identifier:
keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a9:3c:1b:d4:07:c4:8f:ab:92:b7:9e:9c:21:ff:c1:68:cf:
29:da:a0:6b:15:e0:ac:16:8c:58:da:8b:44:62:3a:26:98:a8:
0b:ec:27:0a:c0:2c:1c:5a:58:3c:a5:2d:34:33:e6:9d:d9:96:
6a:1e:a7:a3:19:33:fe:33:62:51:42:96:8c:fd:aa:43:ea:8b:
f5:93:dd:61:41:e1:02:3a:d9:a0:50:1f:12:cd:b2:ff:d3:c1:
8c:72:4e:92:37:77:fa:bd:94:2a:1e:4a:a7:4b:f2:01:17:06:
b7:b2:e6:90:29:2c:0d:c3:e5:38:af:dc:f7:a3:47:eb:38:63:
f3:3c:40:fe:33:b2:15:73:8e:44:7d:ed:3b:7e:f8:6d:cf:e4:
30:9a:e0:fb:86:3e:0d:e1:d3:fc:09:db:9b:94:3a:e0:42:0c:
aa:ae:ac:76:45:76:60:7b:d1:f9:3d:23:7a:b6:15:d2:85:7e:
ed:66:e1:e0:1e:10:5f:ce:57:48:28:79:b3:31:2e:75:f1:68:
af:5e:c6:e4:29:d4:21:b7:27:1d:c1:ff:73:38:82:a7:af:1b:
d9:e4:ca:e8:ae:3d:6f:29:36:14:77:c3:02:f8:a7:ff:0e:7a:
38:b2:4c:99:09:71:53:bc:c3:78:6d:87:1c:07:72:9d:70:72:
2b:ec:4f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:35 2025 by rpki-client