Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: QBLPQyI3CsCn33kyW1YaNBaKiuVXmnGQpin4rXn/vZ8=
Subject key identifier: 6D:53:95:FD:77:24:6B:8B:76:69:A9:DD:71:A1:8D:3A:98:47:66:60
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 019688B7C62C3241B35010B190EE5D1481BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 151D
Signing time: Wed 30 Apr 2025 22:01:07 +0000
Manifest this update: Wed 30 Apr 2025 22:01:07 +0000
Manifest next update: Thu 01 May 2025 22:01:07 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: Q5zE04gtQeUtXBsGSz0SwhrtwB0Mlmf3xePD7voyhDw=)
2: NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa (hash: Y5m51ite4A5LbDxUmGbQiHLBy8E1baqu+BrJUl8RNq4=)
3: VhwEbxUgJOza67qJ4K_i1Uqq3ms.roa (hash: aCXGgi5AYKAi5vfsurTRm09inwo+Mr6Oxc+TCBbgaZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:c6:2c:32:41:b3:50:10:b1:90:ee:5d:14:81:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Apr 30 22:01:07 2025 GMT
Not After : May 1 22:01:07 2025 GMT
Subject: CN=6d5395fd77246b8b7669a9dd71a18d3a98476660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:66:0f:06:c1:7c:15:28:f2:d7:f4:61:ac:
ec:f3:82:0c:d7:83:28:45:db:9b:e4:e5:9c:26:ac:
66:07:de:e3:42:a6:a3:52:98:82:9c:5a:f5:c0:72:
fa:59:ba:dc:7b:9d:71:c5:c6:7a:15:fe:70:c9:8b:
85:34:35:7d:38:3b:d6:f6:43:a0:02:cd:66:9c:5e:
ab:7c:d3:cf:3d:c3:0d:87:77:74:f1:32:e7:67:89:
3f:1c:d5:58:98:1c:fa:47:ad:c3:f0:b2:cc:b1:41:
f8:47:cf:24:f9:2c:9e:4c:24:9d:fc:6c:90:3d:e8:
0c:a5:b9:16:1e:3b:55:99:2a:77:50:cc:78:c5:14:
64:3b:8d:83:07:5a:6e:2d:be:ea:3c:fa:d5:14:47:
99:d5:d3:68:a6:4b:e0:6e:b1:3e:df:93:60:df:2f:
f2:42:86:1c:3a:33:f2:b6:74:8b:77:f3:6c:9d:2c:
4d:f7:9a:d5:f2:49:14:ff:c4:7b:73:cc:6e:7a:b9:
50:eb:cc:36:ab:78:59:0f:24:cf:4d:25:9b:06:3f:
69:07:ec:d6:2c:3e:62:78:40:68:cf:a2:f2:62:06:
1b:a7:b9:7d:e4:d1:b3:ac:c9:e5:13:50:80:00:dd:
af:1f:1c:29:eb:11:c1:37:31:65:26:a0:c5:46:eb:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:53:95:FD:77:24:6B:8B:76:69:A9:DD:71:A1:8D:3A:98:47:66:60
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:96:e9:74:82:9f:7b:50:eb:33:45:bc:f8:fc:41:e2:d6:cc:
d2:a2:74:b0:24:70:84:4f:c8:9f:09:9c:93:0c:55:49:19:a8:
f0:99:9a:e1:57:1e:34:d5:d2:73:fd:a6:81:81:8a:7b:30:c7:
3f:09:26:e7:d0:67:03:df:d1:5f:45:9c:c9:af:bd:93:0e:f3:
67:4c:88:88:4e:dc:c2:5c:78:3c:6e:aa:c1:ed:c5:08:d1:4e:
18:8a:8a:ae:4f:85:d6:a1:b2:b2:3c:6d:7a:eb:21:c6:2b:16:
d1:4f:32:03:f7:5b:27:2e:03:ef:65:59:d1:bc:d6:eb:cb:2a:
1b:cb:13:f2:13:78:df:cd:dc:b2:93:b1:14:71:66:cc:a5:ca:
a1:77:0a:60:d4:e4:0a:3c:ae:7b:9f:71:4a:ef:2a:3e:e8:9c:
48:85:90:38:be:d4:f4:30:12:d3:ac:57:1f:c3:2f:c7:ed:3a:
77:c5:62:ce:4a:b5:f7:01:65:0d:15:98:27:3d:c7:a6:8e:e4:
54:5d:49:ce:b4:45:29:59:eb:57:2b:e7:14:36:63:e9:58:a9:
cb:61:2b:e7:d5:1a:44:4c:93:f1:3f:f7:df:a8:fe:1f:80:71:
0e:24:f8:46:1e:46:f5:cc:14:31:2b:cc:d6:4c:ba:f6:2b:a5:
f4:b4:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:18:08 2025 by rpki-client