Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: 6S+CoWXnMgPTWBJxw8qY21UWSHuF6WgOJnJJydBqI7M=
Subject key identifier: F9:06:9D:75:C2:D1:41:6F:50:2E:8E:8E:F6:A2:28:02:81:0D:54:1D
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 019676B13D818240A0ED369BD43D6ED15E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 10:00:49 +0000
Manifest this update: Sun 27 Apr 2025 10:00:49 +0000
Manifest next update: Mon 28 Apr 2025 10:00:49 +0000
Files and hashes: 1: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: KnuCNZCBw2PBgXrfBIA+Vg3Lzscjn2PqBzZgAlcJoe4=)
2: UipKreH4zZ-JKObDVFkMEdQTy8E.roa (hash: 2lFb7AbIOkpByp+mzj8V6olwzUC3cjME2INFe+siQFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:3d:81:82:40:a0:ed:36:9b:d4:3d:6e:d1:5e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Apr 27 10:00:49 2025 GMT
Not After : Apr 28 10:00:49 2025 GMT
Subject: CN=f9069d75c2d1416f502e8e8ef6a22802810d541d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:f6:87:47:1f:74:ee:6c:58:d0:9e:a1:f6:
57:80:16:06:48:26:5e:a3:9c:61:d7:01:9f:47:8b:
88:22:06:a5:ed:c6:e3:65:cb:11:1a:7f:ed:7c:47:
56:6a:69:41:2d:4a:11:42:64:88:15:67:67:f8:85:
2d:57:80:12:69:b1:8a:44:1c:7e:94:a6:b5:b8:0d:
14:4c:e4:22:06:aa:64:07:dc:fa:58:cf:32:2c:d3:
f4:85:3d:d3:76:80:f6:dd:c9:31:d8:60:40:b6:a8:
de:74:1f:cb:49:33:ed:be:95:d6:04:6a:2b:f5:f0:
a3:0f:86:f9:35:6b:1b:13:e6:9c:a3:36:ac:7e:cb:
1a:4d:45:16:bb:fa:7a:af:35:ce:67:85:8f:dc:13:
2a:e0:3f:ab:40:89:47:f7:3f:81:f2:28:98:95:3e:
a9:8b:59:24:56:9d:cf:8f:c3:ef:9e:8e:b9:ea:79:
4a:16:bd:0d:fe:a9:0f:f0:87:13:62:02:6b:f6:db:
1d:dc:08:b6:ba:f5:a3:83:d7:15:b5:dc:42:65:59:
1a:42:d8:8a:b1:c9:cc:e6:01:c0:a5:19:05:71:d5:
ac:1a:58:9b:08:df:f4:6e:b2:43:cb:fb:b1:54:2f:
b7:19:6f:c4:a3:c0:7b:a9:30:2e:25:9b:8c:9d:ff:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:06:9D:75:C2:D1:41:6F:50:2E:8E:8E:F6:A2:28:02:81:0D:54:1D
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8f:b1:f5:8a:c6:fc:8d:8e:fa:71:72:23:14:33:c1:d6:70:
9b:24:2b:1c:6b:a0:7d:d9:d6:11:5d:cb:66:3a:3f:64:87:9e:
f7:92:3c:3b:df:5c:df:17:16:84:91:c7:07:35:00:d6:71:33:
b7:fa:16:58:62:27:33:0c:7d:b0:b8:b6:9f:e6:af:35:95:db:
03:af:5c:18:5d:e2:68:56:ee:dd:5e:ce:18:3e:ab:8a:8b:5b:
31:34:0c:5d:b7:1d:76:e3:17:43:4e:53:70:c5:dd:e8:9a:fc:
1b:b2:78:ac:92:cf:26:92:56:47:26:6e:2c:7e:3a:de:4b:c6:
7e:8b:53:ab:ba:48:25:94:8a:35:10:17:65:c5:8c:95:7b:6c:
05:f9:22:50:27:9b:9a:c2:2f:a3:0d:58:3b:22:dc:93:cd:72:
53:e4:10:0f:44:c5:93:e0:63:2b:d1:62:e8:d0:bb:34:41:b3:
57:26:a2:90:01:29:39:83:c3:29:9b:d0:bb:c9:9b:34:14:4a:
2b:a6:14:3a:07:7c:2d:63:cf:e0:79:53:d0:29:58:e5:82:3a:
ee:0e:e5:98:62:4a:b9:d3:50:3a:c6:75:39:a8:06:5d:a1:c8:
e2:dd:df:52:85:93:a8:90:e6:64:ed:59:3d:f9:e1:31:64:3f:
90:81:48:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:25:19 2025 by rpki-client