Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: 0N2D5v8PDDynVFhm5ZTF66CdQgfxcTj2OfPeOedQSpg=
Subject key identifier: E0:57:83:10:C6:77:CD:FC:06:8E:EA:D8:B9:8C:4F:6C:88:2B:C6:2E
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 0196778CA42AC0C4FB141355C7B9ACCF9361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 09D6
Signing time: Sun 27 Apr 2025 14:00:27 +0000
Manifest this update: Sun 27 Apr 2025 14:00:27 +0000
Manifest next update: Mon 28 Apr 2025 14:00:27 +0000
Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: uiHHM/WroM3a/IVQvnlHjlhS7uk79KbOeirlLJIHZ2A=)
2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:a4:2a:c0:c4:fb:14:13:55:c7:b9:ac:cf:93:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Apr 27 14:00:27 2025 GMT
Not After : Apr 28 14:00:27 2025 GMT
Subject: CN=e0578310c677cdfc068eead8b98c4f6c882bc62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:59:e1:cf:b2:3f:28:42:04:b7:50:a5:10:
2b:17:cd:8b:03:6b:95:8d:19:c0:5d:e8:ef:34:58:
ed:f7:27:38:17:82:68:b2:ae:1b:13:62:67:20:01:
8e:7e:d5:39:c0:9b:fb:7e:d6:90:20:06:84:38:84:
14:d8:1d:65:fd:40:c5:a2:28:8f:da:a7:72:c6:11:
6a:5d:7d:de:a2:52:78:9b:4c:ae:41:70:76:04:f6:
ad:49:0e:0b:7f:c4:d5:5b:1c:ed:fd:97:09:8b:a3:
0d:ad:56:0b:1f:5d:5d:4d:fa:93:7a:cf:67:bc:22:
3b:46:62:36:b8:28:47:a2:c4:99:83:83:65:0b:cd:
c6:e6:7c:8e:5d:8e:7a:f3:55:88:96:c9:30:41:15:
af:83:92:2c:8f:cc:a7:e9:bc:b9:18:f9:f6:ea:cd:
2e:46:82:16:4b:4b:72:66:69:2d:51:7c:9a:67:1b:
44:45:e0:bd:ad:86:aa:57:51:6a:07:07:c6:8c:9c:
69:d1:f5:d5:29:d1:62:1c:c5:26:a6:89:3a:26:ea:
cf:d7:9c:6e:80:cb:16:ce:26:5c:6f:50:93:52:75:
d2:0a:1c:f0:84:38:e8:b7:39:92:20:e9:db:52:f5:
01:5d:07:77:72:5f:c1:6d:bd:e4:db:a7:d7:aa:b5:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:57:83:10:C6:77:CD:FC:06:8E:EA:D8:B9:8C:4F:6C:88:2B:C6:2E
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7a:89:ca:7e:8e:36:7e:ad:fe:d0:5a:3b:f4:d4:9b:0a:c5:
7f:a7:5d:d4:d5:b9:15:d0:e3:5e:5f:1d:4b:a9:f7:c5:bf:58:
ed:ca:a5:40:79:ca:27:21:ef:1b:de:4e:5f:b6:83:67:04:e9:
33:b6:f0:95:25:12:0f:51:9b:5c:74:46:6f:75:e4:e5:df:06:
4e:55:f2:91:d3:5c:7a:a9:67:99:d4:48:26:33:47:e6:89:a8:
3b:16:73:11:1d:f5:a7:17:52:16:94:61:dd:72:f5:39:25:6e:
4f:8b:9e:25:d4:7e:23:dd:2e:77:78:01:cb:42:d9:61:ae:ce:
67:38:eb:f5:30:ff:27:13:34:d1:80:22:0d:b7:de:ef:70:88:
ce:74:b6:3b:91:fa:94:f6:2f:5e:fd:ec:3f:67:71:81:8c:ad:
d4:7b:6a:84:20:a5:28:40:94:a8:94:1e:0f:10:37:81:aa:94:
67:e8:1b:6a:b7:5d:32:83:cf:92:37:b1:f5:84:ef:67:48:9a:
46:dc:9b:76:77:38:37:d3:9f:67:82:9e:50:85:b1:96:b0:14:
4b:6b:e9:8d:c9:93:c2:af:55:9a:75:4e:39:75:6a:de:de:cf:
bc:88:c9:4c:e2:94:b0:d6:24:20:3a:70:0d:4c:65:c2:3b:10:
20:6c:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:04:15 2025 by rpki-client