Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File: _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier: gKbNZvfnaiBr+8DD+iT1Kz7GAsX69HxqGWeCTh50MLw=
Subject key identifier: 59:5B:EA:37:5B:F7:94:ED:F8:D9:DF:79:8B:4C:58:4F:C7:CF:27:9A
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 0196753091DBBDA4050E4493154873675209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number: 143F
Signing time: Sun 27 Apr 2025 03:00:39 +0000
Manifest this update: Sun 27 Apr 2025 03:00:39 +0000
Manifest next update: Mon 28 Apr 2025 03:00:39 +0000
Files and hashes: 1: Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa (hash: aS0+JitqaJojivrvqxvVApMU+OsS1deS84dQZzA8Tnc=)
2: YaQeUaPm7DT5i6DIJSP2oPk6asc.roa (hash: Xe3hwh1S9IdquQYZSTUC+SBDReDUDM3Us/vWljHz8KQ=)
3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: LjgK7YgfXXMWQ6G/XvnAxoFLoGsx+G8JVMXNB+R/Dq0=)
4: b3VRvUBoZO6M6gjGueykiziKPRc.roa (hash: VBIsT3fCceZgm7iHJXEBP5n/OLHn0+1WoqHHXWi6Cy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:91:db:bd:a4:05:0e:44:93:15:48:73:67:52:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Apr 27 03:00:39 2025 GMT
Not After : Apr 28 03:00:39 2025 GMT
Subject: CN=595bea375bf794edf8d9df798b4c584fc7cf279a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:f0:d7:58:ae:05:58:16:70:cb:52:68:cd:
f4:0e:59:c8:1e:9e:5b:4e:d9:0f:97:3a:3f:a5:06:
6a:04:4e:89:06:78:5a:5e:04:68:a2:a8:f6:ca:0a:
1a:62:55:53:be:a1:cd:e8:46:d5:28:97:aa:b8:2c:
95:19:9d:d1:aa:92:c1:d4:c1:7e:9b:ad:7b:98:f2:
ef:4e:38:58:0d:30:a7:30:ab:24:68:cf:77:f7:07:
c4:19:f7:4f:21:73:9c:1d:d3:91:9e:e8:c0:b9:1a:
72:56:d0:87:e1:21:1d:fd:e9:dc:e0:ee:ac:36:df:
54:8a:df:95:b3:3b:fc:1f:3c:75:89:56:84:1b:5c:
0c:6d:c1:7d:cb:6c:d8:fe:cc:67:dc:86:b3:cb:41:
ee:2e:a9:a6:7a:62:f0:84:d3:c0:10:59:59:04:90:
18:fc:96:25:28:96:ad:f8:59:e5:18:d3:09:6f:04:
9f:cf:49:7b:64:45:06:f3:53:25:f7:ac:22:cf:73:
b7:9a:75:86:59:0c:d1:d0:0c:2a:2b:68:ec:9e:a4:
f8:d3:6b:a2:b4:27:93:0e:03:a3:8c:bf:c2:4a:0c:
02:94:3f:9c:3a:12:34:b4:b9:55:53:c4:a3:8b:db:
45:34:46:ba:55:de:ea:21:0e:b2:27:4c:28:36:f0:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5B:EA:37:5B:F7:94:ED:F8:D9:DF:79:8B:4C:58:4F:C7:CF:27:9A
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bf:a7:fe:54:21:fb:58:12:40:54:83:b6:27:f8:a1:f8:70:
fb:48:a0:e7:a7:6c:73:ee:8f:57:9c:79:79:4b:4d:07:12:ee:
17:c7:51:53:56:b8:6d:c6:c2:a6:16:42:6f:32:e4:eb:23:7e:
3a:b0:a9:1e:ee:f5:d8:fe:ec:b2:e2:b4:9a:40:38:2d:bf:90:
e5:0e:1d:5a:6a:91:9b:84:04:fc:5e:a4:d8:5f:49:8e:60:80:
ae:f5:1f:37:38:21:6c:43:1a:70:81:26:ec:45:d4:ad:87:34:
bb:da:6f:72:3e:4f:75:b2:43:b7:d5:be:e2:d2:f9:20:dd:0d:
e6:a5:4e:52:84:00:13:0e:ac:23:fd:45:e5:6f:fe:be:a9:da:
8a:d1:9c:6c:25:86:ed:3c:ee:4b:85:9b:32:d8:5e:7b:c6:ce:
3b:da:da:05:21:90:a2:19:61:54:0a:56:62:49:1c:7e:06:a8:
53:3e:f2:20:af:d3:4c:d1:ef:cf:bd:84:8b:75:a1:be:5b:b8:
43:8a:56:69:be:60:f7:5b:c1:6c:88:37:81:a2:3a:ff:eb:3f:
86:58:3f:01:7d:3c:30:fd:57:2c:48:46:ce:1f:a8:b5:55:60:
28:40:13:87:b4:13:5b:36:02:8f:ec:d1:48:35:32:8c:32:01:
73:64:a8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:54:30 2025 by rpki-client