Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: 6aCaW9rpKo4DsiGM/inlI6aynp8U2mUCfLgs2Txf9bs=
Subject key identifier: 75:89:25:BA:1C:82:72:0F:DF:87:95:D8:11:56:B0:BA:68:C2:11:45
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 01968210DA311BE098CC32A3408979157F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 1255
Signing time: Tue 29 Apr 2025 15:01:04 +0000
Manifest this update: Tue 29 Apr 2025 15:01:04 +0000
Manifest next update: Wed 30 Apr 2025 15:01:04 +0000
Files and hashes: 1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: nQMjRQ2alrTVle+XRH6Ypckkr7J+eQDVFs3behza6UU=)
2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:da:31:1b:e0:98:cc:32:a3:40:89:79:15:7f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Apr 29 15:01:04 2025 GMT
Not After : Apr 30 15:01:04 2025 GMT
Subject: CN=758925ba1c82720fdf8795d81156b0ba68c21145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:f0:27:12:30:6c:4d:f1:53:3b:dc:9d:cd:
df:9d:25:41:d4:78:52:5d:a3:37:c8:16:92:66:b8:
b7:e0:09:62:39:a9:33:da:a6:85:bf:a6:55:92:86:
88:2d:71:b3:14:bd:ec:47:4b:38:e8:3f:ef:db:8d:
2f:23:e5:b6:8d:cc:19:48:74:a2:8d:c4:35:4f:9f:
14:63:3c:1e:98:2b:e0:0e:67:ca:e6:b7:77:20:51:
57:72:a8:f3:76:65:44:90:ec:ab:ce:4c:89:e8:b6:
ad:e0:1d:52:a5:55:40:fc:59:7d:f0:f7:8f:31:fa:
8e:b4:f0:d8:6c:33:f7:1a:77:77:2a:af:c6:1c:f5:
df:74:a0:76:0c:2c:57:c0:2c:01:96:73:96:58:e0:
63:4d:98:da:13:f6:4a:96:16:c8:53:20:fc:be:a0:
c5:92:54:bb:f3:31:f7:f0:77:e3:3f:61:57:75:3f:
bb:86:f8:84:b3:f8:fb:51:03:0d:31:01:df:b5:70:
3a:b2:9e:b5:1b:c1:f8:d7:c7:67:b7:bf:73:32:5b:
e5:e5:7f:8f:15:c9:cb:27:1c:75:34:ea:db:89:89:
7e:64:0d:38:d0:a7:53:be:f6:ec:12:fc:21:20:10:
4e:2f:9b:5a:3e:a1:df:eb:8f:6e:93:1d:59:95:2f:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:89:25:BA:1C:82:72:0F:DF:87:95:D8:11:56:B0:BA:68:C2:11:45
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:41:50:75:57:90:73:37:25:6b:e7:80:b6:a7:e9:8b:ea:bf:
80:3e:7c:a4:9d:70:e5:ee:e2:0a:16:77:97:f9:f0:b3:6a:0f:
ae:6c:be:1c:49:c5:0a:b9:59:3e:9c:29:69:83:6b:92:06:9f:
59:f4:7e:fe:27:49:82:c6:fd:79:55:c5:ee:8d:ae:2a:38:f7:
f0:8c:98:57:24:04:6e:7e:f2:1b:35:fa:b2:fc:57:3d:70:d1:
1f:55:0b:18:e3:62:97:8d:ac:f0:28:79:e8:5d:cb:e3:73:b7:
c5:e7:e9:3f:55:7f:d1:aa:1b:9c:e2:12:ed:cc:29:d1:01:52:
1f:13:00:11:65:db:5f:26:ca:4a:8a:de:35:bf:3f:53:8a:1d:
a4:99:e9:89:a7:7c:f8:cf:be:f5:35:d3:13:0a:1c:02:10:00:
be:95:fe:3d:b7:8d:f4:e9:46:90:95:5e:94:09:1a:9c:90:ab:
5c:3b:20:c2:5c:53:c4:54:05:fa:e0:a0:bc:28:6b:b8:0b:6d:
0e:6a:09:72:14:c3:13:97:6e:99:1f:9a:e9:54:06:88:09:d2:
96:b1:90:a8:32:f5:85:03:4c:3b:0c:c4:c5:0f:4e:58:ec:92:
51:96:32:95:4d:47:ff:b3:e7:c2:36:b3:39:38:a0:69:f7:17:
c3:2e:59:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:12:51 2025 by rpki-client