Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File: F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier: r1I7umMeZgwZnZBn2jB5PQg+TgfX9wwlRTVEtDJ1Y4U=
Subject key identifier: DF:44:20:01:D4:9F:2B:CD:9F:D7:94:5D:BE:AF:7A:EA:75:00:1B:0A
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer: /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial: 0196955FEDBC9225B773317257511D9D97D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number: 0477
Signing time: Sat 03 May 2025 09:00:14 +0000
Manifest this update: Sat 03 May 2025 09:00:14 +0000
Manifest next update: Sun 04 May 2025 09:00:14 +0000
Files and hashes: 1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: sGm9alaccT10l6OTznw8O4Zhe6YYuGnFn5EP5avLbpk=)
2: tQhQQED_2rbtgmsDxQqfycOcoj4.roa (hash: 7QkytynjV9fTl5bHPu2TPRokrjL3zXWtRN7glg7QEBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:5f:ed:bc:92:25:b7:73:31:72:57:51:1d:9d:97:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
Validity
Not Before: May 3 09:00:14 2025 GMT
Not After : May 4 09:00:14 2025 GMT
Subject: CN=df442001d49f2bcd9fd7945dbeaf7aea75001b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:ab:7e:6c:b1:7f:6f:d2:cd:74:7d:35:26:
15:8d:5a:b1:b3:f5:0e:5d:fb:59:6f:b3:ab:35:e3:
8d:93:b8:a4:36:da:cb:53:cc:96:fd:2d:23:53:1f:
33:1f:83:a8:4b:96:1b:f5:07:41:f5:62:52:c2:c4:
e8:ff:b1:66:f0:3b:fc:0b:76:84:91:d9:8a:26:73:
cd:01:72:0c:4b:50:39:05:f8:85:e8:1d:12:97:4b:
0e:34:9c:ad:99:74:92:cc:3c:ee:8e:17:e8:ff:4e:
06:22:93:73:9d:1b:71:ed:49:25:b4:e6:65:d5:18:
7a:82:84:3f:28:eb:55:a0:7c:2d:92:76:97:37:47:
df:7c:08:0b:d3:f2:e7:1d:de:72:e4:57:35:2d:2d:
a6:44:17:8c:52:32:3b:0d:e1:12:f9:4d:b2:ba:2a:
b8:eb:68:6b:1b:8e:79:78:2c:25:f1:75:b9:f2:fa:
c8:f2:2a:af:f7:a9:68:1d:7f:c6:20:e3:38:2f:01:
7c:cb:4c:d1:f2:4c:27:83:e2:d2:50:71:16:32:0d:
43:16:ad:1a:7e:60:3e:12:82:a6:47:65:37:57:67:
25:4d:56:b9:ac:2f:14:da:a7:0d:1c:5f:01:7d:69:
8f:b3:5e:b6:30:23:0a:c4:ed:b0:52:cb:78:52:0c:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:44:20:01:D4:9F:2B:CD:9F:D7:94:5D:BE:AF:7A:EA:75:00:1B:0A
X509v3 Authority Key Identifier:
keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2f:59:e6:5d:21:d3:e4:81:69:56:bd:4d:1a:ec:91:6d:60:
eb:c8:43:4a:4a:95:7b:c8:71:70:06:2d:f3:9c:27:a2:35:e1:
22:19:ff:b6:ae:79:52:89:d9:45:41:1d:19:c1:b5:a0:c9:67:
fa:4b:10:dc:bc:1c:2f:19:9f:f3:7a:ce:25:bb:e0:d0:73:23:
da:ba:82:b1:e6:a3:fc:f2:ec:f5:cb:71:cf:d9:b2:9a:4b:c4:
a2:fb:6e:79:30:b4:38:f0:b0:d2:37:c3:e2:e5:40:68:29:39:
c4:05:42:c8:2b:92:62:a6:58:b8:62:a0:55:0b:e7:e5:58:e5:
ff:17:fc:4a:5f:f3:e3:d3:42:aa:91:c8:13:96:df:a6:e0:ba:
6d:af:52:f8:d8:e4:53:82:d1:f8:5f:d4:88:9c:22:28:97:ff:
fb:ca:e3:1a:bd:40:a7:2e:73:eb:c3:e4:df:10:e7:7d:63:37:
d3:4f:cb:b5:76:9d:29:04:8f:1f:cf:12:49:9f:bd:31:92:4c:
38:60:f4:b5:b3:05:16:68:93:aa:c9:74:49:d0:1d:6e:c8:65:
d2:6b:f8:48:13:8d:49:25:73:14:e4:a4:b6:5b:af:71:76:95:
dc:a3:36:53:94:21:d3:04:f5:f5:70:9f:aa:58:2c:23:bc:7e:
da:f6:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:22:55 2025 by rpki-client