Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File: I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier: ree6R9M2cmjMV7p0C3hKEoV3ew2KtxxsymnwtLyOTNA=
Subject key identifier: 4D:77:83:44:D1:19:4E:E5:E5:D4:8A:B7:2A:32:BE:FE:00:FB:A1:D6
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 019675D4F45143A14B31F43B40974336C7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 06:00:12 +0000
Manifest this update: Sun 27 Apr 2025 06:00:12 +0000
Manifest next update: Mon 28 Apr 2025 06:00:12 +0000
Files and hashes: 1: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: O22yNcGqC/5GLWvOqx4636EknwHgHyvdsq5w464Gos4=)
2: bjCXA7rp-GRMTkdMkg_zXfKYrW0.roa (hash: FxnvNnw+IOeKtHJC0KTXpxkTr4pA05J6vavAi4HV2BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d4:f4:51:43:a1:4b:31:f4:3b:40:97:43:36:c7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: Apr 27 06:00:12 2025 GMT
Not After : Apr 28 06:00:12 2025 GMT
Subject: CN=4d778344d1194ee5e5d48ab72a32befe00fba1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:5c:c6:92:99:96:0a:e8:67:73:f8:d9:f1:
07:db:a7:62:7a:9e:ee:26:46:0b:53:dd:0e:00:65:
1e:52:35:99:b7:03:37:83:3a:47:64:51:53:e6:f3:
be:9b:60:61:88:74:e0:1e:23:5b:3d:3f:b4:70:c4:
d5:8d:c6:a2:5f:03:f1:ee:d4:2b:84:6b:0a:69:bc:
e1:e2:cd:bd:28:38:d5:9e:fb:5c:33:58:5b:b2:b9:
fd:4a:5e:98:aa:9c:7e:e8:3e:8c:86:1f:7a:1c:34:
59:a4:04:15:c5:36:f5:ad:94:69:30:0b:b9:eb:a9:
f2:20:43:f2:90:d3:0b:21:8b:42:1d:07:05:a0:68:
4d:47:6f:33:27:3f:c1:6a:78:87:ab:38:3f:1d:dd:
66:90:7b:b4:7b:71:c8:eb:52:7e:e1:1c:02:48:b6:
4c:84:69:8f:19:37:20:dc:67:0a:65:b9:0e:67:2c:
90:d6:35:60:30:1b:14:38:fd:51:34:98:4c:d5:49:
d4:1b:6c:3e:93:9e:15:af:38:17:8c:ce:a6:c4:8c:
5d:66:0a:c0:e2:74:7d:da:cb:0b:88:81:f2:6a:50:
24:93:01:20:fd:71:10:58:57:6e:08:75:75:5b:d8:
32:45:1c:68:da:f8:86:58:97:9a:8d:be:d1:6d:f6:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:77:83:44:D1:19:4E:E5:E5:D4:8A:B7:2A:32:BE:FE:00:FB:A1:D6
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cc:aa:aa:66:60:ba:d3:6f:79:fc:0b:91:1c:5e:b5:80:fe:
f8:7c:af:1f:c9:3e:97:0e:f7:fa:4e:22:a2:1c:fe:4c:14:20:
26:f3:c7:85:c9:5c:71:ca:78:3f:09:5c:d0:54:cf:e1:f4:6a:
ef:52:4d:0a:ed:3b:86:ba:87:07:0d:e4:bb:12:67:c1:49:24:
66:e9:f4:49:92:72:2c:8c:a1:90:f8:b6:58:8a:b9:71:5c:d7:
b9:0f:de:ea:af:5f:27:b6:17:ef:cd:9a:19:41:6a:ee:f7:51:
41:76:61:56:bf:8f:9d:bd:2b:e5:db:4e:f6:5a:3c:80:bf:5c:
f2:fd:8b:65:94:f0:fc:0e:c3:bd:42:4f:11:73:a7:83:2f:71:
fc:15:6d:a1:f6:ac:c6:1f:3a:a3:8f:cb:b4:fe:88:44:3a:60:
87:64:82:18:b2:34:8e:82:2e:1a:65:89:32:fd:5f:b4:8f:fa:
7f:81:23:3b:18:69:0a:bb:ce:02:29:21:ee:e9:17:6b:81:2a:
2a:3f:29:06:55:b6:32:79:ea:d6:86:3a:f9:06:02:58:92:eb:
bc:24:80:04:a3:ca:8a:d0:20:f1:cf:61:3a:b5:7b:46:fd:57:
2d:f1:cb:b2:7c:f4:74:79:4f:41:3e:f5:88:e0:1b:72:21:24:
dd:99:24:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:41:49 2025 by rpki-client