Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
File: IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft (raw, json)
Hash identifier: UqFXOSHIc8BI2gbCBQomVnttD3RLm1bg8J8OtJhV4hA=
Subject key identifier: 82:55:38:1A:0B:EB:9F:EF:D6:D1:6B:04:AB:2C:E6:BA:92:C0:C6:69
Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
Certificate issuer: /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Certificate serial: 0196778D062F188861A81BB7CF84887B0E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
Manifest number: 1497
Signing time: Sun 27 Apr 2025 14:00:52 +0000
Manifest this update: Sun 27 Apr 2025 14:00:52 +0000
Manifest next update: Mon 28 Apr 2025 14:00:52 +0000
Files and hashes: 1: IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl (hash: tQuwqyAVWwtCYEKF3u3H4mv7HfOAvQLfLT+/ZBOrh1g=)
2: QbfQw6PQWXMnUYTcNMeoW813ttw.roa (hash: g9TBhQ7bZYV+JTfg685xMP7NzWGbPIajKmZ/OPgHv/k=)
3: SqW3-Pav388bYoCFb9onFjXDUEM.roa (hash: rQ+0p4O5Q843ntXsLKc+VAqP1ejZ7AJIeWPPGt1vzco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8d:06:2f:18:88:61:a8:1b:b7:cf:84:88:7b:0e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Validity
Not Before: Apr 27 14:00:52 2025 GMT
Not After : Apr 28 14:00:52 2025 GMT
Subject: CN=8255381a0beb9fefd6d16b04ab2ce6ba92c0c669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:9a:96:03:91:17:86:07:0e:f5:ca:80:a6:
9d:22:4d:b7:ba:5b:9f:b4:83:a3:a8:02:80:2d:a3:
f1:36:4c:c8:ce:b6:86:c3:bd:f9:db:f1:ef:12:88:
33:af:55:88:fd:5c:37:80:de:d1:20:1a:61:1d:44:
66:a6:ce:22:f7:8d:79:66:1c:36:8a:0c:b8:0f:d9:
b1:cf:4f:3b:c9:71:e7:cb:86:32:cb:72:20:2b:6d:
01:57:bc:cd:6a:bf:8a:c5:47:70:fd:21:d8:6b:c2:
93:bb:de:a1:d1:d7:e0:87:fe:d7:ab:09:14:ff:ee:
18:f7:d0:b0:d3:23:5e:bb:45:c4:49:5a:29:5e:fe:
d7:07:d6:23:e8:80:b5:7a:7d:d6:38:a2:9c:0f:f3:
cc:ec:a7:5b:1b:c2:03:74:15:3d:50:af:66:63:8b:
f7:29:c6:f9:9e:62:9f:87:3d:bc:49:19:2d:c0:f8:
86:d4:49:b2:44:4c:18:91:15:2f:0a:10:82:73:fe:
98:36:80:7a:0d:0a:9e:f3:3e:bb:8e:2c:b9:0f:59:
e2:6a:5e:3c:b4:96:e4:65:d2:18:fa:99:ff:52:2b:
a2:3f:e0:c5:ec:52:80:4f:1a:e7:61:33:8b:ff:b6:
e3:d8:ab:f3:5f:9a:f6:90:de:2f:06:01:6e:df:a3:
87:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:55:38:1A:0B:EB:9F:EF:D6:D1:6B:04:AB:2C:E6:BA:92:C0:C6:69
X509v3 Authority Key Identifier:
keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8c:a1:28:23:67:d9:a2:34:88:c2:7b:02:35:66:87:1e:1a:
fe:f8:ad:2a:bd:35:2e:77:12:33:74:74:b6:24:a2:e9:9a:de:
af:40:9c:e8:ec:66:46:02:e5:02:d7:da:48:cd:64:21:cb:0a:
1e:f3:e0:40:a3:f3:59:fc:d9:19:08:2d:fb:a6:18:81:50:15:
58:c5:00:20:ed:05:d2:09:5b:74:77:9e:11:7a:19:9a:5d:7d:
7c:3f:ae:9e:23:92:3f:fe:5f:be:9c:81:b4:18:a3:b8:6c:ce:
a7:51:23:de:e7:fc:6e:be:74:ca:34:92:7d:95:27:b6:f1:09:
14:d5:1f:df:1b:7f:5c:49:2a:70:23:9d:13:4a:54:c8:37:49:
9b:0c:34:f3:42:b9:16:07:cb:b8:05:26:62:9d:67:84:ee:4d:
64:26:95:cf:b6:0b:a0:88:2a:f7:5f:50:b8:ee:9c:7d:3f:96:
59:a0:c7:f7:89:18:56:ef:22:ff:70:67:72:49:ef:1a:e2:a1:
df:ec:30:94:d9:ef:3a:85:11:b1:b5:3b:8d:03:dc:fa:c6:7d:
ef:f1:41:e7:16:8b:c1:b4:59:6f:9e:14:7e:9a:24:61:89:26:
b2:b8:79:ef:75:4b:3f:1a:b7:16:6a:d9:48:48:c9:b7:f1:d7:
cd:47:fd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:28:01 2025 by rpki-client