Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: fbF88w20hi/X+dGxTbgFcwRFSDt4965jSZR9fuXZXOI=
Subject key identifier: 60:4A:06:7D:39:21:5D:4A:61:AB:90:97:B0:E4:88:C7:37:79:67:4F
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 01968021BAA556207674D2D10FC415ADDF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 4C
Signing time: Tue 29 Apr 2025 06:00:16 +0000
Manifest this update: Tue 29 Apr 2025 06:00:16 +0000
Manifest next update: Wed 30 Apr 2025 06:00:16 +0000
Files and hashes: 1: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: yyn1isTDY5SF4DkMMpe1Zq6Vqo75NGbMkLiBQh7+j4g=)
2: spqKrZZlSshpL2qYZip0d0WaBBs.roa (hash: nNDCN5SzdqIQPR24IlLa7l1TyfR2hVXqn06sMz/jemo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:ba:a5:56:20:76:74:d2:d1:0f:c4:15:ad:df:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Apr 29 06:00:16 2025 GMT
Not After : Apr 30 06:00:16 2025 GMT
Subject: CN=604a067d39215d4a61ab9097b0e488c73779674f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:f5:f8:e2:86:00:ef:6c:ea:a0:ae:8f:30:
41:c7:9d:14:ca:93:db:f5:3a:8a:f1:3b:cc:04:c3:
63:3f:a6:22:19:fb:a6:b0:16:ce:18:41:8b:9e:c8:
6c:89:fd:f5:7c:2b:ef:ba:7d:d3:af:72:7c:18:df:
89:33:3a:9e:41:30:f3:48:93:82:7e:52:7c:0d:1b:
48:cf:d7:01:43:7f:49:13:b1:6b:ef:c3:1c:a9:31:
9d:5b:89:2c:ed:ad:11:dc:41:80:03:80:40:46:b8:
40:cb:a2:a1:5d:f0:87:75:fb:e5:00:14:81:03:24:
35:ee:dc:3e:ba:eb:f5:6e:3e:04:2a:21:7e:2a:a4:
39:34:e9:10:07:9e:7d:dc:44:73:8e:42:32:20:3a:
ed:f4:c9:0e:35:6b:66:67:28:19:6d:10:a1:0c:4c:
56:ff:e1:8d:41:5a:59:c5:ce:f1:48:31:d9:53:05:
35:9a:09:87:c2:5d:1b:41:d1:30:93:dc:bc:fa:18:
99:1d:e5:23:b3:12:a9:1c:fc:42:2b:88:74:19:24:
55:76:9e:23:64:c4:ab:15:70:be:5e:42:9a:50:98:
0f:cf:06:37:cd:a9:f3:1e:ae:72:ec:23:47:c6:a4:
79:81:29:66:be:05:25:18:74:c4:c7:86:51:3c:45:
b5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:06:7D:39:21:5D:4A:61:AB:90:97:B0:E4:88:C7:37:79:67:4F
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:58:cd:e5:cd:35:4f:00:ff:0c:32:3d:1b:71:17:d7:4a:69:
b9:05:42:ba:17:ac:c5:73:f9:ce:e9:e2:9d:59:0c:cf:a4:b7:
77:ff:a9:44:c3:d9:f8:55:ef:87:ca:80:45:74:b5:b0:64:b6:
47:6b:ca:77:42:aa:4f:bf:88:35:be:a7:1b:e8:c5:d7:0b:c9:
1b:d6:52:10:15:58:68:ef:6d:0e:27:b2:1c:2a:08:05:2c:b7:
f6:e1:14:da:97:a6:69:8a:8d:88:c6:20:6a:fa:87:0a:89:a7:
52:d2:89:10:6d:cd:9c:e6:44:c5:80:4b:40:65:53:37:0f:46:
51:92:d8:84:5b:fa:ae:6c:fa:c8:3e:23:4a:9e:0f:8d:7d:bb:
e9:b3:76:a8:40:19:e6:98:4d:28:51:e9:51:ce:8b:ce:91:f4:
cf:67:a3:13:e0:48:ed:aa:48:c2:3f:4a:40:f9:b4:b0:e2:a9:
92:dc:76:5b:2d:e0:66:7e:da:e5:28:bd:61:32:ae:0b:6b:c9:
06:7e:53:51:13:77:a6:a5:25:3f:9a:7a:1d:f8:d5:10:0f:1a:
65:b2:0e:78:05:c5:ac:31:d2:30:ae:7b:16:0f:d6:72:96:ba:
33:b4:9f:30:f1:eb:b2:21:6d:2c:e9:cb:6a:e3:6e:0c:8e:b0:
e6:24:fb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:36:30 2025 by rpki-client