Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: im9F82BnwZAiNSI44zZC4SFaCLkiAhYbf97AW1tM41c=
Subject key identifier: 07:17:2C:5D:74:B1:A3:81:D8:42:2C:F9:C6:E7:F4:91:E7:02:BD:5B
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 01967E6AA69D68D7EBA0AEFE3C1F8DB18984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 1517
Signing time: Mon 28 Apr 2025 22:00:40 +0000
Manifest this update: Mon 28 Apr 2025 22:00:40 +0000
Manifest next update: Tue 29 Apr 2025 22:00:40 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: 7EGUu+GW4/MWQFnu6fReYOfcC/vucImf0n77WaYyb5o=)
2: WEXs_7mi3mpWOcUG8wP1gKvlFMA.roa (hash: +bGwwC+VYAEY8cjrkr182bmVAbIXzAvAjxcOXwPk5RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:a6:9d:68:d7:eb:a0:ae:fe:3c:1f:8d:b1:89:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Apr 28 22:00:40 2025 GMT
Not After : Apr 29 22:00:40 2025 GMT
Subject: CN=07172c5d74b1a381d8422cf9c6e7f491e702bd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5c:44:9d:0e:f6:72:56:9f:79:57:fc:70:fa:
1d:7b:1d:34:a5:c2:5c:6d:6b:4e:8f:a3:e5:b6:b5:
7e:64:9c:31:82:01:ba:3c:37:90:71:11:90:e1:8c:
cc:63:fe:1c:fa:19:43:b9:33:9a:c8:f1:c3:52:37:
81:38:2b:65:1a:29:91:86:ae:f8:9f:d0:07:ee:fe:
d4:50:c4:76:4a:be:d5:23:82:9b:41:ea:07:a3:ac:
b9:84:6a:21:c7:ce:dc:a2:2a:79:25:d6:fb:16:3e:
7b:24:e0:c4:9d:7b:18:03:d0:fa:40:66:6d:db:59:
ff:db:8e:00:ac:a2:01:b1:dc:bc:a0:48:fd:cb:88:
e7:d9:15:84:da:fc:c1:1e:ae:b0:69:c0:55:b5:13:
4d:5c:30:ed:55:40:cd:00:2e:25:2c:ce:71:95:af:
d7:81:e6:86:d4:e7:02:3c:4c:d6:46:b1:81:e6:86:
8e:7e:09:37:f4:d0:c3:98:9e:4d:d3:75:2d:e5:1a:
43:bd:7f:14:71:1f:89:5e:32:a1:8e:fd:57:83:fe:
97:30:24:07:0b:73:b5:c7:3f:b5:00:dd:f8:25:5e:
5e:c3:0e:a4:59:1c:dd:c2:ca:b4:da:14:13:fb:f4:
44:23:f5:96:ef:a4:f4:d8:73:c8:b8:6b:7d:e1:67:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:2C:5D:74:B1:A3:81:D8:42:2C:F9:C6:E7:F4:91:E7:02:BD:5B
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:34:3c:e4:60:77:d7:9d:3b:e7:6c:3e:97:6f:c4:56:3b:6b:
75:cf:a3:d8:20:65:7f:1a:dd:d4:73:d9:7e:bb:e4:16:56:87:
9e:89:d7:46:01:b1:88:e8:81:fc:ec:b0:20:dd:b8:03:95:61:
12:e5:13:2a:48:03:ce:3a:35:f1:a4:f2:42:d3:50:cf:21:b8:
7c:b6:83:39:cb:f0:ae:50:7d:dd:e4:e6:ad:9d:4e:bd:a4:8b:
76:5c:a7:eb:2b:2a:72:99:66:9b:20:80:7c:ae:ab:5d:c7:5d:
00:50:e6:45:ee:ee:d6:61:ba:3e:2a:29:eb:ea:c6:57:fa:84:
4c:fd:69:12:64:56:56:09:68:7f:fb:d8:38:f9:8e:70:6e:0b:
9a:2f:7a:5e:43:a8:db:af:c7:47:09:e7:45:38:84:7b:be:b4:
9d:2e:61:a4:2e:a3:1f:8e:ec:6f:b0:71:12:a3:6b:85:f0:bb:
fa:99:59:8e:f6:fb:90:f9:b0:e8:dc:89:52:c2:6e:08:50:61:
6c:88:63:b3:42:00:ff:f0:ce:16:51:0b:e9:b4:db:a8:c7:c4:
c7:c6:d2:bb:34:d9:aa:a5:6b:56:3e:58:93:16:42:53:9d:ad:
85:23:1f:66:fd:23:cb:4c:ce:49:c3:97:5d:70:b7:54:53:69:
9a:bc:60:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:57:16 2025 by rpki-client