Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: w+E+giBmWjzuKbY8YOstV0qlJ9ZbDVhobVDnI6o1sFg=
Subject key identifier: 85:AD:8A:4D:6A:A9:FD:98:E0:C0:6F:04:9C:47:64:43:6C:53:63:31
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 0196771EE3615822B2CFEDDC8FAE5A665D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 14A2
Signing time: Sun 27 Apr 2025 12:00:34 +0000
Manifest this update: Sun 27 Apr 2025 12:00:34 +0000
Manifest next update: Mon 28 Apr 2025 12:00:34 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: itFH8n2PPGxVEsDUhQpir6s6i4HrSd7IpQs9AUhO7NU=)
2: H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa (hash: Rauzo4l8LbEJsHoIgmNH9pstkYvXoM+T/qkFcHjlqFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:e3:61:58:22:b2:cf:ed:dc:8f:ae:5a:66:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Apr 27 12:00:34 2025 GMT
Not After : Apr 28 12:00:34 2025 GMT
Subject: CN=85ad8a4d6aa9fd98e0c06f049c4764436c536331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:3a:6b:39:33:d0:45:46:e9:fa:01:9b:7d:
49:51:de:cd:f2:f0:b5:82:e1:c5:86:ff:75:b8:50:
f8:7e:f2:c4:93:b8:46:20:a5:ab:3c:20:e1:0e:5f:
ae:65:d5:e9:ca:32:e0:82:85:42:b9:a3:ba:5b:9c:
bd:39:33:36:0a:e0:55:db:e7:c0:1f:0b:29:7c:b3:
31:21:3a:38:c6:96:6f:ef:20:5c:23:fd:94:f1:d7:
b5:ee:12:71:8a:c3:ba:6d:05:52:ef:fc:d9:35:7f:
f7:61:0b:44:f1:3f:8f:ea:04:41:06:fa:10:72:78:
b6:e8:84:84:5f:b5:4a:01:91:f2:ff:ab:59:d6:99:
27:7f:28:7b:90:fb:1d:27:50:15:81:85:46:47:84:
b3:be:59:c5:3a:04:87:3e:e3:16:28:f5:cc:57:a5:
a0:d1:63:63:ce:f1:09:82:3f:bb:28:a0:3d:33:a3:
07:b6:9d:cc:88:56:12:1f:63:0c:03:af:85:d6:d6:
a3:3d:c9:5d:18:d2:26:50:fb:2f:d5:6f:66:bd:16:
94:4b:6f:6d:c4:18:2b:a3:74:3b:e3:00:1e:b7:51:
1f:5f:60:9a:2f:19:bf:51:8f:81:ec:79:77:67:b6:
12:46:60:1b:93:90:9c:c1:02:56:40:cc:95:de:af:
25:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:8A:4D:6A:A9:FD:98:E0:C0:6F:04:9C:47:64:43:6C:53:63:31
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:43:1a:28:27:68:c0:c3:5b:a0:41:19:58:63:cb:f1:79:a6:
a3:02:88:08:dd:97:3e:5b:87:75:63:b5:61:1f:20:9f:a7:3b:
4f:06:93:6a:9c:70:a9:d0:7c:7b:32:2a:81:e6:d8:db:35:b7:
2f:5e:94:e3:2e:60:a8:b2:67:10:d2:83:33:26:ff:ff:a6:bc:
af:91:a6:4e:58:45:60:de:b1:5a:61:38:de:e7:bd:1c:76:47:
7b:86:56:b7:40:7b:11:b9:2a:71:2e:12:d6:25:48:73:54:49:
be:33:d5:08:0c:50:83:95:b0:f0:33:ca:fb:80:d6:ed:cc:8f:
84:c4:77:80:c9:f6:5f:c2:43:aa:f9:1a:41:6a:5f:59:ba:28:
c4:e1:4c:b4:31:f0:60:ce:4f:80:2f:22:3b:92:6e:97:51:8f:
e8:e0:46:00:af:fd:36:95:74:ca:ee:71:52:5b:39:65:45:d7:
80:cb:81:5c:b1:2a:b5:b2:bb:6a:4b:37:35:3b:78:eb:2e:0e:
7b:6c:a7:ab:30:38:c1:79:a3:b2:77:39:c3:bb:c4:9a:c9:57:
ab:15:49:a7:d3:68:0f:02:bd:07:bc:e7:92:bb:57:f4:6e:b9:
0e:a4:cc:19:23:47:89:69:eb:ba:19:0f:c4:76:8c:e6:84:d2:
94:0b:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:29:37 2025 by rpki-client