Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: UDqiiBVKQcHQJlDCrtS7n3wbvPmLcbaFLF8m8FOJ2aY=
Subject key identifier: 60:EA:B1:32:0E:F9:55:05:6B:87:77:FC:01:21:D2:4D:65:EA:88:CD
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 01968E82710992701F89CF61A6660A9654C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 0CA6
Signing time: Fri 02 May 2025 01:00:35 +0000
Manifest this update: Fri 02 May 2025 01:00:35 +0000
Manifest next update: Sat 03 May 2025 01:00:35 +0000
Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: JsVz+UbpSJPnyK6TwktEbvpw2L6CIRko/mIwtx0z/fc=)
2: sD3TQhmqpMeiNDRMe_Cg9c8gcQg.roa (hash: YpFE/XWsvo+iSqItJdBs7pFneblfjbKHabl7GMSfsrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:71:09:92:70:1f:89:cf:61:a6:66:0a:96:54:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: May 2 01:00:35 2025 GMT
Not After : May 3 01:00:35 2025 GMT
Subject: CN=60eab1320ef955056b8777fc0121d24d65ea88cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:31:7d:2d:96:82:69:44:b3:52:1b:0b:8d:
da:8f:00:7f:d1:f5:af:eb:c5:05:3b:d7:0f:1f:d1:
bf:b8:1b:07:ad:08:95:6b:73:4d:ed:ed:46:50:e4:
39:21:1a:50:01:34:f5:03:85:72:a9:a7:82:a8:55:
dc:55:60:58:0b:15:16:05:c2:0f:7e:d4:d5:63:fe:
f8:fe:86:62:20:2e:81:c8:d3:96:61:d7:cc:65:0e:
5b:6f:9d:9c:97:df:ca:e3:db:9c:f3:35:56:74:61:
4b:cd:d6:46:f1:57:f4:9d:ca:e9:7f:af:bf:08:d4:
80:46:a0:98:38:ae:56:6a:3b:ff:ec:66:a0:a0:1e:
c7:07:84:ba:94:61:38:c3:66:6c:9c:3b:f3:eb:e3:
64:dc:23:bf:ce:86:72:dc:01:b8:28:79:1e:b9:b6:
a4:45:02:ee:54:3c:2d:80:9e:26:9a:8f:81:7b:5b:
cf:65:ff:a1:05:20:e1:71:ac:d4:be:00:69:e0:2f:
03:73:49:91:22:d0:5b:4b:3b:42:45:3c:9c:8c:52:
b6:5d:e0:80:88:34:9e:14:30:e4:0b:08:61:d0:bf:
9a:ed:b3:cc:91:4b:5b:e7:4a:a1:a5:48:d6:8b:d6:
9f:9e:bd:e9:be:d8:b4:51:ec:3d:64:b0:0e:ec:67:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EA:B1:32:0E:F9:55:05:6B:87:77:FC:01:21:D2:4D:65:EA:88:CD
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a7:d9:38:62:71:1d:af:44:96:43:d0:d5:fa:ce:28:a4:74:
91:5e:f8:39:ae:ca:c3:ab:e8:a2:66:11:ee:c9:bf:f2:0a:16:
fa:a9:9d:eb:b7:51:0b:00:04:32:da:54:4a:66:31:d7:c3:a1:
86:6b:2c:6d:e7:59:9a:48:01:7e:cc:d7:99:e5:07:b0:f7:a8:
fa:48:51:f6:22:17:ac:83:06:b1:91:fd:3d:13:d2:18:9e:90:
28:01:38:45:13:56:b4:f3:96:ae:ab:f8:ae:5f:80:7c:fd:73:
00:91:a7:d6:f1:98:d5:85:22:31:17:8d:ac:74:de:ca:ad:46:
47:a6:11:a7:a6:ab:36:cd:9d:7f:83:be:12:1b:c6:3a:eb:0b:
d8:cb:23:1d:c9:98:81:2d:d8:e1:66:30:17:b6:e2:0c:12:76:
61:bb:eb:d4:4c:72:3e:71:15:b4:46:8e:c3:0f:5d:78:71:78:
ce:79:03:80:61:6a:45:2b:a7:1c:6d:5a:ad:cc:ee:7e:e6:64:
5d:44:4c:8d:33:de:63:d9:58:86:3d:78:72:fd:72:0f:24:e0:
5a:18:ab:08:9d:78:04:0d:b3:d7:19:5a:3f:a7:bc:73:6b:52:
52:85:5b:c5:bd:4d:7b:2c:72:b4:de:78:4f:10:0d:6f:0a:fe:
3b:bf:ec:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:30:22 2025 by rpki-client