Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
File: F6yAsO71cIxkOQVF0acTkCRLbRs.mft (raw, json)
Hash identifier: IOqhBlNv7B4nBsqQKQ+LpwP3zC6RBZcd1eueTRF1tWA=
Subject key identifier: C9:DD:AE:67:65:4E:EC:43:DC:7E:E4:87:83:6E:EF:AD:22:68:9B:80
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Certificate issuer: /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial: 01969FE468D4AD78EB0555D26B7BD0D6D92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
Manifest number: 124D
Signing time: Mon 05 May 2025 10:01:08 +0000
Manifest this update: Mon 05 May 2025 10:01:08 +0000
Manifest next update: Tue 06 May 2025 10:01:08 +0000
Files and hashes: 1: F6yAsO71cIxkOQVF0acTkCRLbRs.crl (hash: TuCDxmenO4G482Z+K/XnKztLrypeWLTIBvkKU2niHAM=)
2: zSUjlVA_3mzAMpyrhKZAaPLaNJs.roa (hash: 72zL3nwgCvbu+myGvWOjXCnDMo56NxzjVOkIDgx8eQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:68:d4:ad:78:eb:05:55:d2:6b:7b:d0:d6:d9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Validity
Not Before: May 5 10:01:08 2025 GMT
Not After : May 6 10:01:08 2025 GMT
Subject: CN=c9ddae67654eec43dc7ee487836eefad22689b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:e8:3f:a6:d2:50:6b:72:01:f2:93:01:a7:
47:b5:f4:33:d7:0a:0f:0a:3a:0b:9d:8c:0f:54:84:
76:33:c3:41:96:e8:c5:0b:dc:da:63:16:ef:72:cb:
ba:fb:04:e0:09:e9:d7:61:5f:7f:04:12:bc:72:e4:
10:48:1b:28:3f:b6:f3:0b:c6:29:aa:67:61:43:74:
5c:33:d9:9c:0e:b2:b7:65:05:7f:80:1d:f4:c7:37:
06:55:89:de:48:76:02:b2:22:c7:f0:d3:2a:ab:5d:
98:a1:82:c3:8f:89:de:70:5c:db:04:68:db:3b:94:
12:82:06:91:22:8c:f5:a6:16:fb:93:fe:75:92:2a:
e0:8c:39:0f:ca:df:bf:ac:6a:93:e2:44:b1:6d:5e:
43:e0:af:62:3a:aa:36:cc:44:4e:d3:70:bb:76:e8:
c5:b8:27:df:a2:c2:3f:9a:9e:be:c2:0e:25:51:3b:
91:d8:50:30:05:ea:d9:73:32:6d:5a:41:db:4d:56:
42:97:20:c5:23:b4:79:4b:45:ec:28:54:7a:d0:9a:
0d:5e:c6:4e:0b:de:82:b2:da:a2:cc:fc:74:ef:d7:
fb:bc:69:6e:77:9f:c6:dd:2c:63:90:b5:32:87:d9:
a7:83:97:67:f0:87:b9:40:6e:6c:c1:46:09:ce:b7:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:AE:67:65:4E:EC:43:DC:7E:E4:87:83:6E:EF:AD:22:68:9B:80
X509v3 Authority Key Identifier:
keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:03:fb:84:96:c9:fb:12:ff:2d:9c:f9:8d:0a:0e:d3:2a:60:
80:ab:a5:e9:4a:7d:26:46:16:75:e9:d1:19:e8:61:00:d0:3d:
96:87:b8:84:5a:9c:05:40:d4:a2:20:99:bd:37:cd:fb:33:30:
ba:d8:6c:7d:3c:b1:4d:ff:a8:32:ec:d6:b8:69:86:3d:d6:e6:
e6:66:6b:c5:96:84:f3:5c:fe:7b:0f:5c:0d:17:b1:ed:93:2d:
36:77:ed:ef:60:ed:53:4a:74:aa:18:87:d0:6b:73:1b:83:16:
18:30:75:92:f0:57:1b:d8:6e:09:7d:1f:19:b4:bc:8a:0d:52:
52:07:68:50:42:69:e6:c5:69:e5:f0:04:b3:73:fe:2a:7e:5f:
48:54:a3:20:23:80:ea:ec:5c:49:fd:b7:55:32:bf:a6:8d:9b:
88:55:bf:2e:4e:11:2d:f4:34:96:62:bf:59:58:a7:2e:b4:0f:
06:c6:3e:be:0a:91:9e:9b:83:e9:0c:cb:f7:c4:58:7e:5c:6c:
df:f0:6e:03:88:13:04:5e:9a:30:19:5a:e8:d2:ed:1f:ba:00:
d9:ce:ce:d6:d1:3c:ee:68:46:88:5e:ed:31:8f:cd:64:56:d0:
5d:06:34:9c:d7:14:0e:c3:20:13:0d:fd:da:88:e5:13:10:70:
1a:99:f7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:28:34 2025 by rpki-client