Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: epqHCgJ2hHBMYQW2ufk5rUgyCcsrgW/x9U9iR34mBoc=
Subject key identifier: BC:A8:69:11:1E:51:FD:02:ED:B4:3D:C3:1A:12:E5:96:3F:42:9D:B5
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 0196D58872D6B4C548116AE254712EBEDE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 14D2
Signing time: Thu 15 May 2025 20:00:11 +0000
Manifest this update: Thu 15 May 2025 20:00:11 +0000
Manifest next update: Fri 16 May 2025 20:00:11 +0000
Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: hom6yKia6GwfdD4qNsSF3RjuPOjFz2I5a1vfl/NFtnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:88:72:d6:b4:c5:48:11:6a:e2:54:71:2e:be:de:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: May 15 20:00:11 2025 GMT
Not After : May 16 20:00:11 2025 GMT
Subject: CN=bca869111e51fd02edb43dc31a12e5963f429db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:62:57:e6:b4:3a:ed:ba:90:36:c6:ef:77:
37:9d:d3:57:a7:c1:e6:4b:99:40:fe:81:1e:a4:63:
df:ae:78:f0:b6:8d:4f:10:a2:46:c0:c8:59:2c:17:
a5:87:ff:9c:4c:de:65:8a:63:0e:08:da:6b:65:40:
79:68:62:c5:86:15:47:fc:98:d2:da:9d:cd:7f:f1:
1b:2e:ce:b5:e2:5a:7c:67:3b:e6:1a:0b:80:f7:e4:
fe:2d:3c:da:62:ca:01:d0:71:b4:a5:b8:03:77:ba:
cf:88:bb:b3:5d:24:22:64:b5:e6:a0:e0:c9:62:20:
c3:fe:72:12:0f:e9:30:8e:34:ef:85:e7:57:e1:24:
d4:1a:b8:39:d5:04:75:ae:78:4d:37:00:00:8c:2d:
77:85:bd:11:8a:b5:f7:0f:27:2d:e9:da:26:d3:c8:
1e:d6:09:32:e2:59:79:9c:41:f6:11:cf:b2:e3:a2:
81:9f:85:a9:c5:dc:31:60:0f:bb:9c:c6:76:f1:3d:
56:36:28:6f:67:13:3f:10:8c:94:8d:df:c0:1e:ee:
a3:e9:77:13:b6:ac:7e:c3:20:f8:85:b9:98:50:de:
5e:04:66:e1:1f:54:b1:7c:39:33:fe:73:22:e7:bd:
a5:43:37:ac:04:dd:58:a0:8b:4e:63:5e:1b:b1:a9:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:69:11:1E:51:FD:02:ED:B4:3D:C3:1A:12:E5:96:3F:42:9D:B5
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:da:a7:f0:ec:11:00:d3:7d:e0:56:cc:61:72:8e:2a:82:92:
94:09:5a:5e:2a:60:c9:84:8a:b3:5f:18:c2:e4:31:6e:db:9d:
52:bf:34:0f:5d:85:d5:17:54:92:11:df:35:1f:46:bd:2d:0e:
7e:4f:a5:12:b2:a0:e3:71:d4:cb:7c:96:2b:ea:6a:5f:23:09:
60:ea:2d:d5:4b:c5:81:ab:0c:81:f6:1d:0b:50:f0:fa:84:0e:
b0:b8:f4:87:f4:07:4a:49:15:99:d4:e9:d0:3a:b9:70:13:c3:
d8:90:ee:d4:ec:48:1c:35:00:26:1c:74:63:27:77:66:3c:fb:
b2:27:4f:a5:02:78:62:fc:27:d3:e7:6a:49:68:86:7d:09:2f:
f4:3c:f7:e7:4f:05:27:8b:ab:2d:29:b9:c0:e3:bc:5f:e4:43:
43:52:3d:b3:29:fc:44:54:72:63:4a:c4:4c:53:ba:87:d4:37:
eb:89:78:ba:72:7c:23:04:6b:19:19:e8:46:de:51:4a:3e:8f:
3b:d2:98:67:8d:f2:60:85:a2:17:7c:4d:98:6a:3f:dd:ee:ef:
82:55:5d:9a:36:2d:cd:85:2d:68:ae:e9:e8:e8:39:69:e8:ee:
b2:d0:5a:50:a0:ef:c3:27:6a:4b:4f:90:2c:2b:ef:49:f0:f8:
18:af:12:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:53:40 2025 by rpki-client