Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: jWTfOxlEagM/JoQmfqAw1dKRv/m2l3sXABBdmcw7k5U=
Subject key identifier: 7F:23:17:9C:9D:B8:0D:73:4C:03:40:EB:AC:EE:3F:B1:36:EF:05:CC
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 0196AB43351D7F4A7C0354024011B7902857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 12A3
Signing time: Wed 07 May 2025 15:00:30 +0000
Manifest this update: Wed 07 May 2025 15:00:30 +0000
Manifest next update: Thu 08 May 2025 15:00:30 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: OY5qMAUe1r0jbXYjNenJXQ5Anq1dnHWxA/CwROoNXZw=)
2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:43:35:1d:7f:4a:7c:03:54:02:40:11:b7:90:28:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: May 7 15:00:30 2025 GMT
Not After : May 8 15:00:30 2025 GMT
Subject: CN=7f23179c9db80d734c0340ebacee3fb136ef05cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:23:eb:a1:37:46:0e:30:32:7d:e3:c3:bf:
ca:08:29:80:ec:0c:5e:23:4c:7a:d3:2b:7d:07:de:
b2:f6:3f:55:53:c9:51:ef:6f:53:1a:15:9a:5c:0e:
8e:e4:3c:92:94:b8:b2:bf:32:a4:a2:52:84:c4:6b:
96:9d:5d:3e:13:48:f4:53:0e:3f:2c:40:13:8c:5a:
36:0d:12:a9:cd:b2:cb:ab:eb:c9:e9:91:8e:79:98:
f4:32:1d:61:00:b0:b9:59:b3:d7:e1:b1:d4:16:3c:
2f:4f:ff:4f:97:dc:83:7f:3e:76:d8:d9:3c:41:31:
16:f6:a6:79:d8:d3:c0:b5:a1:75:41:ff:91:8e:28:
4a:6f:d0:c5:49:81:43:3b:33:5a:09:4d:16:a9:68:
20:cd:9e:0a:53:56:a7:06:f5:34:7d:e5:09:86:9b:
6a:b0:3d:db:97:ee:27:4e:5b:36:72:c7:c8:d3:54:
08:25:26:b4:69:79:ec:9f:5c:ba:a7:d3:6e:59:80:
65:0b:e8:a2:c6:52:61:b9:55:b5:af:d2:38:e4:87:
a7:cb:e4:cb:1f:e4:fe:9b:3e:dc:4c:05:de:75:49:
c8:83:4c:0d:72:48:77:3c:b8:96:ce:5a:81:8b:29:
c8:8e:98:66:20:98:2c:2b:05:54:89:21:e4:b2:9f:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:23:17:9C:9D:B8:0D:73:4C:03:40:EB:AC:EE:3F:B1:36:EF:05:CC
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:77:49:a7:6a:5e:70:c0:3b:55:e8:46:b5:ff:ae:6a:0d:46:
86:8f:21:cf:5d:04:96:a5:8b:1d:50:df:9d:73:3e:f4:9f:1f:
46:f5:18:66:01:ce:b1:05:4f:64:5e:d9:1b:dd:cc:6c:67:2d:
95:46:f1:16:ff:35:8b:df:2d:76:5f:4e:88:95:45:8d:8e:08:
31:03:c1:63:75:de:4a:df:67:24:87:2c:56:b3:53:c0:47:8c:
35:cc:08:34:61:0e:74:eb:84:3e:ae:a9:8e:a6:98:1c:b7:63:
7e:3d:a9:ca:a1:04:93:4a:f8:8e:8e:18:c2:7a:5a:50:52:96:
67:70:a2:c7:d5:cf:ce:f7:6f:6c:2b:89:35:19:2a:54:b0:6b:
64:cc:ee:dd:50:cb:97:c7:ca:95:3b:19:cd:5c:c7:39:37:2c:
b8:eb:3a:3b:94:21:c1:da:68:3f:66:54:3f:4d:41:b3:5d:44:
44:30:da:b7:6c:90:a3:22:56:c4:7f:2b:fd:72:9f:55:8d:e5:
13:bd:5b:20:35:7a:da:a9:fb:90:2d:b3:f8:54:8c:c7:82:98:
e0:52:99:72:ad:bb:a3:38:21:01:71:03:63:ba:ca:ab:61:bd:
57:e6:e8:13:6a:7b:49:5e:87:db:23:31:8d:6c:66:a9:65:b4:
00:4e:42:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:46:36 2025 by rpki-client