Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File: SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier: qx4Sk8qVvtiZxCnUeUXqOkYUScw9kE4XBDg9O9hNVSo=
Subject key identifier: 00:AA:11:F4:DE:F3:BC:CB:2C:77:73:E6:6A:F4:3F:A3:15:3E:E1:27
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial: 01965A5E33BDE0CE8219A4DFAB4939DD83DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 22:00:45 +0000
Manifest this update: Mon 21 Apr 2025 22:00:45 +0000
Manifest next update: Tue 22 Apr 2025 22:00:45 +0000
Files and hashes: 1: KUfFcY4n_r75t21wBTn8NHwpPWo.roa (hash: Vj4b0HHRAbzzjfGSfe71X4pK6wA9f27I+UmGi3mJNYI=)
2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: O+Xn4X5HmQ/7twpe5YuLRRp7U0wg/T4tF2U0q1COZFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:33:bd:e0:ce:82:19:a4:df:ab:49:39:dd:83:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Validity
Not Before: Apr 21 22:00:45 2025 GMT
Not After : Apr 22 22:00:45 2025 GMT
Subject: CN=00aa11f4def3bccb2c7773e66af43fa3153ee127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:2c:ca:a4:ba:48:e5:6c:61:3f:b9:63:f4:
0d:c9:72:fe:c9:ac:7a:56:01:5b:cc:cd:ba:e0:69:
29:8e:3e:cd:bb:d4:9c:72:05:8c:f1:1a:6b:29:fb:
8f:e2:5e:63:02:9a:f2:36:3f:0b:8c:55:e6:8f:90:
49:1f:dc:01:fd:db:1f:07:4f:9e:9e:70:05:c3:37:
4f:27:00:ca:ce:3c:05:06:05:18:01:bb:0f:96:4a:
b3:87:09:10:9b:84:b6:47:c5:97:a9:0f:56:ca:b7:
03:63:73:ce:4b:39:2d:0d:26:18:63:0d:63:b3:41:
4e:7e:3b:ac:61:59:d3:dc:2d:2e:d7:e9:cf:e5:cd:
f7:37:28:9e:39:56:38:e9:34:b0:cc:cb:4c:1c:1f:
8a:16:2b:58:14:94:be:4f:fe:bf:cf:85:97:c8:ff:
98:1f:aa:38:62:6f:94:f5:87:1e:6d:58:e7:5e:13:
a2:2a:02:6c:72:d5:a6:d1:e0:3d:4a:99:80:a0:7d:
9f:b2:ec:f8:1d:68:ea:75:96:0c:78:83:5e:03:48:
75:91:58:80:91:78:8a:66:8d:b4:00:22:7f:6c:9d:
a3:23:07:f6:95:bb:77:e0:f1:30:1d:e0:41:50:12:
f6:a9:b0:6b:2f:40:99:96:55:bd:d1:2b:1e:c7:2f:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AA:11:F4:DE:F3:BC:CB:2C:77:73:E6:6A:F4:3F:A3:15:3E:E1:27
X509v3 Authority Key Identifier:
keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:87:be:52:d9:c6:cc:e9:1a:6f:05:93:b9:14:96:0d:31:7c:
34:33:eb:82:72:a3:65:0a:6c:f2:25:5e:fd:df:dc:26:2a:29:
b2:4f:86:ea:43:ca:e2:85:73:b6:96:8b:58:aa:31:52:aa:35:
08:7e:c3:c2:c0:b0:4c:9f:e8:8e:cb:05:c3:f8:e0:ed:91:25:
be:14:1c:a3:fb:5c:4f:ab:25:8d:b1:52:8c:e5:71:c8:5e:57:
2d:60:30:57:83:3c:f1:b6:a7:3e:8d:bb:cd:6d:d5:52:05:fb:
a5:3a:81:48:a3:e0:ba:b1:68:81:85:da:65:e2:51:b8:0b:0c:
48:f4:24:78:59:5d:02:bb:7e:d1:11:17:1b:d5:cd:b0:e6:5a:
a0:38:83:86:6e:3d:16:ae:d8:c0:f1:f6:62:96:4c:d5:2e:5b:
d5:b4:14:af:e7:fc:9b:21:8a:62:d5:92:05:3b:36:34:28:11:
eb:c0:6d:ea:29:bc:77:3d:11:43:7a:6e:4e:cf:6f:e6:bd:42:
03:f7:87:1f:9d:22:78:76:37:17:05:8b:06:ef:4a:f1:3e:de:
cb:b8:82:61:c1:3c:a6:48:b0:6c:23:fd:17:52:e3:71:a2:f3:
ae:c3:05:f9:15:a3:e9:c3:0c:f1:20:db:b3:bb:53:d4:b3:03:
ae:ff:00:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:47 2025 by rpki-client