Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
File: 96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json)
Hash identifier: lN2NYEC5iWGaqvLYbKCAwtlLmcHiHQpcHLB83C1ZXbk=
Subject key identifier: 01:39:C2:23:53:10:EF:A6:EF:DF:C2:20:B2:41:A4:C7:AD:FB:36:A7
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 019658DDC2EC3DC7A10F118100E093A29328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
Manifest number: 10FF
Signing time: Mon 21 Apr 2025 15:00:50 +0000
Manifest this update: Mon 21 Apr 2025 15:00:50 +0000
Manifest next update: Tue 22 Apr 2025 15:00:50 +0000
Files and hashes: 1: 3hd2cWOKo1TQkV2Yjc58aajJp40.roa (hash: 74N6tK8Ekv8MCL01lxtmIlPxSXElnTOh23zMPv2z/H0=)
2: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: LqbLwxABBri94o0AM4Ur7+dolsv1k8vSK8SPBo1upEU=)
3: NxP1yZRJkCqknWUlNsClQNUVfUo.roa (hash: u6b4+QpHV+iYUkKSAV1ntHvZ0Uq8id30dDjn4p6jm1c=)
4: rpMKo0baZdPqRPqlkYdACo6a3P0.roa (hash: HTnTb+0/EFAi/eXd0bEmB23wAYwHBXAEwiEqoddfA3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:c2:ec:3d:c7:a1:0f:11:81:00:e0:93:a2:93:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Apr 21 15:00:50 2025 GMT
Not After : Apr 22 15:00:50 2025 GMT
Subject: CN=0139c2235310efa6efdfc220b241a4c7adfb36a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:2e:88:d9:9d:1c:e7:eb:80:4f:2c:5f:46:
c2:ae:be:f3:3b:cd:75:eb:c7:90:2a:11:75:c5:d7:
8e:50:78:07:11:51:c6:4f:81:63:17:08:28:f6:b7:
50:d0:c6:77:4f:22:2e:7f:05:fd:8f:c4:84:a6:c7:
da:23:97:b6:57:24:ba:e3:30:bc:4c:59:7a:c3:b8:
59:87:c1:e2:11:b4:3b:2b:d4:60:9f:fe:42:7e:98:
7e:01:e5:f5:d9:3d:55:f3:62:2d:1e:a4:fd:b0:aa:
49:26:25:88:0a:8f:60:86:81:7f:f1:81:5a:da:36:
09:fa:74:d8:05:f8:d5:eb:75:02:e3:ac:2e:08:48:
42:40:43:c9:79:8d:5a:3c:c6:fc:02:a7:a4:d0:80:
73:1a:1e:a9:1f:66:77:b3:3e:c0:78:d7:4d:54:cb:
1e:a6:a6:ca:42:a3:60:90:bb:f4:c3:c2:ef:6f:a7:
52:f7:cd:c7:ae:e1:a3:5f:bc:88:63:67:17:4c:2c:
76:5d:b2:e9:80:26:c4:9b:06:ad:53:48:48:72:7d:
64:70:e7:85:d7:04:92:31:9e:ba:2c:73:40:5e:c6:
17:6c:3c:75:d3:41:07:cc:5b:d2:8a:b0:d0:57:d2:
21:40:47:29:7c:32:e5:64:b5:19:dd:03:f2:da:65:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:39:C2:23:53:10:EF:A6:EF:DF:C2:20:B2:41:A4:C7:AD:FB:36:A7
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:31:44:9a:b1:d9:bc:cd:e1:86:08:16:23:be:f9:51:e6:3c:
09:1e:50:1b:20:ea:8a:36:72:ca:b3:f9:f3:0e:b5:41:a8:81:
06:5d:5c:97:64:5b:0a:81:9f:13:67:d3:4b:02:1c:07:2b:d6:
ae:67:ba:80:e3:db:41:cc:0a:87:f3:b3:e5:9a:b3:5a:2e:95:
19:e1:26:70:03:a7:10:81:82:fd:f1:38:a5:8a:0f:d8:7f:2b:
f9:29:6b:c8:b8:ee:6b:3d:f2:5b:86:22:10:da:30:56:53:6f:
96:b1:94:5f:aa:98:de:d5:b9:f9:b2:92:a2:08:e7:bf:57:35:
43:ee:2b:65:c9:0b:73:b3:35:be:29:df:99:ed:50:9c:1f:05:
c5:b6:33:31:a7:1c:bd:fb:4a:7a:cd:0b:35:77:79:c2:b0:57:
39:f3:e5:c9:d9:63:c1:53:70:bc:78:10:2b:39:5a:69:c8:6f:
2c:b6:14:59:6d:b3:7f:2d:94:c4:03:42:4b:0b:e6:9f:fb:e5:
5f:5f:e8:97:19:57:7a:69:de:bf:07:75:d6:53:c3:66:91:1f:
ee:9a:11:8d:02:42:a5:d7:ed:3f:41:2f:b1:a6:be:df:55:36:
4e:83:6a:62:16:9b:90:6e:67:b1:a6:c9:1b:42:fb:3e:1e:ba:
67:ae:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:48:03 2025 by rpki-client