Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: Y+azjRpHbeylp7S9IeB9pdGHPTNjrY4yVbz3jHrQt4g=
Subject key identifier: 47:25:D9:8C:76:01:21:D6:22:D4:49:02:30:49:D9:03:D4:99:FC:BE
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 0196537FFA0338C56E2FF6912D90F9A3FC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 14:00:17 +0000
Manifest this update: Sun 20 Apr 2025 14:00:17 +0000
Manifest next update: Mon 21 Apr 2025 14:00:17 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: pVeEs/qBK9xasEo5lbaUP8JemW1sh1fijNQdSwaFkPY=)
2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:7f:fa:03:38:c5:6e:2f:f6:91:2d:90:f9:a3:fc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Apr 20 14:00:17 2025 GMT
Not After : Apr 21 14:00:17 2025 GMT
Subject: CN=4725d98c760121d622d449023049d903d499fcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:fe:06:8e:4d:ea:7e:9f:40:5c:23:74:bb:
d7:29:0e:5e:db:c3:96:a2:65:6b:8a:67:6c:aa:05:
8b:26:2b:ea:f9:6b:88:b6:4a:68:fb:44:3a:80:47:
4f:bb:67:b5:5b:c6:35:7e:56:10:06:b3:c6:5c:68:
c7:c6:da:91:9e:95:18:cb:bb:32:50:0c:8b:75:81:
65:3a:30:f5:b9:1f:56:94:77:b4:11:85:82:22:60:
14:ec:1b:b2:09:40:49:9c:9f:a6:ad:53:81:60:3c:
75:47:26:6c:56:5a:70:c6:94:12:e9:2f:50:12:ae:
67:0d:f3:2c:cc:d2:cc:99:da:0a:29:5d:10:bb:09:
37:43:a3:39:02:e4:fa:a2:21:03:e6:61:b9:e3:57:
da:08:7d:a9:6f:92:6d:10:47:13:51:70:46:fb:3e:
4d:55:e6:f4:37:8f:8c:d3:72:62:6d:7f:63:bd:a7:
d4:73:1c:e4:da:f5:f3:61:e0:7c:55:61:60:ec:cc:
a5:d4:01:8d:16:c2:c6:36:62:d8:10:f2:4d:a4:10:
60:d5:03:1a:aa:bc:74:79:83:cd:c9:23:49:c6:99:
75:4f:d1:53:e7:f2:c9:ef:80:dc:d2:b7:71:ab:91:
e3:82:de:6a:bb:25:5e:74:fd:8e:1d:59:6a:bb:79:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:25:D9:8C:76:01:21:D6:22:D4:49:02:30:49:D9:03:D4:99:FC:BE
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:41:52:97:9c:b3:24:a5:af:6e:89:b4:24:77:d9:c3:45:19:
cb:08:88:0a:c1:3b:72:a2:04:b9:ae:1a:1c:07:9c:ad:23:19:
33:9a:ac:33:38:61:93:ed:41:0a:e9:5c:39:81:9b:ba:9d:b9:
e3:a0:aa:cf:70:16:0a:ae:c6:65:de:73:ec:17:fd:f0:d4:17:
a9:cb:60:4d:eb:eb:67:8f:f6:0b:0a:e4:a1:c8:6b:82:d4:c6:
21:74:43:37:b4:d3:6a:dd:ea:fd:06:84:28:85:73:2e:8a:9c:
60:37:38:af:35:a7:62:79:6a:1f:78:d3:98:3b:de:8e:10:db:
e1:de:c8:ab:82:5c:a2:93:f9:3c:05:a8:62:07:9a:af:b8:bb:
43:67:b3:58:ce:a0:a8:0d:ca:21:f9:b9:e6:f2:4a:8c:d6:3d:
fc:1c:19:cd:82:66:0a:d8:5a:87:0f:51:ea:0e:ac:9a:3e:7b:
2e:88:34:3a:6d:d6:be:0b:3d:54:6b:cb:b7:33:fd:9d:a6:30:
34:e4:ed:fb:4b:22:a2:ab:55:f9:7e:06:18:b3:da:12:f3:74:
83:84:4c:56:4c:28:da:0a:3f:13:1c:4d:8d:4c:72:7f:09:3c:
c8:a3:47:1d:dd:fe:4d:a8:24:94:2f:4a:f1:10:d9:c1:6b:c7:
b3:81:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:11:44 2025 by rpki-client