Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier: AWTthvL9rYXNPB9trxXENpzh3u5DQTEZTnUOWpmqmIo=
Subject key identifier: AB:25:AD:44:DB:71:A6:03:CE:47:FA:4B:13:73:6E:3A:79:83:3C:4D
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 019654C9DFDA46D1E55CE75AD0198C838517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 20:00:38 +0000
Manifest this update: Sun 20 Apr 2025 20:00:38 +0000
Manifest next update: Mon 21 Apr 2025 20:00:38 +0000
Files and hashes: 1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=)
2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: 0+Wj3ohtuRcJ5OfgsO79OabECrT+wvHnKW52ApmgHSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:df:da:46:d1:e5:5c:e7:5a:d0:19:8c:83:85:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Apr 20 20:00:38 2025 GMT
Not After : Apr 21 20:00:38 2025 GMT
Subject: CN=ab25ad44db71a603ce47fa4b13736e3a79833c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:fb:7a:22:bb:04:b0:56:35:62:9c:94:0f:
a3:5f:35:6b:1a:06:7e:a8:ca:8e:1d:20:6d:a0:b6:
0c:ac:c8:3f:f0:14:d4:3b:44:c6:bf:00:fb:d1:84:
ff:dd:9f:dc:e3:b9:ac:59:e3:c8:5f:90:93:bb:12:
f0:48:0d:45:60:a7:32:f6:90:ca:1f:f6:15:fa:36:
08:02:2c:bb:f5:03:0b:df:ef:98:76:62:b8:ff:b4:
0f:02:a9:13:67:fe:68:d6:c4:88:6e:67:79:86:66:
b7:6c:24:d0:81:b9:3b:11:02:b3:c4:03:3a:a4:ff:
09:72:41:97:e6:2d:4c:f8:6b:2b:a7:ff:9f:3b:4c:
74:16:d0:d8:fb:26:5a:98:7f:10:06:7f:ac:71:1a:
c1:79:f1:f2:8b:6f:8e:da:28:d2:1c:ba:17:b7:9b:
21:2d:fc:53:43:74:6b:63:4c:f2:1f:a6:d3:3c:8e:
21:bf:86:bd:c0:f0:36:55:0b:b5:71:1d:c7:97:06:
f3:b3:5a:21:36:f7:66:45:2c:1d:cd:df:4d:a6:5f:
c2:c1:7f:8b:e8:8b:ae:b4:5c:86:20:d6:96:f3:2f:
5c:88:7f:d8:58:27:8b:5e:86:a6:2f:4b:02:d1:42:
a0:8a:fa:61:b0:0f:fe:68:c2:71:44:28:c1:05:b7:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:AD:44:DB:71:A6:03:CE:47:FA:4B:13:73:6E:3A:79:83:3C:4D
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:84:18:da:0a:cb:3e:4f:e9:77:18:1e:a7:7f:7c:e8:46:40:
6f:a7:c2:fc:a8:4d:28:00:03:7b:ad:77:c7:2a:b4:e6:8b:5b:
78:47:18:0a:3f:b5:0a:16:10:60:b7:46:13:71:4e:c8:d1:38:
95:ab:e1:5d:6e:47:45:d4:91:23:9c:6a:f2:63:22:ac:0b:74:
96:3d:7a:33:95:17:1d:60:5d:47:29:14:32:dd:f1:1d:1b:27:
5d:a9:97:e5:91:1a:fc:40:d2:7d:89:25:f7:33:1c:1d:f5:1e:
40:7d:e9:f0:90:e4:c8:52:d2:0f:00:1e:46:1e:de:02:3c:7b:
0d:82:57:9f:8d:4c:ad:fa:0c:a1:10:4b:e4:6d:2a:74:a6:6e:
ca:62:5a:33:8c:93:ef:10:ab:88:02:2c:c8:8b:59:ac:2c:2f:
53:0f:5b:29:93:df:92:69:8e:0a:87:26:82:c1:fb:2c:6d:6e:
0d:0e:bb:02:3e:f8:4d:21:ac:c4:5e:7b:f1:82:fb:43:5d:d9:
c4:9b:59:aa:49:bf:1b:ed:f5:d0:1e:af:9f:2f:cd:51:e6:da:
ae:b4:d3:da:bb:c6:f9:fb:51:e9:3a:76:f4:b3:7e:1d:9d:d0:
4c:44:64:d5:e7:99:83:c7:74:06:f1:cc:f4:f5:55:f1:07:17:
39:24:2b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:33 2025 by rpki-client