Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: cLn4wmFgbYDm/bWZtHcFLCtoEdlFwpseSJssCe+qYkI=
Subject key identifier: 17:8C:AD:74:3F:AE:7A:C0:92:B8:A3:73:BB:A4:BB:14:72:70:27:4F
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 0196594B5416690FF3E8E8F79A472F761CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 17:00:31 +0000
Manifest this update: Mon 21 Apr 2025 17:00:31 +0000
Manifest next update: Tue 22 Apr 2025 17:00:31 +0000
Files and hashes: 1: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: tl5kM5Q6wxq7T3++wGVDWBezxpgL17i9bljDEeLdtW0=)
2: x2Plj6HU813Gn6CnI6OWio0Ed3w.roa (hash: j+HdrBtXAtTZgu8aNGoL9Pn8S0MCOrlPhROCpWXQwvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:54:16:69:0f:f3:e8:e8:f7:9a:47:2f:76:1c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Apr 21 17:00:31 2025 GMT
Not After : Apr 22 17:00:31 2025 GMT
Subject: CN=178cad743fae7ac092b8a373bba4bb147270274f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:69:40:09:62:aa:1c:50:42:c3:f8:d0:e9:
41:1f:a4:a8:8d:a5:93:c4:a3:b5:20:3b:7a:01:bb:
b9:6b:79:e9:7b:33:22:39:13:05:92:de:b2:63:01:
67:02:51:0e:40:a5:48:44:af:ad:a4:dc:23:d6:85:
ec:11:c7:66:c4:83:f7:a5:69:ac:c6:ec:4a:4a:94:
16:c5:e5:67:9b:95:db:0a:cc:e2:9f:3d:1f:b6:f7:
e3:9c:ec:dd:5f:05:d7:bb:d1:17:e6:f3:d8:f1:90:
b7:8e:a1:3b:39:94:60:05:81:3d:6b:c1:32:5f:27:
1a:76:ab:94:2b:a9:20:c0:cc:b9:f8:a2:34:91:8a:
26:c2:f2:6e:10:7b:00:ac:e4:95:76:0f:ba:1b:3c:
99:0b:44:28:27:ee:c8:59:77:86:d8:0a:ae:65:b5:
96:25:f3:04:5e:78:db:9c:ac:09:64:1e:5c:4a:11:
33:40:b8:92:aa:c0:9a:88:45:4b:a9:17:bb:78:0d:
db:76:db:d6:11:64:1a:3e:0a:06:b8:54:e7:52:cb:
a4:c1:e7:8a:fc:db:e3:fb:ed:a1:21:ff:14:53:f1:
68:47:8e:e9:a9:f1:3d:be:05:fd:b2:2f:c7:3e:a9:
71:84:ab:40:06:29:80:7e:c8:97:b2:af:44:9c:69:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8C:AD:74:3F:AE:7A:C0:92:B8:A3:73:BB:A4:BB:14:72:70:27:4F
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c2:d8:a0:11:d8:dd:d3:6b:4f:fb:58:cf:0b:8d:4f:ed:f1:
fa:45:f8:91:4a:c9:8d:0b:1b:b7:dc:98:55:c8:04:a6:bc:7a:
50:6b:99:44:d3:ff:06:9d:c6:c8:46:8a:d4:05:d3:7a:1b:19:
7c:5f:8b:37:3c:3b:97:83:93:58:91:08:ce:1e:be:eb:03:1c:
8b:69:a7:30:be:41:91:c6:15:e4:99:7b:cf:d7:d7:c4:93:fd:
c0:18:c9:df:bd:7e:c4:56:3a:db:68:5c:67:13:7a:ab:90:52:
f2:bf:24:ba:b7:be:d5:b4:db:53:43:7c:12:b0:df:b4:5f:73:
b1:19:38:f6:63:b1:f0:ec:d3:c7:61:de:9e:ae:8d:5e:86:fa:
f9:25:1d:d9:9b:2a:7b:e0:cc:60:0a:9e:60:d2:59:0d:3b:96:
1e:cf:1e:f2:73:57:c4:ab:b6:5a:e1:d1:02:71:26:d6:73:17:
f2:4c:4f:34:ca:70:31:02:64:cd:83:81:68:16:63:f1:fb:78:
fa:a1:c7:6d:30:97:83:72:1a:d9:19:da:1a:f7:7e:6d:be:49:
23:1c:25:7b:f5:03:54:7e:d5:52:35:b1:5c:67:df:99:b5:91:
dc:01:6d:11:29:7e:9d:e5:6c:b7:ca:87:b8:4e:dd:f4:d0:82:
d2:bf:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:00:42 2025 by rpki-client