Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
File: D8T3CpLUasAsjf5_l1vkir1i56Q.mft (raw, json)
Hash identifier: R0JmevZiQfHpDUajIDi9uAILJK8NE/RO6Zqbi/4Ek4c=
Subject key identifier: 85:9D:E3:08:29:2B:B2:3E:36:71:FE:58:DC:C7:7E:EB:E4:AA:0D:6B
Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Certificate serial: 019653EDFFF8F85F53EBE90C52022C88B40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 16:00:28 +0000
Manifest this update: Sun 20 Apr 2025 16:00:28 +0000
Manifest next update: Mon 21 Apr 2025 16:00:28 +0000
Files and hashes: 1: D8T3CpLUasAsjf5_l1vkir1i56Q.crl (hash: cg2ULAIgsTHnrAjhy2MmFKffzoisyAnxm7UKyXnFuK8=)
2: KV7Ah7ECaAsyXag5Rq5pooWC9JA.roa (hash: VgR4uMVD7rCZUo7Z3bX/mNyr94Jdnu1Q2sOy20+13Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ed:ff:f8:f8:5f:53:eb:e9:0c:52:02:2c:88:b4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Validity
Not Before: Apr 20 16:00:28 2025 GMT
Not After : Apr 21 16:00:28 2025 GMT
Subject: CN=859de308292bb23e3671fe58dcc77eebe4aa0d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:cd:a3:e0:c8:64:d8:72:f7:19:fe:ef:28:
68:d5:81:05:6b:31:e1:c3:d2:30:40:60:8f:ba:ed:
a1:ca:07:6e:f1:bb:fd:f6:1b:48:dd:57:e1:39:3d:
ca:6e:2e:28:74:c1:f8:e8:f4:8d:58:c5:39:62:8e:
31:0a:ea:7c:e0:1c:05:9b:36:d7:8c:fc:00:af:d5:
cd:58:d3:b2:14:88:87:03:de:c8:62:41:e1:63:b0:
b4:b5:46:f9:7a:dd:70:76:ab:34:e5:b2:4e:a3:64:
73:d1:7b:cb:16:ad:dd:98:24:0f:9e:78:59:0e:9b:
12:39:b3:2b:43:69:fe:04:63:58:97:6f:d9:00:31:
ab:cc:5d:53:8f:5d:44:15:57:e9:fa:af:d6:be:4e:
c1:d7:02:ac:2a:44:4f:e7:d1:5c:d6:2e:2a:26:2d:
59:c5:fb:80:bb:f0:12:ec:25:cf:6b:96:bb:65:57:
ef:4d:90:9d:59:95:5f:1c:2a:91:51:e2:7c:4c:35:
66:ee:82:05:89:bb:21:6e:9a:d5:57:2b:df:35:93:
27:ab:52:45:54:ef:b2:5a:1c:11:50:9f:b2:8f:58:
ef:87:dd:7e:69:87:bf:ab:ae:95:5c:02:28:3d:7e:
18:e5:e7:6a:17:1b:07:14:3c:47:7c:1e:84:68:97:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9D:E3:08:29:2B:B2:3E:36:71:FE:58:DC:C7:7E:EB:E4:AA:0D:6B
X509v3 Authority Key Identifier:
keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e4:ca:35:a4:45:ba:09:be:fd:31:1f:0d:12:a5:44:98:0f:
af:90:02:ff:b5:26:b8:a4:0e:71:83:08:6b:cc:68:4d:54:37:
4d:5a:5b:90:3d:90:65:8e:00:6e:1a:52:41:2f:57:6f:d9:d6:
d0:e6:dd:84:3c:75:5a:7b:aa:72:4e:db:4d:9d:68:75:be:3e:
c9:f2:88:37:d0:4b:bb:98:78:30:08:bf:14:4a:95:9f:ea:d0:
3b:fc:6a:ec:e3:2f:6e:a1:18:76:67:4f:f3:f6:37:6e:08:50:
69:44:10:a5:26:35:9a:8f:7a:12:6b:2a:88:c1:ae:24:a9:0f:
a2:8e:6e:db:34:89:38:0c:49:ef:14:d0:d6:d3:be:6f:af:7a:
c1:fa:d8:ac:57:a4:e1:d4:d9:22:de:3e:4c:52:8f:08:90:ae:
49:02:90:d9:e8:b1:92:c7:f5:57:82:84:70:47:bf:d2:4f:8d:
7b:2c:02:b7:be:46:34:72:37:5a:29:42:a6:91:a7:fd:d6:96:
7b:f7:16:38:2a:22:72:7a:7a:ca:f4:9b:85:c8:dc:cc:f1:23:
7b:6a:1d:bd:af:a7:70:df:12:f4:c2:44:27:64:45:51:3c:fd:
93:9d:16:7a:cb:61:69:eb:4a:92:6a:c9:d8:96:b0:73:06:a6:
0e:5d:3b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:30 2025 by rpki-client