Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
File: c2iuvB1FhbmzYS7MIgNFTWWocuM.mft (raw, json)
Hash identifier: BFSgJkZjEMxyNqxh8gb7Z+OJho1+W0BXtt3s5Y+R79Q=
Subject key identifier: D4:77:9A:43:1A:15:22:2A:97:18:B8:86:F2:6A:BF:A6:EA:56:A0:F0
Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
Certificate issuer: /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Certificate serial: 01965982F32E5C805CECDE07EBE92CE33F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 18:01:16 +0000
Manifest this update: Mon 21 Apr 2025 18:01:16 +0000
Manifest next update: Tue 22 Apr 2025 18:01:16 +0000
Files and hashes: 1: I9vgIWuaiEwVbrWFIv7mFggy9a0.roa (hash: CuGCVrXCD5akH61wJYu8Ar6/+5VEgpmtOisQYkqg0kQ=)
2: c2iuvB1FhbmzYS7MIgNFTWWocuM.crl (hash: KUGDSJeZ3vDmIutFjYh7/bgCFYFZ/U8tqWY0Zr5XIOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:f3:2e:5c:80:5c:ec:de:07:eb:e9:2c:e3:3f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Validity
Not Before: Apr 21 18:01:16 2025 GMT
Not After : Apr 22 18:01:16 2025 GMT
Subject: CN=d4779a431a15222a9718b886f26abfa6ea56a0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:65:64:a6:12:e1:22:0e:d0:de:74:4f:8b:2c:
51:48:23:cc:dd:02:c4:70:5c:53:21:9d:e5:84:a4:
cf:1c:85:88:96:26:b3:22:87:2e:d2:05:93:e0:ce:
2e:9c:be:80:7f:67:47:30:4d:98:1e:63:71:b3:95:
1e:17:6e:55:84:7d:47:9c:e7:12:31:d2:20:b5:e7:
2d:c1:c3:dd:da:c9:65:36:a6:bb:ed:cd:0c:bd:69:
39:0c:21:1b:92:db:8d:f5:c4:c8:4d:61:01:10:62:
41:8a:79:15:a2:e1:c8:0f:69:c6:66:94:56:dc:2d:
49:32:bb:87:fd:c9:cb:c6:20:4d:00:91:d3:a0:ce:
b0:bf:18:6a:03:36:62:29:f0:de:5d:b7:9a:00:21:
20:bd:92:4a:e2:1a:5e:37:23:a9:ec:ee:35:a7:1d:
45:4a:01:08:f3:ba:2f:34:ce:19:6d:40:47:25:8a:
9f:1e:3d:66:60:4b:2c:66:cc:a5:33:91:59:59:b3:
35:e5:54:11:d4:df:81:1d:68:c9:b9:71:dc:d5:6e:
59:e7:20:e9:e4:44:d7:40:8c:c2:07:8a:31:3b:aa:
b9:aa:e1:62:30:9b:82:b5:d0:66:83:0e:af:06:71:
67:bf:6d:f4:93:f9:31:8a:76:24:95:b1:6b:f6:b5:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:77:9A:43:1A:15:22:2A:97:18:B8:86:F2:6A:BF:A6:EA:56:A0:F0
X509v3 Authority Key Identifier:
keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a2:07:fb:ea:ee:7d:db:8f:9d:25:60:a8:92:81:89:63:59:
b4:8c:37:e7:0a:26:a4:29:24:29:78:b5:fc:df:52:7d:0c:b6:
c3:87:90:a3:65:b2:6f:e1:f4:bb:3e:4e:40:e2:b1:51:1d:f6:
11:20:88:48:b5:05:c0:bf:de:53:8c:ca:3c:b8:42:6b:b5:d0:
9d:31:1a:80:62:b4:7c:31:6b:47:cb:15:09:55:85:e9:06:bd:
f1:55:af:47:7c:f1:7a:71:d9:14:59:16:4d:6d:a6:0e:15:df:
f8:33:fc:02:1d:ca:eb:61:85:76:1a:71:85:5b:54:bd:51:dd:
29:cc:ee:21:79:7d:63:53:da:80:a1:91:d3:b6:6c:a8:32:c1:
e2:9b:37:f7:ef:af:32:57:0c:b9:23:6e:85:83:e5:0f:ee:24:
6c:89:6f:48:ea:ab:87:cd:43:29:92:ee:75:6a:f7:d4:9e:5e:
d1:4f:a1:55:7e:b4:7c:7b:3e:a1:d7:01:cf:34:ce:c9:a3:83:
5e:70:ea:d9:c8:f2:4a:a4:b4:4d:8b:b1:e3:26:26:fc:77:1d:
5e:ce:47:f8:ae:c3:a6:84:70:b1:20:be:16:9d:c4:11:4a:d2:
4f:c5:ea:71:a0:8b:84:81:89:d0:96:31:d7:75:00:97:70:3e:
6d:93:2e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:37 2025 by rpki-client