Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
File: h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft (raw, json)
Hash identifier: cOYxgTs/BI+YyGGrYX778EaslumdICJ98sgZ4c708+4=
Subject key identifier: 34:5D:FC:44:32:33:6E:82:03:C5:79:1F:52:AB:39:5D:CE:DD:11:40
Authority key identifier: 87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
Certificate issuer: /CN=877aad307ad330ebb8cf44ec21389a170436fd53
Certificate serial: 019652DB14E3B19BBB2580EA135C43CA5990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 11:00:11 +0000
Manifest this update: Sun 20 Apr 2025 11:00:11 +0000
Manifest next update: Mon 21 Apr 2025 11:00:11 +0000
Files and hashes: 1: Dk5BhXJ_gIsgQ0utb4gvZ39LMIc.roa (hash: 9IdU4NLUHr5S9QPXNXQfwW6+YPaEhUYFtSNkpxSH/2Q=)
2: h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl (hash: FrG9DHqGLYIZ6Q5Vp05jpGSBEp4V2W5awDBy6y+ec/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:14:e3:b1:9b:bb:25:80:ea:13:5c:43:ca:59:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877aad307ad330ebb8cf44ec21389a170436fd53
Validity
Not Before: Apr 20 11:00:11 2025 GMT
Not After : Apr 21 11:00:11 2025 GMT
Subject: CN=345dfc4432336e8203c5791f52ab395dcedd1140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:7c:81:91:b5:d5:87:db:bc:ba:b4:97:4e:
6c:bd:38:30:c7:51:c0:aa:1e:80:2a:0c:e3:c2:3d:
71:db:b9:0c:c5:08:62:dc:db:8d:1f:d6:0d:85:ff:
46:38:fc:c5:81:44:60:f7:90:67:00:a5:6e:7f:f7:
49:4c:6a:9e:71:88:86:6a:7a:3b:95:92:cf:9e:67:
0e:c3:e2:b7:59:c2:3f:45:b9:44:d3:4b:3e:f8:76:
18:c4:2a:21:c8:4c:34:39:88:4e:ec:ab:22:c6:d6:
d9:59:75:7b:05:94:9c:57:90:98:f6:73:00:b8:4d:
57:a5:6e:61:83:8f:a1:d8:07:87:5f:c7:57:b1:04:
c0:ce:ea:2f:81:14:8e:b9:9d:67:95:64:1f:2d:e1:
ae:5c:bd:23:50:c1:93:b1:06:70:74:c1:8a:95:87:
73:c9:f6:a6:75:e5:03:8c:5c:35:36:05:79:7b:ba:
f0:e8:61:5f:d7:f9:aa:1e:25:0b:11:ee:aa:1a:1b:
99:13:74:8c:3f:11:ce:92:70:86:7a:7a:7a:b7:de:
21:28:3a:6c:c2:b7:31:d7:29:8e:9d:ab:11:5e:44:
db:cc:52:73:f7:fb:64:09:03:dd:11:28:0f:5d:da:
03:76:03:cc:74:cb:42:4d:fb:cc:34:32:21:f9:70:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5D:FC:44:32:33:6E:82:03:C5:79:1F:52:AB:39:5D:CE:DD:11:40
X509v3 Authority Key Identifier:
keyid:87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:93:24:d8:cb:e3:6a:d0:f9:b0:3c:ea:4f:a2:6a:e9:1d:d2:
9c:2c:3c:66:3b:42:b1:55:99:6b:50:df:1f:5f:45:df:20:ab:
1e:8b:b5:60:1f:2a:fb:eb:a8:da:b6:b0:de:43:25:b8:b3:c8:
eb:23:93:81:a8:d5:6d:23:f7:d6:cb:2b:17:62:24:96:83:fd:
cd:e5:1f:e4:64:2e:aa:19:4c:ba:9d:de:4c:64:57:22:d0:33:
d7:f5:a0:0b:cc:a7:86:9b:83:b2:93:e4:58:b4:31:1b:a1:dd:
43:47:79:1c:a7:58:8b:69:65:ee:8b:f3:cc:1e:60:b5:2b:46:
54:b4:b6:f4:71:d9:7c:77:8c:2f:b4:66:f6:b7:f2:44:6f:cd:
1c:e2:95:2c:c1:e4:e1:fc:38:77:f1:4d:12:14:64:c8:f1:f6:
65:d0:53:09:04:5f:7e:d9:88:ad:05:8e:46:0b:19:42:6d:d4:
ba:9a:89:ce:97:50:f1:58:03:ce:79:3e:08:94:af:1d:b1:df:
53:2a:67:ea:86:d5:12:08:c6:9f:ab:06:bd:af:54:a3:76:4b:
66:23:2a:20:f2:68:95:9b:ae:cf:26:df:89:5e:9b:ad:1c:b2:
50:33:d4:6a:84:e0:25:16:d5:41:60:a3:82:fa:6f:12:76:74:
b4:7d:33:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:11:37 2025 by rpki-client