Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: wIFjKXTC38UtXsAtdvyJgkHBwHgXkkub4ogd56PFefE=
Subject key identifier: BD:33:CB:72:40:C9:14:9C:9D:51:54:89:F0:BF:61:93:E9:F3:F2:BF
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 019614A224EE0C454CEBC51314CC38BFD2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 14AD
Signing time: Tue 08 Apr 2025 09:01:32 +0000
Manifest this update: Tue 08 Apr 2025 09:01:32 +0000
Manifest next update: Wed 09 Apr 2025 09:01:32 +0000
Files and hashes: 1: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: o2X2BF0l4UX69MWTj4Zcjt31ckEG+n/dtuhwKVfF7e0=)
2: qZwCUBdyVxKjYkXaP33nuRnJFFk.roa (hash: Qf8N9OYdk9LMClm+JkhJP4J83VvdWMZetrJHTxylpz8=)
3: weaYZtKN2dyX154ow3SGgXoIRjY.roa (hash: ed7Amn9Zz2cEzM2Ufd5UFwzqV4Z97E0C1znPlzbxe2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:a2:24:ee:0c:45:4c:eb:c5:13:14:cc:38:bf:d2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Apr 8 09:01:32 2025 GMT
Not After : Apr 9 09:01:32 2025 GMT
Subject: CN=bd33cb7240c9149c9d515489f0bf6193e9f3f2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:6a:1e:ef:0a:26:b1:e6:3f:b4:07:49:9f:
f4:da:9a:3d:ce:7e:5d:7a:6a:f0:84:fa:3d:ad:94:
e4:9d:b9:4f:aa:fe:59:e4:ca:04:3f:5d:43:5d:ef:
1f:15:05:03:81:53:f1:3e:21:ac:e9:73:93:45:5a:
10:b7:4d:4a:0d:40:5c:60:48:74:d0:c1:f2:69:0f:
b4:24:42:29:84:03:18:27:63:c6:09:a8:cc:43:18:
58:c0:a1:0f:c1:a3:00:b1:a8:8b:f1:55:ac:60:9f:
e5:e1:18:22:d9:47:9c:3e:ca:1a:98:67:32:cf:6b:
4b:2d:fd:5a:4b:4f:e6:40:09:16:af:0b:cb:d8:5e:
12:50:96:89:74:fb:f8:99:a6:da:5e:a3:05:8e:6c:
80:5f:aa:ba:a1:71:73:e8:e4:ec:16:16:f4:dc:a3:
d5:72:25:a1:8b:4b:e9:77:18:67:b1:00:3a:2c:f2:
81:e6:ad:41:e7:02:3d:68:18:e6:6a:63:fa:1c:83:
c8:bf:26:65:bd:32:a7:1e:fb:35:b9:64:af:7b:65:
56:9a:8c:9e:ab:2c:5c:80:86:3c:01:2f:20:78:dc:
f6:b5:42:2d:9e:ec:41:4b:ad:54:1c:d1:e9:cb:d5:
e7:07:b2:3e:ea:e5:4a:10:5b:c7:6b:d7:44:f3:06:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:33:CB:72:40:C9:14:9C:9D:51:54:89:F0:BF:61:93:E9:F3:F2:BF
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b3:0e:72:70:4b:ed:f3:e0:ab:b7:56:e7:70:68:f5:97:cb:
79:e9:03:ad:16:5c:01:f2:dc:56:ca:6d:f8:99:6a:61:5a:3b:
be:28:07:d6:2a:06:95:78:96:69:be:80:d6:50:be:be:11:0f:
6c:50:cb:db:15:56:29:2e:18:ff:2d:07:05:a8:94:39:0b:17:
c3:ab:d9:03:40:db:07:72:e3:4d:67:bb:94:5a:91:dd:a8:39:
4b:50:6f:5f:8f:6f:1d:ce:d1:29:ec:ba:e7:15:ac:70:b3:4c:
a0:62:44:48:3a:cc:49:a1:6c:93:d7:ca:4f:a7:15:2f:ea:73:
de:47:da:b6:64:27:ed:1b:fd:9e:94:b8:1b:35:38:1c:22:8c:
03:29:5c:db:b3:c7:04:93:0b:3f:b0:34:03:80:c6:bc:36:12:
97:7a:b7:47:b4:65:f4:70:79:24:89:2a:57:33:c8:56:30:ae:
e4:57:89:34:e9:fe:9a:84:b0:84:d7:10:0e:c4:89:78:e3:90:
24:72:d5:c0:c4:c4:28:4f:50:f0:8b:b6:a3:8a:b4:84:ed:0e:
9f:d5:85:6f:92:f1:07:43:08:4e:b3:33:62:52:20:cc:01:a5:
e5:76:84:e0:cb:2c:c0:d3:30:3c:30:e4:08:39:0f:01:56:45:
9c:56:d0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:48:33 2025 by rpki-client