Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: AHvPEKh2MZ4gze+s6/2QON2jDvihPsaBzPOHr7M6F8o=
Subject key identifier: BE:4C:A4:8C:83:25:34:55:F7:48:DB:00:1D:6C:25:E4:E5:E7:BC:F7
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 01965726864677BF00B4DF930316FAEED2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 07:01:04 +0000
Manifest this update: Mon 21 Apr 2025 07:01:04 +0000
Manifest next update: Tue 22 Apr 2025 07:01:04 +0000
Files and hashes: 1: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (hash: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=)
2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: MeGKemoMZOnLb1LQLrkGYvemSN3smAA370Lg/Ses4zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:86:46:77:bf:00:b4:df:93:03:16:fa:ee:d2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Apr 21 07:01:04 2025 GMT
Not After : Apr 22 07:01:04 2025 GMT
Subject: CN=be4ca48c83253455f748db001d6c25e4e5e7bcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:0d:59:e3:a3:c6:77:be:e6:e7:b3:2c:2f:
b5:1e:6a:f8:1f:e6:12:d5:47:ce:7c:11:c4:83:d0:
52:69:92:98:01:4d:b5:70:af:c9:e4:b9:f1:e1:22:
7e:07:b8:41:4a:09:39:e1:c0:4c:1f:80:65:c5:36:
6d:0b:90:4c:6d:0c:82:6f:8c:eb:df:5c:49:7a:bc:
13:91:1e:15:46:53:a6:97:a8:59:b1:f8:39:da:fc:
3a:32:6d:bb:3b:85:89:33:5d:73:a4:d8:4d:62:0b:
78:52:f1:c2:0f:11:3d:60:f5:b6:bd:a0:fe:8f:5e:
47:46:3f:4a:e3:31:c6:72:43:97:4c:6f:69:ba:0d:
e2:8a:19:f5:68:e6:76:a0:da:77:85:bb:25:c4:3e:
50:63:69:dd:82:3c:5f:af:5c:a7:c8:bc:a7:af:fd:
e6:03:c7:13:17:19:7d:99:6e:8c:fe:d2:d4:6a:6f:
68:d5:ac:cd:65:6b:59:4e:d8:f5:81:2d:cd:b8:ea:
ff:74:a9:3f:8e:f4:06:2e:9b:42:40:ea:4f:ae:09:
95:a3:61:0c:e3:b2:1c:f6:a2:19:cd:14:f1:b2:ee:
d1:6a:bb:31:d0:af:49:d5:70:52:a6:82:eb:7c:1a:
a4:64:06:be:ed:d6:37:d0:1e:6a:93:d4:f7:81:e5:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4C:A4:8C:83:25:34:55:F7:48:DB:00:1D:6C:25:E4:E5:E7:BC:F7
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:09:f8:34:b5:7d:d7:9f:c3:96:00:0c:29:ad:4d:c2:15:4f:
ca:29:40:1a:3f:7e:bf:70:de:35:db:c9:30:60:5c:bc:69:10:
34:5f:a3:fe:33:8d:73:40:ba:79:51:8e:78:f2:e8:cd:02:bc:
bb:65:51:ed:1c:c5:ef:0e:5b:75:7a:cc:d2:d2:b4:01:27:ee:
90:7c:83:7f:27:db:d5:29:eb:0a:35:28:25:01:c6:1c:ca:c5:
86:6c:bf:82:c6:d9:19:e3:54:7e:d6:00:b4:eb:53:94:62:32:
84:11:c9:28:c3:c5:21:8c:2c:b7:43:69:d0:84:88:dd:fa:76:
2d:15:16:c7:5d:73:06:79:80:42:b6:16:72:7b:66:1e:df:f3:
5b:76:a7:40:01:75:ca:51:b6:88:ae:fa:9f:26:da:1c:10:09:
3b:a5:b0:57:5b:9d:74:ad:54:e3:1f:63:08:2a:0c:ff:d0:69:
97:15:b9:92:24:0c:f7:e8:9d:ae:6f:cd:93:62:e6:eb:fb:11:
41:a2:4e:5a:32:ab:df:8c:be:7f:23:57:c3:8c:2f:e9:ce:38:
8e:8f:24:89:11:57:e9:8b:b4:e1:a3:98:09:80:01:88:86:d9:
28:94:21:05:ea:38:33:f0:ef:33:76:1a:e3:35:fb:2d:c1:15:
a8:d5:c3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:51 2025 by rpki-client