Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
File: mnF-0dxIgETl4qsAdUM1WM_ejIU.mft (raw, json)
Hash identifier: 1ZT6zWjXttXPO788fwCqOai7FG6jM/Dus1TferbZGEc=
Subject key identifier: 9A:AC:87:46:05:67:9A:99:E2:DE:D7:B1:95:7D:BF:42:79:5A:DC:1C
Authority key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
Certificate issuer: /CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Certificate serial: 019653B7C2F47CB5986ABC0DA11C1CF4553B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
Manifest number: 03EA
Signing time: Sun 20 Apr 2025 15:01:13 +0000
Manifest this update: Sun 20 Apr 2025 15:01:13 +0000
Manifest next update: Mon 21 Apr 2025 15:01:13 +0000
Files and hashes: 1: 1-I5euRLEKsr7FF-4VskQLdu5Wm0.roa (hash: 4AXnB9gGffBa+5UGJwTlfxl3dTLBtwfWaDwofBbf+WY=)
2: MtoIhFzzjtMtI4g5kxOun27y3IM.roa (hash: DlZC6F8VIFuzmjWhSIX/LygNaAgpAHPicElZhEshqgM=)
3: mnF-0dxIgETl4qsAdUM1WM_ejIU.crl (hash: I7ENOac5ozy2oJJgAvlqjR91MqErt9WdWmLMy9CWul8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:c2:f4:7c:b5:98:6a:bc:0d:a1:1c:1c:f4:55:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Validity
Not Before: Apr 20 15:01:13 2025 GMT
Not After : Apr 21 15:01:13 2025 GMT
Subject: CN=9aac874605679a99e2ded7b1957dbf42795adc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:81:b7:9e:58:bc:f7:5b:8e:2b:20:60:94:
e4:11:74:f1:a6:57:a9:d4:3f:f5:a1:c8:4d:6c:62:
a8:64:5b:14:bc:79:79:38:13:c6:3a:0d:24:42:f1:
01:ae:1b:0b:7a:c9:b6:fb:e6:28:61:6c:c5:f4:70:
9b:fd:3d:43:aa:3b:81:65:c8:d9:55:f5:9f:a6:b0:
52:25:b8:29:73:ac:4d:02:e1:ed:82:81:17:d7:4c:
3c:5e:d7:74:94:a6:eb:66:1e:6d:f2:49:84:d4:fc:
80:22:e2:51:b6:e3:12:3e:c3:c8:fe:d1:ab:bb:fb:
a3:6b:36:dd:32:0c:e6:6a:75:8f:fe:28:ce:72:98:
88:76:15:dc:34:0c:f8:f9:76:09:88:a5:c5:40:a0:
11:fc:61:78:05:9e:df:ee:f8:0e:e3:0d:91:db:c5:
a2:2c:78:28:25:4f:df:f1:27:b0:60:ba:a8:1b:30:
5e:de:02:37:ca:78:92:53:5d:1d:0f:ce:f5:14:42:
ea:23:48:94:3c:16:d1:33:56:de:fc:50:b6:49:26:
8c:44:6a:67:0b:fd:92:40:a5:f2:06:7f:81:84:84:
25:77:8d:c6:a9:3f:01:a6:dc:bf:f0:8e:e3:af:4f:
9d:4d:df:b0:cd:2e:f0:15:c3:85:69:ee:20:dd:ac:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AC:87:46:05:67:9A:99:E2:DE:D7:B1:95:7D:BF:42:79:5A:DC:1C
X509v3 Authority Key Identifier:
keyid:9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:33:71:9b:68:e9:1b:3c:74:2e:46:f1:ae:ed:f3:12:a7:56:
90:91:8e:f3:2d:07:f2:32:9f:aa:8e:f2:20:cc:48:0f:d7:1e:
62:39:61:9c:aa:b1:d6:87:8f:6a:87:09:55:ee:42:38:95:69:
fe:9e:3e:51:cd:44:91:8d:f2:9e:67:0a:a3:f7:d5:37:bb:c9:
36:ea:b2:8a:6d:dc:2e:8d:52:66:68:f2:8e:e9:1d:62:1e:73:
b1:88:0b:6c:d0:31:70:13:0d:67:d7:7e:fd:50:b7:0e:cb:a1:
c1:8b:16:34:62:e7:ea:0e:0f:21:f4:a9:ba:22:1c:61:d4:f1:
62:0d:6e:1b:9c:39:5e:b7:54:60:57:eb:27:9a:3b:9e:8b:fa:
1d:dd:57:55:93:1f:58:c3:2c:2e:20:ab:fe:fc:38:e8:60:92:
19:1a:9e:15:07:f8:62:e3:18:9a:b4:39:53:e9:0b:4f:26:d6:
10:ca:0d:0a:7b:b8:c4:26:4a:13:a1:f4:9f:98:88:69:b1:b4:
4f:c2:67:d9:bc:52:7d:d4:18:6e:e5:87:ca:ff:02:83:91:70:
d2:de:15:79:38:a8:91:a4:43:1e:20:03:78:56:13:dd:87:b9:
6d:78:84:53:40:bd:72:8d:8e:b4:01:ad:e6:67:33:b0:2e:69:
3d:23:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:08 2025 by rpki-client