Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
File: mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json)
Hash identifier: R4TfT6diUU3bsl/ODtyULzt3n+oRaI9M9dRu56lvdHI=
Subject key identifier: 5B:9A:AD:54:F5:B5:58:76:1F:99:B8:6E:46:93:3C:53:C2:3C:AC:23
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 01964D7E2C04E3080DE73C01A13031365D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
Manifest number: 13DD
Signing time: Sat 19 Apr 2025 10:00:36 +0000
Manifest this update: Sat 19 Apr 2025 10:00:36 +0000
Manifest next update: Sun 20 Apr 2025 10:00:36 +0000
Files and hashes: 1: 2z0NeYZe1xNl9FiaXMK1zDvmewM.roa (hash: cOILWkUhsnduTiBD7sHiLuG2BYfCl/U6Tpdfh+0XXP8=)
2: 5Sxq5_88aKl6Q1AixLmSpdxssj4.roa (hash: 930p4kPdeb7NPu1eD23W3ram0O2yZZYGtkILA0nswPo=)
3: BnHU_9oB_ewnVOgPSPpU2bWe8Zk.roa (hash: go8wZXjflDuAlY6EuMTLQuty8jZX31nqsRbiTUQs4zs=)
4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: NUyxjxnnnpfWQpss9qSGUu791DbREBBu+o8N4UNEGfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:2c:04:e3:08:0d:e7:3c:01:a1:30:31:36:5d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Apr 19 10:00:36 2025 GMT
Not After : Apr 20 10:00:36 2025 GMT
Subject: CN=5b9aad54f5b558761f99b86e46933c53c23cac23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:1b:b1:55:43:cd:4f:68:d2:b9:61:d5:5e:
20:21:18:1e:bd:e9:b6:74:f9:ab:7e:bf:e1:b7:ea:
8a:b0:dd:9c:b2:df:d6:0d:77:be:97:38:70:25:13:
44:eb:38:94:f8:86:a6:e6:40:30:09:9a:b7:d8:4d:
0b:57:ff:da:74:d2:2d:49:0f:c7:f9:41:1e:46:8e:
6a:b1:b1:65:88:d8:a5:79:92:89:0c:fb:0c:43:28:
c6:39:5a:37:b4:73:c8:50:7d:31:6d:bc:83:ec:53:
c2:48:d3:f2:bc:88:cc:f9:be:1e:c8:95:78:16:8c:
8f:d8:5f:a5:5e:4e:ab:e9:98:55:c9:89:a9:a3:b2:
8b:43:79:6b:e2:0e:77:a9:74:f3:ad:db:b4:ab:1b:
c4:ae:7c:93:6f:1c:de:bf:3f:58:24:41:5f:f0:70:
01:9c:91:59:48:ef:79:a6:16:97:cc:4c:da:2e:e2:
a6:7b:7a:76:88:01:37:26:f9:2b:2a:80:73:d0:e4:
e9:fc:a8:52:d8:a1:e9:2e:24:86:09:5c:f4:cb:36:
6a:90:80:07:1a:5f:f2:a5:12:24:67:36:5b:75:91:
7d:94:bb:71:bf:45:cd:3f:3d:e0:8b:bb:b5:ae:6c:
1b:71:4c:27:38:21:0a:9d:88:48:79:94:22:e8:df:
ed:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:AD:54:F5:B5:58:76:1F:99:B8:6E:46:93:3C:53:C2:3C:AC:23
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4a:d2:73:48:11:84:a3:7a:6c:5a:d1:84:5e:ad:b0:e7:18:
20:d9:df:d4:4a:9e:8a:b8:57:2f:3b:5f:25:48:68:48:8d:3b:
f6:51:99:c0:35:3f:32:e6:19:25:86:82:0d:44:db:4d:e3:88:
95:5d:9e:cc:5a:c4:6e:7e:2e:3a:5d:dd:f2:6f:57:35:1d:7a:
72:11:92:b3:31:c6:4c:28:d4:07:20:f8:37:c7:1b:8d:c5:48:
d7:48:a9:40:d0:1b:8e:7a:ff:13:1c:b1:e0:23:10:8c:ee:71:
fb:f6:d4:d0:69:b2:f8:f2:d4:13:a8:b6:0d:75:07:df:d8:2c:
04:0f:4f:6e:a2:ce:05:a3:5b:30:7b:03:fe:d1:83:91:62:f4:
c6:98:36:a4:b2:00:05:7f:a4:0b:34:66:2a:b4:f4:47:56:b9:
2b:2a:9b:ef:d6:67:79:44:e4:8d:d5:ec:49:5e:b1:9d:55:e5:
4e:7f:33:8f:4e:ff:a6:81:3e:ba:a0:e5:cb:03:4c:af:ce:19:
86:c0:86:b1:ca:ad:da:23:0b:93:cb:1a:d4:66:8d:8a:cb:6f:
6b:5f:b7:76:39:ea:4f:a5:07:f9:7d:26:d4:51:7c:31:cd:8b:
43:03:11:21:5f:e3:de:b3:33:30:86:2f:c9:a1:39:9a:4f:cc:
de:07:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:06 2025 by rpki-client