Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier: W0w1xBNQAHeIjv6JFSCZqQ6cm/TGAsOZqj6kWf9qSf0=
Subject key identifier: 38:50:82:28:B4:1D:FC:71:55:5D:05:82:D1:B5:36:5A:34:F5:4A:E9
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 01965B39740E47BF213016624D99FFC952DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number: 014F
Signing time: Tue 22 Apr 2025 02:00:14 +0000
Manifest this update: Tue 22 Apr 2025 02:00:14 +0000
Manifest next update: Wed 23 Apr 2025 02:00:14 +0000
Files and hashes: 1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: 1wHMf+sJz91FEKy6XlIupoVyMVYoWmtVMSspdFDThDU=)
2: Oa9LsMPKbG6aASCQoEwRN7kKYK4.roa (hash: Pw17YPc4vy9Z5t/JIPzjeYGs6qX3rfu7GNC8UJfrzuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:74:0e:47:bf:21:30:16:62:4d:99:ff:c9:52:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Apr 22 02:00:14 2025 GMT
Not After : Apr 23 02:00:14 2025 GMT
Subject: CN=38508228b41dfc71555d0582d1b5365a34f54ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:01:3d:fd:aa:fe:fd:e2:09:98:03:ae:5f:
ad:e3:3c:97:a1:3c:71:cc:b9:80:b2:c5:55:e2:12:
30:c9:f9:ea:47:c6:69:ad:3b:f1:97:78:94:e7:0d:
77:b6:0e:95:bf:56:02:61:17:18:e4:92:04:de:3f:
2a:77:18:86:3a:fa:a9:e3:a0:d4:e7:7b:98:1d:f3:
2c:16:c2:5d:b5:41:f1:c4:c0:fc:20:19:b1:de:ce:
27:0c:2d:38:5f:49:93:c1:7f:47:96:d6:2c:4d:37:
dd:be:75:83:04:4a:f1:fe:ff:ec:6d:ad:39:da:11:
39:ab:64:58:ce:1f:30:9c:f6:e8:24:84:c1:55:7e:
31:76:48:ae:ee:9f:6a:54:28:f2:a0:85:8a:62:fd:
f7:f2:22:f8:fc:88:a2:29:76:7e:ee:7e:ac:d5:4e:
ea:86:93:b9:90:d4:a5:a7:1e:a6:93:6c:7c:4c:45:
43:53:26:75:40:a1:64:bf:62:0c:6f:c0:c8:8c:f2:
29:5d:9f:fd:2f:2e:79:39:0e:02:69:cd:1e:8c:03:
00:2c:7c:c2:92:4e:5f:3b:68:b7:27:bf:9c:49:68:
11:92:6a:7b:20:cc:a7:ac:f6:08:53:b3:de:ed:fe:
0a:2e:31:49:7a:25:13:83:da:1e:fb:b6:31:fc:a8:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:50:82:28:B4:1D:FC:71:55:5D:05:82:D1:B5:36:5A:34:F5:4A:E9
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:66:53:f1:fa:79:4c:5d:a9:c1:05:ae:88:21:66:62:06:de:
4d:1d:9c:fb:fd:34:c1:b1:52:d4:aa:ff:30:43:a0:1c:16:52:
3f:bb:dc:bf:83:aa:81:26:6b:fb:26:21:8c:9d:43:c6:39:2e:
6f:d5:9b:8e:4e:9c:d6:ae:ee:98:de:f3:e7:59:5d:68:ea:ae:
9c:c0:25:17:1d:77:97:f4:64:c6:42:9b:8c:d7:6c:81:39:c4:
fe:80:65:c9:d2:ca:a8:99:49:11:bd:2b:bf:85:47:ce:c6:5d:
12:34:b1:4d:3f:da:9c:75:50:b2:c0:f2:29:07:82:a0:25:6b:
e8:1d:de:8f:be:af:ea:ac:fb:42:fc:03:4c:c0:a2:aa:6f:74:
5e:d9:0a:a4:01:11:62:2c:8e:e7:2f:35:9a:fe:1d:b0:fc:25:
13:5c:57:c9:f2:09:47:ba:a6:2d:95:39:96:ca:ce:ee:25:63:
4e:c7:bc:64:9a:06:12:6b:e1:44:5b:03:c0:7e:a7:c8:77:5c:
c8:e5:87:3f:6e:9a:70:29:21:8a:5f:e2:10:14:20:40:48:14:
d7:88:38:4b:12:4c:2c:62:83:45:77:eb:53:ce:63:d6:99:30:
1e:02:40:59:f5:cb:7e:72:2d:28:7b:c1:74:70:57:37:7c:02:
87:53:e4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:57 2025 by rpki-client