Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: JAWKx7w87kKnfUp1OS/3w44ctAnEY0A/0c8JxjKWN0s=
Subject key identifier: E3:36:CC:8B:CF:4A:6C:34:9D:3F:DE:7A:BC:C6:50:DD:37:83:87:0B
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 01964F35EF3C09E2E51594B225274DCE44C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 14FF
Signing time: Sat 19 Apr 2025 18:00:56 +0000
Manifest this update: Sat 19 Apr 2025 18:00:56 +0000
Manifest next update: Sun 20 Apr 2025 18:00:56 +0000
Files and hashes: 1: 16VwzWVgNRyLCtAXch9PWfSWgeM.roa (hash: C203Vfz7VUs5MzzkDe6+jJ/0Hm3QJ8YvUWmNLcGjW6Q=)
2: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: gbHLzzv7XLTQJO7nV7BLmlafao/9pL0jLLHhDcvMWrE=)
3: si754UrpKqsViXC-aHyx2LtipFA.roa (hash: VCYyh8ACSkDGJLu/cfRmB43QT8YqJ4jUUodjDefcg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:ef:3c:09:e2:e5:15:94:b2:25:27:4d:ce:44:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Apr 19 18:00:56 2025 GMT
Not After : Apr 20 18:00:56 2025 GMT
Subject: CN=e336cc8bcf4a6c349d3fde7abcc650dd3783870b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:a0:05:90:d5:e3:2d:35:a2:b0:ca:50:71:
e5:a2:f0:f0:93:5d:f9:d8:c1:b7:e1:61:0d:2a:e5:
8d:59:a1:49:06:e7:43:4d:da:b2:be:a8:6e:58:a0:
ee:34:b7:c0:a4:dd:3e:ff:4f:ad:c9:1b:00:8e:5b:
82:7f:dc:e4:60:a4:44:4a:63:e6:62:a9:eb:3d:76:
c2:b3:d6:b8:7e:44:0c:e7:93:0b:a5:15:af:50:49:
3c:7f:90:f3:54:e4:6e:6a:4b:e7:5a:79:a5:66:7c:
c8:6c:aa:f1:11:7f:de:db:f5:0f:c3:b0:99:f5:ac:
a5:6f:13:f9:62:ef:5f:1b:19:73:1c:64:84:27:ae:
e1:bd:d3:61:f3:e0:b7:20:db:54:43:e5:9e:9e:19:
08:a0:a5:62:f5:c6:ad:ab:fc:52:e5:93:cf:f1:8e:
5e:82:85:37:34:72:c4:55:67:69:f4:71:43:dc:99:
1a:c0:91:c0:86:1e:e1:e2:ec:59:71:8d:2e:53:12:
ef:a8:1e:85:03:a4:a0:ce:5a:32:61:69:f0:70:d4:
53:97:1d:77:41:15:77:7e:d8:b6:01:6e:39:58:05:
f9:37:ee:10:f9:8a:3d:c8:59:57:7c:d7:1f:8a:d7:
a6:1a:77:34:49:67:38:2f:65:05:1c:6d:21:3e:df:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:36:CC:8B:CF:4A:6C:34:9D:3F:DE:7A:BC:C6:50:DD:37:83:87:0B
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c7:76:a1:ea:8c:bf:96:f9:fd:63:99:7e:87:54:dc:7e:6a:
14:53:04:18:10:28:f7:de:da:ce:b9:d3:13:2f:d2:c8:ac:70:
d7:7e:36:a6:33:43:75:08:c6:78:8b:46:52:7e:aa:24:dc:73:
13:67:4b:47:0b:32:8a:33:66:5c:a2:81:be:6c:7c:f5:0f:de:
16:2f:10:82:c4:3f:27:fa:94:6a:db:e6:9a:55:86:08:ff:f7:
62:a1:fd:1a:a2:1d:87:20:b4:fa:86:87:c0:d6:31:d7:bd:76:
ca:59:db:a3:1a:52:0d:13:98:9b:80:5c:23:41:20:c6:36:75:
62:72:39:f5:55:e7:54:76:e3:e5:3b:6e:30:55:e6:93:60:62:
a6:c3:0b:b7:02:62:7f:ed:af:09:37:11:3d:7e:08:ca:6c:0b:
83:23:3b:ad:df:37:7a:fe:69:73:ce:f1:d9:44:f2:f9:39:f5:
65:7f:b7:f9:45:f1:cd:a1:36:c6:5a:e2:09:7d:7c:8f:8d:87:
57:08:31:4e:95:30:48:7e:e2:f8:34:7d:9a:ec:32:6e:e1:34:
bc:9a:15:eb:95:e4:64:79:02:a1:b6:79:b6:d7:76:06:b4:3d:
82:e9:ed:2f:9c:97:34:74:c8:d5:ad:e6:d6:81:73:1c:ea:94:
30:f2:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:36 2025 by rpki-client