Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json)
Hash identifier: eKXPC/vQMA7xKcx6jAwU8sIIXNFBNcbvfc0AzIoZz7Y=
Subject key identifier: 06:D6:B7:6D:77:10:69:9F:C3:98:95:EC:11:3F:67:E0:50:BE:C9:7E
Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Certificate serial: 01965500A251019275394DDC96E145523A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 21:00:27 +0000
Manifest this update: Sun 20 Apr 2025 21:00:27 +0000
Manifest next update: Mon 21 Apr 2025 21:00:27 +0000
Files and hashes: 1: UCapjxyaJi5z5guHcEyumiBs9Pg.roa (hash: LIHlX4VN2XaFL14w/XwFEPN4bxUvck7ZLxdQY/Md6OU=)
2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: R/hd8bHDmtINsssZB0acUGd2tgCBYVW5U4b67Bnpy9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:a2:51:01:92:75:39:4d:dc:96:e1:45:52:3a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Validity
Not Before: Apr 20 21:00:27 2025 GMT
Not After : Apr 21 21:00:27 2025 GMT
Subject: CN=06d6b76d7710699fc39895ec113f67e050bec97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:ea:f6:99:68:be:3a:4f:16:93:08:01:40:
4a:a0:17:f9:d6:81:26:5c:24:ef:f1:3c:25:fc:c3:
0b:72:ca:a5:ea:a8:8e:9d:c3:4b:ff:e2:de:bc:d2:
07:68:0d:8d:77:3c:0a:2e:b9:4d:5b:68:92:7b:3c:
84:d0:c0:da:7f:4c:e5:9a:69:ee:97:f3:3d:3e:0b:
71:83:60:1e:7e:a4:e1:30:8e:49:91:8d:95:6b:24:
ee:6c:8d:b0:79:7c:a0:c5:b3:ad:34:57:79:da:73:
c4:51:e1:23:d7:57:17:fc:a0:79:38:92:9c:40:02:
e8:19:f0:c6:1d:96:2f:d3:47:13:31:55:00:d8:6a:
bf:46:54:06:92:2f:fb:1f:cd:24:36:e2:3d:fb:73:
6e:84:ba:fe:f4:3b:01:95:99:02:dc:6a:d9:6c:ca:
92:69:f7:24:84:0d:9d:98:cc:37:14:30:46:c0:10:
66:3f:2d:f2:f9:0b:2c:ad:42:ed:87:bb:8c:3e:a7:
bd:82:e3:c0:ab:c7:0b:b0:82:57:95:a1:f0:b7:de:
8e:e0:db:aa:12:1e:18:be:86:00:18:8a:53:5f:57:
86:ce:0d:51:74:7a:37:94:5c:30:da:48:4c:25:27:
93:cd:d4:6f:65:aa:14:3c:35:62:6d:07:35:99:53:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D6:B7:6D:77:10:69:9F:C3:98:95:EC:11:3F:67:E0:50:BE:C9:7E
X509v3 Authority Key Identifier:
keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:28:c3:a3:b9:55:01:5a:0e:62:f2:6f:1f:df:9d:71:bf:c2:
ef:b4:a2:80:1d:e8:76:32:74:86:29:9a:8b:00:93:f9:dd:95:
df:a2:9e:e5:4c:a2:df:14:2c:93:b0:b9:6c:60:b8:19:e7:c5:
3c:e4:9e:bb:fa:63:a8:d3:06:2a:86:35:68:9e:86:1d:51:2e:
da:ca:ee:64:ec:23:96:8b:84:b3:2f:ed:3f:67:d5:c0:11:c3:
66:b5:7f:89:77:e0:c9:d9:38:7d:2b:2d:13:83:7e:13:ea:14:
44:e3:47:89:79:7c:b4:ce:4d:28:78:93:84:1e:a9:0d:51:9f:
32:2b:c8:bd:62:81:fb:9e:8b:0b:60:8f:80:d9:d2:ea:58:a7:
df:41:98:e3:e8:63:86:fe:f3:4a:84:43:77:af:aa:05:6d:00:
d3:09:17:d5:c0:7c:dd:04:8d:19:41:89:ca:cc:aa:55:1c:05:
a5:27:db:be:8b:4e:ae:8f:80:18:c7:ff:a7:dc:9b:eb:95:c8:
ec:ce:71:2b:c0:34:6a:3d:43:54:6d:f1:99:87:fa:a3:01:99:
c3:f0:1d:44:33:5f:23:99:aa:b2:10:2c:d7:82:70:cf:66:90:
28:62:fb:d2:bd:f7:57:1d:ef:bc:ac:40:8d:aa:50:a3:52:bd:
88:86:10:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:50 2025 by rpki-client