Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: GLPfYAY28Yx49VA3F5wUnOIRuUOn5sEJCREba0TDzcE=
Subject key identifier: 69:AA:A5:F6:47:F2:7F:96:3B:C1:34:2A:6C:29:05:B1:5F:79:47:30
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 01964B220E1D8D4FD739A4CFDFF423808EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 23:00:44 +0000
Manifest this update: Fri 18 Apr 2025 23:00:44 +0000
Manifest next update: Sat 19 Apr 2025 23:00:44 +0000
Files and hashes: 1: 2JXcaA80r7d-EIDaMijpbBPasoc.roa (hash: gf95/nywAYIZdNJbfxynwrtY4coqSX3R7aiF8YJONgo=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: fK7zFXLcd8yjOj2dPmdzYbDuLsw+5iBAn3ESHwRcbWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:22:0e:1d:8d:4f:d7:39:a4:cf:df:f4:23:80:8e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Apr 18 23:00:44 2025 GMT
Not After : Apr 19 23:00:44 2025 GMT
Subject: CN=69aaa5f647f27f963bc1342a6c2905b15f794730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:20:aa:75:53:6e:6c:3e:cc:35:30:dc:d2:
b3:4e:cd:bb:cf:35:fb:17:77:1a:78:56:30:b4:85:
62:f3:38:53:b1:53:5a:d4:5d:17:70:51:d8:86:4b:
20:77:0f:86:c4:f8:f9:fb:a2:89:54:b6:33:9c:6c:
a3:e5:1a:87:58:8d:5e:68:02:cd:8c:49:23:8f:83:
f3:b5:64:bf:7d:a7:2d:9e:1e:cd:86:28:c0:67:40:
1b:94:e7:3b:45:37:e6:3d:86:09:4c:01:5b:7c:eb:
2b:04:8b:a5:20:ce:c5:56:5d:92:5d:5a:8e:74:a2:
31:78:fd:07:ec:9e:0d:94:b1:ce:74:18:6e:5d:31:
57:14:83:15:71:12:04:bb:4f:8b:f8:df:0d:14:8d:
19:f4:1e:43:7f:cd:d4:e7:49:11:6d:b6:17:d2:37:
14:96:ae:aa:d7:39:e9:be:ce:7d:f4:86:a5:5e:32:
89:b1:7a:d1:08:54:8a:a9:5a:47:29:17:b3:9c:dc:
54:14:12:68:62:33:15:df:f3:05:65:af:3e:3c:08:
d3:02:34:82:a9:25:05:03:e7:84:fb:73:b9:e4:f7:
6b:9b:79:37:71:98:3f:c9:6a:19:0b:30:2b:ee:c1:
ba:62:32:51:10:78:25:e8:2d:03:ba:08:ff:8e:2b:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AA:A5:F6:47:F2:7F:96:3B:C1:34:2A:6C:29:05:B1:5F:79:47:30
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:35:4d:e9:7f:fa:76:13:7a:2c:21:86:91:f5:80:9e:07:d8:
81:c3:50:5f:57:0d:9e:0b:91:eb:e8:80:91:38:99:90:a0:1d:
f1:a9:0e:f3:3b:d1:1b:a1:21:57:cd:f9:d7:63:7f:b1:37:c6:
7d:03:e4:73:a1:6e:d4:8f:64:19:3e:4c:b7:8e:2e:b1:85:c2:
d3:22:c3:26:91:f6:97:eb:41:43:95:74:0f:9e:59:c2:d6:b4:
ac:d4:7c:b4:c4:1d:ea:1c:0b:4f:e9:9c:69:68:b0:58:15:2e:
b5:35:1a:21:8a:ad:ca:35:53:c3:20:f7:b0:4a:60:3f:89:7a:
27:a1:d5:4a:ec:db:ab:51:3b:77:5f:cf:c2:f5:2e:21:a0:a0:
7d:83:6d:f4:b4:7c:05:53:87:41:53:28:64:06:09:5b:85:d3:
b8:ea:71:b6:2d:d4:b5:4b:32:41:f3:4e:db:89:c4:05:b9:23:
49:78:56:9d:87:f3:90:75:27:f0:07:5c:0d:3f:da:33:8f:ab:
dc:06:05:3b:aa:b3:ae:8f:bf:3e:82:f9:64:20:4b:44:3c:3c:
50:2c:6e:99:09:d7:92:08:d0:82:28:e1:1a:04:5a:ed:7b:4c:
d4:2d:03:70:8b:1b:a8:1c:d0:b7:8b:15:76:cc:e4:7a:a0:9b:
fc:2c:76:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:27 2025 by rpki-client