Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
File: d7yR94ozULrLv743b4gTIS0UmTE.mft (raw, json)
Hash identifier: rduFHL9cnimU57wz7VBzyCm1mVPrziodRoArkANvMbc=
Subject key identifier: 8B:C9:DE:0D:98:1D:9B:AD:E4:36:3B:E8:DF:90:33:05:97:35:0A:6E
Authority key identifier: 77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
Certificate issuer: /CN=77bc91f78a3350bacbbfbe376f8813212d149931
Certificate serial: 01964EFEA4CCAFE640A6323F42FCFAAB694C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 17:00:33 +0000
Manifest this update: Sat 19 Apr 2025 17:00:33 +0000
Manifest next update: Sun 20 Apr 2025 17:00:33 +0000
Files and hashes: 1: 1-1kKr9VJ8bw_SUqQcMUBecH1TKg.roa (hash: 3o6hb5np+9u5Gu9cp0jYxsJnhLz7Y1oIDpNf2dIi2oE=)
2: d7yR94ozULrLv743b4gTIS0UmTE.crl (hash: D4TGVSNl9WlzDbVc5Iw+5mMSFbsbALcza8Ugt2pM7vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:a4:cc:af:e6:40:a6:32:3f:42:fc:fa:ab:69:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc91f78a3350bacbbfbe376f8813212d149931
Validity
Not Before: Apr 19 17:00:33 2025 GMT
Not After : Apr 20 17:00:33 2025 GMT
Subject: CN=8bc9de0d981d9bade4363be8df90330597350a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:46:37:de:f8:4f:f9:53:11:90:55:65:e6:
ee:04:fa:f1:17:61:3e:f4:9f:82:45:3b:a2:83:19:
41:9d:05:ff:4c:6b:ac:eb:66:1a:b9:06:3b:6b:d9:
2d:fe:13:ca:7a:1a:1a:c3:3f:19:e3:06:ed:ef:9c:
9a:02:c3:1b:43:d8:de:e4:ea:c1:00:25:a0:5b:13:
2f:1f:43:e5:b9:ec:94:e2:31:25:eb:19:99:73:c4:
af:a9:ca:3b:f6:06:2b:50:fe:23:67:ce:11:fa:9d:
4e:8a:66:a1:fb:9b:66:26:5e:f1:36:72:95:69:cb:
68:f7:34:5d:43:ae:df:8c:a8:fb:8b:3b:8e:c5:bc:
d5:7c:af:2e:d7:f9:74:7a:ac:35:1d:1b:60:11:e4:
2a:38:46:ee:de:b3:37:ee:38:ac:d8:66:8e:66:9c:
f7:c1:7b:3d:93:cb:77:18:65:f9:d6:59:48:c4:be:
8d:55:ca:3b:37:a9:32:54:ce:a5:e7:e2:82:e1:22:
5d:93:b6:55:9c:27:c4:52:bd:e3:15:4a:6a:b6:76:
68:93:aa:1a:f1:7f:17:79:c2:97:99:14:d5:54:49:
8d:49:ec:c2:b7:9d:58:05:2e:fc:28:33:a5:26:f2:
bb:d9:8e:99:6b:a3:15:5f:a5:14:94:a6:75:1a:ab:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C9:DE:0D:98:1D:9B:AD:E4:36:3B:E8:DF:90:33:05:97:35:0A:6E
X509v3 Authority Key Identifier:
keyid:77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:27:d0:bf:93:4c:8a:c2:f0:5e:2a:47:c8:96:5e:bb:05:75:
95:3e:3d:4d:9b:ca:67:8b:b9:c6:67:3a:5a:96:3e:0b:59:83:
6a:2d:3f:3b:c6:38:db:48:05:23:a4:95:62:2b:bf:74:eb:c2:
0a:d0:ef:09:10:c9:7d:35:8e:b8:b4:cd:3f:3b:d8:ac:22:c4:
d3:8a:d0:38:d8:2b:48:9c:2e:bb:64:ed:cd:d2:39:08:52:3f:
80:d0:2f:5d:87:4a:45:35:22:92:7c:af:c5:55:31:d0:88:76:
5e:7d:7a:d5:77:09:00:c6:30:fa:06:78:f0:04:0c:52:12:2c:
f0:96:91:8a:da:8d:ec:05:8a:94:3a:0a:9d:bd:65:70:f7:d5:
8b:f5:2b:6a:95:3c:f3:06:0a:d6:04:48:b1:59:1a:2c:cb:f4:
fb:3d:74:03:69:13:27:20:b4:9a:b5:27:c6:49:f4:d4:87:46:
bd:a8:2d:15:01:ee:19:25:8e:af:32:b5:87:8f:59:5c:51:af:
de:5a:18:34:84:7a:b3:d8:eb:b9:b0:8f:a8:5b:4c:ea:ca:ae:
1b:ad:5d:63:13:2a:37:2d:85:12:80:6f:12:ab:b0:c1:27:f9:
8c:33:e2:dc:2b:da:13:1c:3b:1a:b7:04:fd:d7:53:de:52:a5:
5f:cc:31:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:50 2025 by rpki-client