Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File: rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier: Al+ZR+YFKw/4cXuiPQtbYHyY+AnT+OZniQ9o0aneL1s=
Subject key identifier: C0:97:EE:9D:6F:5B:E7:82:6B:73:8F:93:87:66:70:EC:54:E7:A8:33
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 01964444793FA35C3B136F67E1DF77716C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 15:01:00 +0000
Manifest this update: Thu 17 Apr 2025 15:01:00 +0000
Manifest next update: Fri 18 Apr 2025 15:01:00 +0000
Files and hashes: 1: WTZTgFi28jLlym6OE35mFLAhldM.roa (hash: jSGkSx+xIVrc/nZDnmv+Qse1KJ3JV2HCFfbdRdP+Xro=)
2: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: XtjyyC+MBO0wxN3ZwhWs5bI0LJcTPJY3A0duiZyLIZs=)
3: woxyfr4YHK9ZGgB6eP_og7DkRmY.roa (hash: 8ItNkdXM0aYCSxvQ5MhcZhdiy0lnPAozqUHboW5SaAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:79:3f:a3:5c:3b:13:6f:67:e1:df:77:71:6c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Apr 17 15:01:00 2025 GMT
Not After : Apr 18 15:01:00 2025 GMT
Subject: CN=c097ee9d6f5be7826b738f93876670ec54e7a833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:23:ff:e2:ee:f2:8b:a7:0e:bd:b5:12:9e:
55:e6:50:67:67:77:85:cf:32:09:f5:3e:85:28:15:
73:0b:2a:98:a3:f8:85:60:a7:c8:1b:1c:71:ed:26:
6c:ef:bc:53:fc:63:73:41:d6:88:9b:5d:20:af:ed:
db:53:97:b5:3c:6d:e5:f5:1f:2b:ad:8e:b6:93:04:
f0:2d:a1:7a:7f:e5:e0:5d:3b:cf:65:88:c3:00:67:
ab:be:91:93:cb:9a:84:32:20:ea:6f:f6:87:c4:1c:
a2:2f:f1:f2:6d:7e:2d:51:39:6e:a6:38:0d:71:31:
0d:9e:63:88:6f:b3:3f:6a:30:95:a6:5c:7c:2e:86:
a0:76:77:69:55:76:a7:8d:1d:ed:38:88:e7:8c:76:
3e:55:09:74:75:67:5f:96:1b:16:5d:c6:bc:49:d8:
f0:b7:3f:46:5b:70:e5:e3:ab:67:d7:70:52:70:80:
99:a7:c3:de:6c:a7:44:bf:9a:93:d8:de:2c:cb:19:
69:3b:0c:f9:fa:0e:87:99:80:e6:37:21:dc:6f:87:
f6:bc:61:6e:d6:60:e4:ea:41:b3:3b:03:a4:84:e3:
be:20:c1:e8:fd:18:b1:ac:b2:47:3e:c6:8a:04:b5:
50:c0:61:dc:32:b9:ce:b0:67:cf:01:fd:75:d5:cd:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:97:EE:9D:6F:5B:E7:82:6B:73:8F:93:87:66:70:EC:54:E7:A8:33
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3f:b4:51:47:58:54:4c:ed:ce:61:57:84:b0:4a:19:fa:c7:
91:3a:56:63:9a:38:40:ab:e5:73:a1:6b:63:4d:ea:82:44:07:
11:12:49:d2:6c:b8:9d:2c:bf:0d:04:08:a7:2f:49:30:01:21:
ba:52:d3:19:80:ff:f5:ea:e1:db:95:8c:14:57:bf:9c:f7:6c:
ca:2d:2a:13:3e:e7:7a:2b:87:cb:7e:49:af:bc:54:f6:2a:ca:
74:4b:bc:bf:a4:7a:ac:75:d2:28:de:00:7d:af:e5:77:13:ea:
46:b4:9d:54:84:99:5e:06:ad:78:54:9f:f0:b9:7e:ed:f7:17:
4f:ec:c5:d5:38:6b:24:5a:31:df:66:a8:bb:de:95:63:c4:27:
83:dc:25:b4:a4:ae:91:21:d7:3e:2c:3f:bf:29:c5:9c:87:6d:
fa:70:30:c1:15:67:2f:e4:56:b0:b4:cd:77:3d:ae:53:52:47:
71:08:2f:66:58:66:be:db:bb:90:6a:45:4e:58:74:c5:48:f7:
b4:b9:ee:53:46:64:54:cf:a1:11:be:a2:00:e3:2a:f1:bd:11:
31:d2:d9:44:a2:00:f0:53:e8:a1:8e:e5:da:f3:50:db:1b:74:
1b:4a:24:a9:c4:71:fd:1d:49:a8:1d:5a:4a:9b:82:08:26:16:
5f:f7:93:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:33 2025 by rpki-client