Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
File: 977TP_AejgncT-3NAROcDneFSq4.mft (raw, json)
Hash identifier: ITY0v/yQOUiuPUXZyen2UUekEF4QhAj3i8ODvejhE9I=
Subject key identifier: D4:59:4C:EB:1A:74:87:CC:E5:85:B9:CD:F6:BE:F2:F4:6C:22:10:E5
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 01962ABBE8E9CDCA2C3F50F3B33D0C095C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
Manifest number: 14EA
Signing time: Sat 12 Apr 2025 16:01:19 +0000
Manifest this update: Sat 12 Apr 2025 16:01:19 +0000
Manifest next update: Sun 13 Apr 2025 16:01:19 +0000
Files and hashes: 1: 977TP_AejgncT-3NAROcDneFSq4.crl (hash: ORjNttfzTExzRreIkcaj/CeNPy4Zg2m1HCFeAfzJUMI=)
2: _lgnGISO0ktGS-TS3jHHuxqlGcc.roa (hash: 2bgXxxG8FQEtolmgRr2kuRhZKybBJ/pEC6iODZDta6M=)
3: yIVyJLl1EpKKS9GoVS2g6EtcfKo.roa (hash: +BexIZ1+iniEPsBZlKynSCHhy877ZiICabmi/L0fbr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bb:e8:e9:cd:ca:2c:3f:50:f3:b3:3d:0c:09:5c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: Apr 12 16:01:19 2025 GMT
Not After : Apr 13 16:01:19 2025 GMT
Subject: CN=d4594ceb1a7487cce585b9cdf6bef2f46c2210e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:14:d7:a1:b7:6b:92:33:46:55:35:fb:1a:
1c:f9:bb:61:ed:41:32:4f:fd:54:7b:53:9b:37:63:
b9:08:96:ca:16:ab:fd:d3:b9:66:13:33:39:89:dc:
96:54:18:1d:15:57:49:c0:82:3e:37:9c:6e:16:e9:
d9:c4:17:0e:ed:c0:68:eb:6f:80:c8:08:a0:f9:5e:
73:3b:c2:41:55:be:8d:8c:bb:27:e0:74:59:77:83:
17:fd:ee:83:10:9b:ac:70:32:ee:71:5c:dc:ca:87:
71:a5:e6:04:b6:93:5c:fd:77:8e:1b:98:c1:c6:54:
7e:87:4d:41:50:de:ff:2d:d3:f1:7f:89:2c:94:0f:
56:68:e1:73:6d:43:48:56:b7:7a:26:7d:d7:5f:07:
1c:ca:eb:97:32:f5:0a:c7:f7:cb:2a:6d:05:64:bf:
f1:24:60:6c:b4:bc:d8:59:03:1a:b6:41:4d:16:8c:
39:94:91:88:92:b2:9c:15:8e:6d:e0:37:18:e1:b3:
ed:b3:9c:3d:7f:1f:b7:73:ea:17:04:09:04:8a:d2:
0a:f2:12:eb:24:a3:9c:36:f7:f9:07:13:ee:2f:eb:
8c:25:75:7e:06:28:31:9d:c4:80:77:11:05:eb:d8:
88:79:99:6f:db:5e:18:72:fc:9b:6e:e2:03:04:95:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:59:4C:EB:1A:74:87:CC:E5:85:B9:CD:F6:BE:F2:F4:6C:22:10:E5
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d9:52:07:2b:41:a4:3a:c4:9f:13:5e:d0:24:6f:bb:e7:77:
dd:0a:7f:de:4f:d8:4c:6d:c9:e8:2c:d9:ca:cc:d6:8c:77:52:
3f:7a:d4:69:b3:64:e8:44:56:cf:90:a2:19:16:4a:ef:09:96:
af:55:ce:41:09:27:10:7a:5b:c2:73:81:78:52:3a:a2:85:8b:
87:82:59:55:b4:58:35:af:70:ab:ec:be:d7:5b:1b:ed:c0:03:
2a:23:3c:c0:ee:ac:4e:bf:05:e5:ff:35:a0:8e:a2:ec:7b:39:
ea:bc:84:45:84:2f:76:24:1e:f9:08:b0:e6:2d:fe:b6:26:0a:
f9:c9:d0:b4:ba:36:cb:7f:da:8c:84:8a:2e:0f:c3:a6:30:2e:
96:cc:ca:27:d2:7e:f2:4b:bb:7d:ce:10:3b:7d:c5:43:3a:6a:
01:59:ec:94:86:9b:10:30:1f:f4:76:ce:c1:ee:e5:02:9f:5e:
db:51:11:a4:6b:4d:00:57:a4:ad:8e:b5:c5:ef:3f:43:3e:85:
47:d2:17:7a:f9:cc:d3:7f:ea:85:2a:a8:1b:32:c6:55:ae:10:
4a:06:00:17:cb:e8:00:fb:97:6f:5d:6a:3b:b1:c8:26:fc:73:
e3:b4:8d:cd:16:26:0e:9e:f3:df:01:5e:4e:52:57:f1:9b:85:
f3:e8:62:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:12:26 2025 by rpki-client