Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: lnFMFwfGFottV+oLC8EMbGp8LZzlQLPRHREVSwHLMNs=
Subject key identifier: 50:70:40:67:89:59:6F:15:CE:54:31:E5:82:CD:FB:CE:6C:76:DD:C9
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 01964D472F76A56FE038CD220B34DD7A112A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 014E
Signing time: Sat 19 Apr 2025 09:00:32 +0000
Manifest this update: Sat 19 Apr 2025 09:00:32 +0000
Manifest next update: Sun 20 Apr 2025 09:00:32 +0000
Files and hashes: 1: oo8iJLtCvQj5tOxPs0jWtfp64Qc.roa (hash: XKlJdTZMxFrgX9Jc6CyAN7uX/wDP3zOgo6gX8cl2wYU=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: XRwbBsZqu1ehikiGLrnh5kx243Ekt7TLngcyR6IKGL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:2f:76:a5:6f:e0:38:cd:22:0b:34:dd:7a:11:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Apr 19 09:00:32 2025 GMT
Not After : Apr 20 09:00:32 2025 GMT
Subject: CN=5070406789596f15ce5431e582cdfbce6c76ddc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:cb:cb:15:fb:f6:17:84:5f:29:ed:ef:fd:
d1:43:fe:b5:aa:1b:75:44:fe:d9:20:f9:c8:cd:6d:
aa:de:a2:5d:1a:42:23:dc:f4:fd:97:6e:51:58:e9:
65:5e:01:4d:11:ab:8e:55:c1:41:4d:91:9d:98:d6:
20:7e:98:65:e6:9b:02:cb:e5:43:c4:d6:f2:62:69:
b6:5e:c1:89:e7:65:b0:97:3d:3d:b6:52:99:8d:2a:
50:d9:1f:dd:30:a0:2b:52:6d:f1:ef:2c:24:8b:80:
ab:68:f6:4c:87:f1:d7:7b:67:8a:f2:94:85:30:35:
25:47:a0:c8:21:0d:8d:b0:78:78:1b:f6:bb:93:d6:
62:d6:51:b3:25:7d:1e:7f:8a:86:4e:45:c0:52:44:
ac:b3:1f:3e:86:42:e7:0c:f3:e3:b4:37:c3:fc:f5:
2e:17:c8:e0:9d:92:0b:87:63:8a:bf:1b:e7:dd:29:
0b:ee:8e:d1:40:af:e4:f9:5b:ef:fc:ea:9c:8b:88:
29:97:45:d2:0c:72:0c:8c:61:ba:35:aa:fe:20:b9:
3a:5f:16:22:e1:59:c8:e5:66:ba:a8:58:04:66:13:
e4:86:bb:e7:5b:c2:c5:66:c7:1f:66:75:57:8e:8d:
78:69:b1:e1:89:33:de:fc:c8:cd:d6:2a:bc:8f:9c:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:70:40:67:89:59:6F:15:CE:54:31:E5:82:CD:FB:CE:6C:76:DD:C9
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8a:5d:82:7b:75:9a:a2:2a:dd:72:6b:57:a9:38:c3:d8:70:
e3:21:03:cd:9d:cb:da:2d:f9:1e:14:be:ae:0b:49:30:47:76:
58:a9:f4:d0:04:42:99:aa:1b:a0:f9:d8:a3:cc:47:55:ae:d1:
2b:5c:e2:14:3b:ce:55:d1:65:52:13:dc:77:77:74:27:79:a5:
e3:b9:5d:ca:b0:82:1d:d0:9a:b0:08:91:60:d9:ca:07:d1:0f:
12:92:03:7b:e3:44:c9:26:32:5a:31:fc:03:1c:b5:62:47:af:
46:be:57:01:86:99:e4:41:02:d1:cc:b8:43:39:d9:b6:c2:5a:
11:c6:7f:24:be:35:45:52:84:b0:74:90:d0:99:46:9e:60:ad:
88:dc:8a:b3:cb:ca:08:f4:b7:21:6e:1e:28:47:44:16:66:25:
ce:80:6a:bd:d3:59:a0:5c:b7:4a:0c:a4:f1:af:91:e9:a6:ea:
1a:8b:9a:f7:e6:ba:56:ca:36:e6:07:9d:1a:4f:db:fe:a7:b1:
04:67:dc:20:d0:88:ae:a1:45:c7:fb:0f:4f:e5:e3:15:39:c2:
d9:a2:f2:eb:bb:44:3e:de:5c:74:c0:37:35:73:ca:04:e4:db:
f9:2e:c6:23:f0:da:6c:90:70:ce:ee:c5:a5:20:5c:96:51:10:
6f:70:a3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:25 2025 by rpki-client