Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: zFjDpZouCP7yHMXfW9N5lwBXvXjxmWg94/tkKf6CKlg=
Subject key identifier: 07:02:A0:EC:F6:85:40:80:27:2C:B8:7D:77:19:E3:36:65:FC:F8:CA
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 01963FC261CF17F87D23B26770C9A7F69CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 18:00:25 +0000
Manifest this update: Wed 16 Apr 2025 18:00:25 +0000
Manifest next update: Thu 17 Apr 2025 18:00:25 +0000
Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: 77bUSi7cX50WdfNcNHKQiSOpBT8DnmI0n6vl7cscX+0=)
2: kbK5FbYWiIzhyfd6X1FvOM4LM_M.roa (hash: DqjgdH8s8QL3DkbtV73wzVgdXOipMU6gUg//vr7va8U=)
3: mDUiFexcT2mv6c5O8qGbFAH9b3Y.roa (hash: pPWVkb6MaBCnVH/KCkJGhD1ngVL39J0MeLmVUJGfUTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:61:cf:17:f8:7d:23:b2:67:70:c9:a7:f6:9c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Apr 16 18:00:25 2025 GMT
Not After : Apr 17 18:00:25 2025 GMT
Subject: CN=0702a0ecf6854080272cb87d7719e33665fcf8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3d:a0:31:d6:76:1d:84:93:cc:7b:46:13:12:
9e:74:90:b3:d0:7d:86:ca:be:77:f8:fd:44:02:da:
3b:14:9c:5b:5a:f7:a7:0d:d4:11:73:9e:d8:8b:0e:
82:1d:c6:82:d7:b1:30:6c:62:50:04:bf:fa:7f:04:
86:79:b7:27:5f:b5:85:eb:3d:f1:1e:2c:7a:63:c3:
82:20:e5:9f:f3:8a:0b:f6:63:6a:23:29:aa:41:7f:
07:b4:61:94:fa:37:3d:17:94:b6:41:88:4e:de:88:
d1:85:d9:27:ad:d3:86:1c:53:6a:e0:ae:ac:15:2f:
78:49:cc:3e:ae:52:72:4b:cf:3d:16:26:ca:64:a3:
d4:7c:5f:21:ae:8a:9b:c5:c9:cc:e1:41:6d:c9:f2:
a1:2e:ce:50:55:a9:e3:60:e3:46:90:ab:fb:20:dd:
a8:a6:73:16:22:a8:09:8c:a1:01:71:c4:1e:6a:72:
c6:07:72:0f:a2:72:56:66:d8:35:32:91:14:0b:14:
72:26:88:61:0a:67:df:8d:6a:b4:68:7c:18:88:2a:
46:bd:2a:c8:d2:95:cc:fc:f0:7c:31:f2:f9:1c:5f:
d9:71:03:66:34:c4:37:3d:b4:af:91:29:d3:59:5c:
12:98:a5:c7:36:b4:ce:75:68:be:10:b7:be:16:50:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:02:A0:EC:F6:85:40:80:27:2C:B8:7D:77:19:E3:36:65:FC:F8:CA
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:82:cd:56:e7:80:73:9b:0f:e1:7e:49:c4:36:f8:5e:7f:e2:
a0:c8:dd:ad:1c:db:5b:ac:93:ae:7e:d7:e9:83:ed:89:d9:08:
5f:67:2d:8e:d7:d6:4c:2b:cb:eb:d8:cb:98:c1:9f:ff:25:c6:
54:75:60:9a:d7:bd:36:38:10:8f:b7:24:71:35:1a:19:aa:e4:
9d:37:23:c2:6c:b0:1e:6a:e9:65:9b:80:04:81:a8:cd:63:cb:
27:ab:1e:42:ca:0d:96:a8:45:f0:4f:52:fd:d4:a3:10:a9:17:
7c:06:6e:85:ed:b3:77:b3:5c:e6:b3:d7:d2:cb:b3:d7:b2:d0:
ee:d3:05:83:eb:ff:a2:b6:75:d9:f6:a2:01:0f:55:1f:ca:0d:
f0:8a:81:7e:11:68:ee:67:1f:63:4b:4d:ce:79:ca:af:2b:26:
3b:0b:05:3b:eb:ed:a9:fe:ec:9a:b5:76:89:54:68:77:e3:99:
dc:96:13:be:bc:47:d6:f3:e6:2d:9d:d1:fa:39:1d:bb:02:f8:
ea:bb:45:77:6d:cf:d1:73:17:80:4b:6f:c7:25:cf:8e:1e:f2:
e9:56:55:6b:04:ce:4c:28:87:be:6e:33:2c:e2:81:af:1f:29:
e9:ea:56:77:22:05:98:8a:53:8a:3e:ed:04:d7:b1:08:24:d4:
c1:09:9a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:11:17 2025 by rpki-client