Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: fkw8rLxPFB7HOWoBEXuzMWxMslarbIDFE7oFvyJG8sQ=
Subject key identifier: 41:44:BD:D9:8A:C9:A5:0A:E7:33:EE:61:C7:E7:68:F9:6A:23:9C:19
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 0196439F45B74C44AD55B1EB1C14191BD829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 12:00:33 +0000
Manifest this update: Thu 17 Apr 2025 12:00:33 +0000
Manifest next update: Fri 18 Apr 2025 12:00:33 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: yhuyimcD+2xLVE0wFqO4aQdaTCDNAiovjO2D6kn1qvo=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:45:b7:4c:44:ad:55:b1:eb:1c:14:19:1b:d8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Apr 17 12:00:33 2025 GMT
Not After : Apr 18 12:00:33 2025 GMT
Subject: CN=4144bdd98ac9a50ae733ee61c7e768f96a239c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:25:ba:09:e2:fc:ed:70:ad:7d:38:96:df:
fd:b9:88:df:db:e6:28:56:97:66:8c:2a:ef:a8:c0:
28:1b:3c:6b:eb:ed:61:e4:30:a2:c1:3e:4b:d7:33:
75:c6:10:3c:f9:74:38:f9:78:d8:34:19:43:8c:c9:
18:00:12:5d:33:92:f9:7b:98:80:f4:d3:73:94:c1:
7f:a8:d9:a5:6e:c8:54:82:f1:e5:e7:25:c1:03:05:
5f:38:df:5f:be:04:c4:16:a7:2c:ef:58:55:55:9a:
18:12:27:e9:f9:0a:23:09:b7:50:b0:57:98:83:f7:
8f:d8:3f:36:d0:da:d6:87:1c:02:27:74:73:bb:91:
fc:bf:79:1f:cb:ec:12:f5:b7:12:86:be:e4:64:30:
a6:1b:ca:70:06:4d:6f:76:ef:e9:66:05:cb:e6:c9:
dd:91:b8:d0:4d:eb:c3:61:21:cd:4e:28:1d:a5:cd:
22:8e:d9:ee:82:7b:c5:c6:94:a2:41:0f:bb:b3:3a:
a8:77:fb:01:31:9e:ff:03:12:37:27:ae:e7:75:d4:
66:ac:09:c9:c2:4e:d6:ef:89:89:79:8c:f3:09:4f:
03:7c:b8:86:52:bc:ab:e8:56:f7:8c:9a:b7:24:1d:
9e:57:e3:e1:4a:d0:e5:9f:82:68:a5:7d:f6:5f:c0:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:44:BD:D9:8A:C9:A5:0A:E7:33:EE:61:C7:E7:68:F9:6A:23:9C:19
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a0:8b:41:1a:d2:62:85:b5:55:ca:9c:c3:92:e1:bc:53:e4:
3f:fd:a5:31:7b:79:d9:2e:13:dc:61:bc:be:4a:0d:21:9f:35:
a7:f2:4e:db:00:c6:f4:70:3d:72:86:00:6b:75:d6:7d:ac:2e:
54:15:51:64:00:da:58:86:93:9b:be:30:72:77:1f:9f:55:36:
4a:6d:12:bc:cb:28:de:d4:8e:0b:87:f3:6a:55:10:f3:a1:b7:
36:96:48:cc:c1:0d:81:c6:4a:59:97:5e:da:ae:55:1a:ef:82:
85:10:c2:3c:6c:ea:4d:b7:d5:a3:b5:85:0e:8c:e5:7f:6c:d7:
6c:f1:4c:fc:9d:6e:ce:83:6e:3a:e6:d0:23:62:19:f3:0f:d5:
a4:b4:8f:e7:56:6f:f1:d5:70:fa:73:4b:a5:ed:af:09:4c:c8:
8e:71:32:73:d2:0f:1c:b1:de:95:9f:f0:16:28:77:d5:b0:2e:
34:6a:b5:e3:d3:ff:3e:4e:83:47:e4:72:cf:ec:92:d9:3f:22:
dc:c7:0a:b1:73:36:6a:ef:b0:95:4e:82:77:65:0f:b9:1f:6f:
88:6f:1c:99:a5:72:2f:b9:91:11:42:27:64:ea:60:63:d0:bb:
85:4e:a0:60:eb:99:5d:e8:41:94:e4:e4:da:4e:0f:ab:79:03:
96:66:1c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:48:41 2025 by rpki-client