Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier: scXnF5tUftvHTLfgqchkXWH705GNQ906kmy+ftjH1ok=
Subject key identifier: 9D:E3:7C:B2:0C:F8:35:B0:FB:A8:80:49:86:92:2D:CA:38:79:CB:8D
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 01964BC669479E70E47AD5098AC9C35B10E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 02:00:16 +0000
Manifest this update: Sat 19 Apr 2025 02:00:16 +0000
Manifest next update: Sun 20 Apr 2025 02:00:16 +0000
Files and hashes: 1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=)
2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: nw9a7UDyElwDhFtInkGfg31zO3VUZGBhETMmgCPmh6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:69:47:9e:70:e4:7a:d5:09:8a:c9:c3:5b:10:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Apr 19 02:00:16 2025 GMT
Not After : Apr 20 02:00:16 2025 GMT
Subject: CN=9de37cb20cf835b0fba8804986922dca3879cb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8d:d4:32:c5:2b:d4:dc:fe:94:23:60:c1:f9:
66:f2:74:e7:3d:92:c9:5c:fb:22:a3:87:6d:1e:ca:
d3:79:df:c7:d8:c1:07:00:cc:9b:72:86:ed:00:d8:
a8:28:06:48:bc:e5:4c:e6:8a:69:c7:ce:d1:be:f9:
26:bd:28:94:d8:67:f9:8f:32:70:77:4d:0e:2b:7e:
38:e6:73:35:75:b5:60:06:9a:d8:5e:82:c4:55:01:
9d:41:e3:f4:b2:de:36:6c:15:0c:03:4b:30:13:62:
6a:f9:1e:6b:3c:9c:4e:12:70:12:f7:75:16:cb:7f:
b0:a0:2a:13:80:63:23:f0:62:2b:5d:74:f1:62:b8:
4d:0f:64:aa:f3:4e:bc:62:32:48:17:ef:70:48:48:
07:1b:a5:55:3d:57:e9:2e:69:6f:e4:51:e4:2a:23:
a1:e5:94:70:ad:e2:b8:f1:5f:10:7d:d2:1a:43:09:
2e:48:15:dc:67:48:61:82:58:9e:5e:19:d4:be:92:
90:d5:76:41:90:b0:21:75:24:8f:29:f0:fd:d1:86:
9c:7b:d3:9d:30:72:0e:9c:40:ea:b1:1a:da:2d:91:
62:cc:63:e3:6e:28:b6:3a:2f:3e:ec:26:c0:d6:c0:
bf:ec:03:b4:02:80:9f:86:c3:74:ad:c2:1b:4a:9a:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E3:7C:B2:0C:F8:35:B0:FB:A8:80:49:86:92:2D:CA:38:79:CB:8D
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:8c:86:5f:8e:a2:48:d1:8d:16:7b:5a:96:28:1e:b4:89:ec:
68:e4:77:e9:19:86:45:73:09:0e:e3:79:b9:29:c5:88:fa:cc:
df:4f:cf:2b:6c:9b:b0:d2:a4:fb:3c:e0:f1:d2:59:69:31:54:
89:06:02:10:5f:0b:ab:25:b7:21:a6:b8:1b:ca:6c:75:fc:0f:
9b:f8:55:02:4f:20:d5:f1:9a:cc:fd:1c:ff:52:a6:e5:96:cf:
bc:e0:b1:ae:d5:4f:98:27:87:29:fe:5f:82:4f:be:f0:dd:72:
b4:c4:ae:80:d7:e5:b6:5e:65:3a:3f:88:f8:8b:fd:06:11:f6:
ad:2a:5a:0c:c2:1d:91:0a:8c:11:59:51:c2:61:fe:67:77:a3:
62:ba:26:f9:c7:26:1f:93:56:2e:9c:0f:7d:c0:3a:3e:02:0d:
66:64:bf:a8:2f:95:7a:fd:99:c5:df:2c:c5:84:b1:1d:b7:1d:
2c:4d:b6:3b:8f:ee:78:49:ca:c4:b9:50:10:ee:d4:18:41:f9:
1f:84:51:62:ef:df:a0:b0:49:b1:38:9d:cd:09:14:e2:f2:14:
cb:b3:1f:cb:59:61:cb:21:6e:d6:aa:01:a6:ae:90:fd:a1:4f:
1e:7c:37:97:c8:fa:d8:d5:22:ad:ba:5d:89:ef:39:d5:ed:b4:
73:b6:ea:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:15:02 2025 by rpki-client