Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: 6lyw2KMkqsKzjnJcxmBWFbb3xCRnP5+/FErxsLeYzMo=
Subject key identifier: 5F:AD:D4:13:3E:66:EF:78:D8:8A:7C:A8:2E:0A:BA:33:65:32:3D:63
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 01963B77DF4238CE6BBCAD8EA0D3FC3E7A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 14F2
Signing time: Tue 15 Apr 2025 22:00:33 +0000
Manifest this update: Tue 15 Apr 2025 22:00:33 +0000
Manifest next update: Wed 16 Apr 2025 22:00:33 +0000
Files and hashes: 1: 8ydVbA0sRc2KQJCu7PF_TgB9YOc.roa (hash: ldViVOYSsfn20bEs9Oqh1Yf20Me7yZtpfiOBMHbpOTM=)
2: F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa (hash: 8P5DrUp/opHUhrTa0qnhwTNZG/EzRMCLBAaUpNYWajY=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: Gntt5PJncowlHet6ESl1FxLSu7XEqoMrmaA/vJKHC4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:77:df:42:38:ce:6b:bc:ad:8e:a0:d3:fc:3e:7a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Apr 15 22:00:33 2025 GMT
Not After : Apr 16 22:00:33 2025 GMT
Subject: CN=5fadd4133e66ef78d88a7ca82e0aba3365323d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7c:11:47:fc:70:64:12:53:19:f1:30:ea:c9:
4d:50:1c:29:8e:20:eb:d3:57:11:d8:35:1c:b2:98:
93:87:d0:33:e8:c7:6c:32:46:af:0d:83:23:ca:1a:
fd:09:24:35:b2:27:92:8f:eb:61:d5:fa:d4:f8:3f:
f4:82:e7:86:e4:8b:cc:3e:77:0b:40:12:df:c7:a5:
10:74:39:29:d5:fe:00:ca:75:13:60:ce:c6:1d:f7:
a4:5c:9c:ce:53:9d:59:34:fb:c5:ed:12:6d:33:83:
4d:d3:74:e9:74:b2:01:fe:27:c6:29:15:ea:5f:dd:
1d:17:fa:91:ec:45:92:3b:93:b4:69:69:a6:de:cd:
71:87:68:e2:8f:7f:44:77:02:99:46:94:4c:6d:b2:
49:12:c8:22:ff:2c:f6:68:12:eb:b8:6a:fb:3b:74:
3b:df:72:be:c4:0b:f3:5e:8e:01:4b:40:fe:1f:39:
c3:43:56:28:56:2f:76:1d:f2:8d:f5:d9:b0:26:c8:
fa:2d:59:b5:41:d1:09:b5:ac:89:c5:3b:1f:7c:d9:
10:fa:25:a6:97:9a:5a:1f:e2:ba:99:1b:21:d8:4b:
64:51:38:02:18:a3:ff:13:1b:c7:89:ec:2e:76:15:
66:09:e3:b9:ab:bf:1d:3b:54:56:bb:26:10:4f:67:
b6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AD:D4:13:3E:66:EF:78:D8:8A:7C:A8:2E:0A:BA:33:65:32:3D:63
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:56:96:a7:d7:6b:b1:0c:5d:74:7f:93:ba:bf:5b:97:1f:51:
70:42:6d:8c:a7:fb:00:d3:80:e0:14:7e:f2:cc:e9:1a:ae:38:
61:7a:c6:77:d2:5c:b5:88:00:92:48:d1:f3:d7:33:c0:83:bc:
84:d4:2f:47:5d:66:28:fb:41:9a:71:25:41:3c:d9:f2:05:9e:
31:1b:ea:3b:1d:5d:33:8d:a8:e9:b2:b8:2a:64:d5:e1:fc:69:
4b:01:cb:d2:44:3d:f3:2b:d3:3d:9f:6d:f5:1e:f0:24:e5:1b:
da:8b:59:b3:e1:d6:80:2a:97:3b:2c:f3:7e:f6:77:65:f6:66:
88:bd:c7:0d:99:d9:78:b5:42:71:48:87:43:ce:03:2c:4a:03:
45:d8:68:e7:31:7e:98:a9:a2:c4:1c:79:cd:50:17:f7:6a:67:
c7:ec:e8:92:2b:6b:32:39:81:10:2e:e2:da:72:0c:6e:39:19:
5b:ba:18:02:42:30:6f:71:87:9e:40:6c:dc:f9:4a:34:10:e6:
00:fe:46:aa:72:08:94:24:2d:7f:67:5f:57:71:8e:a8:4a:8f:
72:8c:66:74:bc:ea:62:67:a2:41:0b:de:75:1f:35:3f:64:5c:
c9:4f:c4:53:f6:26:87:d6:fe:17:77:05:ac:1b:8a:90:d0:07:
2f:d7:d2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:44:34 2025 by rpki-client