Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier: 7/PacIUaVhqRCwgCcgs7/1qX/CU0/OZnrpnQlfJOUh4=
Subject key identifier: CD:85:5A:FE:A8:6C:20:95:F0:F2:78:A8:8A:FB:AA:C9:7E:4A:81:E9
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial: 01960BD681E20E471C7F95A943A00AEA5606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number: 14DA
Signing time: Sun 06 Apr 2025 16:02:09 +0000
Manifest this update: Sun 06 Apr 2025 16:02:09 +0000
Manifest next update: Mon 07 Apr 2025 16:02:09 +0000
Files and hashes: 1: 1-rRkYRd227_5bnec3bYwnL5SxpY.roa (hash: R+OpLqItt4unWxgfStcunzTz6dBOZ563zxthlacRJZ4=)
2: 12bcoRpyhxcN6wVe5E7GqdMB6EU.roa (hash: r0dkh09UaIafY8LdKgjtDDwdtCz3QHwlzpUJT/cj3NA=)
3: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: 2qjBLLxypEQFY/ISa1alMBQpOA4wTk4/ljnXc+FiKMs=)
4: 7QAi3hol-4GpeEk0vacoCeiMLE8.roa (hash: 41WAyyFZEfqE7fT5J+jGu94yYNN3Qp+eHjuNlnSVUDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:d6:81:e2:0e:47:1c:7f:95:a9:43:a0:0a:ea:56:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Validity
Not Before: Apr 6 16:02:09 2025 GMT
Not After : Apr 7 16:02:09 2025 GMT
Subject: CN=cd855afea86c2095f0f278a88afbaac97e4a81e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:d6:90:9d:60:e9:f0:a3:ab:cc:78:45:e7:
2a:33:d9:4e:b2:b8:a4:f1:42:38:1d:4d:da:97:94:
4f:92:dc:6d:7b:a2:52:c4:0e:ef:33:ec:ba:41:da:
85:68:fb:5d:3d:90:05:3f:58:d5:c1:01:11:cb:19:
d4:55:86:f9:52:22:8d:de:fb:f4:fe:6b:f8:7b:8c:
a2:d3:1b:af:61:13:3b:f1:ab:e3:18:68:e5:60:0e:
85:9e:a9:1d:a4:cb:eb:2a:37:51:12:a9:d1:b2:0c:
29:48:d9:9d:60:aa:b6:5f:73:c3:92:f9:b5:1e:13:
37:90:54:be:ff:c6:1d:3f:3a:f6:26:62:84:8e:9f:
6b:b1:e3:ad:5a:d9:5c:d5:65:dd:c6:ab:95:d2:89:
f0:46:99:75:4c:7f:cf:dd:31:dd:81:e9:e5:4e:cf:
db:e9:c6:04:74:c8:c5:53:34:e1:08:d2:9c:27:01:
1e:f6:cd:61:f6:de:76:29:c8:b8:f5:a5:e2:8c:e9:
ce:7d:eb:94:6b:43:27:06:56:bf:c6:14:e7:b7:81:
b8:c1:24:7d:dc:04:d6:65:02:38:80:cc:09:64:1f:
3e:9a:5d:c8:82:7e:2d:56:e6:9d:78:13:44:5a:4d:
2d:40:3c:39:38:c0:31:05:d9:79:7c:c4:99:7b:37:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:85:5A:FE:A8:6C:20:95:F0:F2:78:A8:8A:FB:AA:C9:7E:4A:81:E9
X509v3 Authority Key Identifier:
keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c7:50:f4:53:4b:7b:3d:eb:2b:e7:01:15:f7:14:5f:35:17:
51:be:88:53:90:75:90:fb:f8:40:32:f5:e9:1f:a1:d2:d8:a4:
83:11:82:c0:aa:f7:ad:c2:f2:09:95:d2:95:06:7a:b4:73:76:
0a:8b:e9:88:74:20:ac:48:ed:e6:ea:25:6e:98:e0:9b:c2:64:
95:a7:d2:40:19:fb:92:0b:fe:67:99:f8:58:d1:49:eb:9e:c4:
0b:fb:a4:78:be:ff:90:3a:9f:48:1c:f0:f3:ba:76:8c:9e:a4:
60:25:24:1e:b1:df:ea:20:6e:35:73:91:43:d0:b6:96:99:5d:
b1:ae:93:3d:09:8c:23:00:ad:c4:36:43:a2:15:39:36:bd:0b:
ac:0a:7b:25:37:ee:1e:b0:dc:ff:f0:c7:54:09:88:ce:a8:a8:
86:b2:fb:90:07:db:bf:b1:33:fa:70:c3:3c:3b:ad:dc:4e:0d:
dc:5a:a7:34:e6:0a:84:cc:23:b5:7e:69:03:47:a3:a1:a4:71:
d6:d0:30:ed:51:a0:c0:fc:3a:98:67:b0:47:89:11:d8:4c:52:
b3:30:50:35:7a:e3:2c:bf:3f:3c:5e:dc:82:9d:20:4b:fd:8c:
e4:af:43:00:6b:52:a4:11:4f:96:ae:c4:d5:31:2a:28:ed:8d:
29:85:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:29 2025 by rpki-client