Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
File: V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json)
Hash identifier: JZCbZm0twy4MSERQcuwLMCjMVqkwabPlUV1XxA9+kR8=
Subject key identifier: E5:7C:F9:D8:46:55:8A:B7:75:D3:57:D6:38:77:67:DF:77:B3:21:19
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial: 01964DB4E8F92FE156CEB23F623EA054A9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 11:00:23 +0000
Manifest this update: Sat 19 Apr 2025 11:00:23 +0000
Manifest next update: Sun 20 Apr 2025 11:00:23 +0000
Files and hashes: 1: 2rRfCyoNB-FJKFhJjElIAYCjuZM.roa (hash: BxYRtCrYD8JZ1KlROq/oLLjDfPXIXRywkgLQEAE4Bdo=)
2: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: hA0lcqyv/EdU2qjkcMhEMJxgq5tQPShOjwPZ1IxIsIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:e8:f9:2f:e1:56:ce:b2:3f:62:3e:a0:54:a9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
Validity
Not Before: Apr 19 11:00:23 2025 GMT
Not After : Apr 20 11:00:23 2025 GMT
Subject: CN=e57cf9d846558ab775d357d6387767df77b32119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:36:fc:77:09:b7:54:c9:fc:52:3e:3a:a8:
33:c7:81:be:3b:d7:c9:dc:e2:60:0f:cf:e4:d5:21:
6e:5c:d2:24:9e:b4:64:e1:bb:b0:0d:31:9f:bb:84:
a8:6a:5a:5c:8d:c3:c8:b4:8a:92:91:d3:41:a6:60:
2d:91:9d:07:53:87:dd:0f:22:07:bd:fc:b0:58:6d:
67:d5:e9:2c:be:94:59:19:39:05:c7:9f:33:4e:60:
33:0c:ec:e7:54:ea:7f:c2:7e:ec:b8:53:30:df:2b:
14:67:35:2d:5b:a5:38:6c:28:b0:97:cf:17:e1:df:
72:48:9e:47:28:57:bc:89:a4:d6:b6:ce:c3:33:d1:
6b:cb:c2:69:4d:16:9b:e1:82:7d:11:6f:4b:2a:d1:
a2:dd:2a:1d:32:0b:9d:16:a7:a6:c9:aa:72:05:f6:
cc:68:88:ee:97:d4:a6:82:cd:35:0d:8a:90:a6:a2:
b6:f2:76:30:5c:e4:de:e3:e9:13:29:a4:f8:9b:96:
65:3b:b2:16:ce:ba:fe:81:32:18:f3:26:1f:5c:79:
67:f6:f3:38:71:33:f6:e6:07:53:2e:44:61:f1:1b:
8b:cd:b7:91:f1:5c:18:46:b4:27:ad:61:9a:1e:85:
bc:82:8c:79:8a:5e:ce:ee:4b:3d:c2:1c:43:e1:66:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7C:F9:D8:46:55:8A:B7:75:D3:57:D6:38:77:67:DF:77:B3:21:19
X509v3 Authority Key Identifier:
keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:74:95:9e:23:50:36:8e:af:30:ee:9d:ef:50:fe:3c:e9:b6:
3f:de:93:5c:95:f4:87:ca:4b:b5:67:27:e4:22:ca:2b:4c:e5:
18:04:f4:04:5c:88:9b:1a:7b:ef:d2:61:0c:3d:2e:e4:4f:c4:
b5:1b:85:1d:4e:0b:b3:6e:9f:c4:1a:65:14:eb:0a:b0:cf:19:
79:88:5e:b5:11:83:43:43:91:75:24:87:56:a7:df:8a:46:65:
5f:bd:bb:41:74:7d:d5:6a:33:3b:dd:d4:9f:b4:6c:e0:d0:34:
f7:41:47:00:31:24:c5:4f:3d:c9:07:5d:fd:4e:94:db:25:e8:
3c:46:7f:4b:9d:42:02:cd:53:09:d2:e1:4f:56:b7:e1:d4:a5:
28:7a:19:1a:77:b2:60:aa:9f:d3:7a:06:7c:2a:e0:72:0a:61:
4a:97:e1:0c:cb:56:40:e1:e7:4a:2e:3b:a3:8f:bc:20:65:e3:
bd:61:cf:63:72:50:d1:21:17:11:f8:6b:ac:28:ab:fd:1d:33:
54:1a:32:63:52:19:04:0c:d8:e3:eb:61:76:af:6b:bd:f2:18:
4f:41:fa:f5:91:6f:b2:2b:ea:be:65:25:96:34:56:c6:06:32:
a3:ce:0d:2c:42:56:01:b0:17:f8:22:67:25:11:6c:8e:c8:1b:
86:42:38:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:25 2025 by rpki-client