Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: 32Sm+wPdp7Pq9SFBD0ljz4GICGrZjQf/niezEWPPvMA=
Subject key identifier: 0D:6E:CA:DE:39:7B:B8:68:D0:92:23:8F:0D:54:69:6D:B4:C9:AD:03
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 01964DEC30919B3E7EAE5B84F219E2803390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 12:00:46 +0000
Manifest this update: Sat 19 Apr 2025 12:00:46 +0000
Manifest next update: Sun 20 Apr 2025 12:00:46 +0000
Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=)
2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: OM+Ss/6R9eiFRQ4Q8xhF59UulENq2ct0IiVEMEdV75A=)
3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:30:91:9b:3e:7e:ae:5b:84:f2:19:e2:80:33:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Apr 19 12:00:46 2025 GMT
Not After : Apr 20 12:00:46 2025 GMT
Subject: CN=0d6ecade397bb868d092238f0d54696db4c9ad03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:30:2d:96:78:57:97:59:09:f0:33:2c:46:
2e:22:7b:35:64:72:bd:36:87:ec:1e:c8:35:b3:9c:
dc:f5:1a:26:70:df:cf:5c:8a:9a:bc:2c:ae:33:5c:
0b:e7:b2:f7:55:58:27:ae:23:10:e2:ee:05:16:8f:
79:e8:05:96:d6:c7:98:f0:bf:59:f8:b2:ee:8e:bf:
a7:d4:c0:dc:86:bd:e4:15:47:88:88:f1:88:1b:59:
8e:19:33:15:5a:ba:cf:14:a8:a4:b3:61:81:22:38:
65:49:aa:58:6b:ed:e7:f6:90:6d:3c:33:97:5e:94:
63:7f:01:8c:26:8b:50:f1:f5:cd:01:21:23:ad:d2:
3a:b1:4b:ec:ce:b1:56:eb:65:90:5a:52:5d:2b:da:
bc:a7:4e:cc:93:b0:70:de:89:6f:d3:da:f6:f9:14:
5d:5e:59:a5:ad:13:c3:06:77:e4:f6:62:40:e1:e0:
36:cd:fa:5a:12:16:5d:3d:4d:d3:f7:4d:c3:da:27:
6a:17:6d:3d:e9:8b:5d:1e:a2:0c:dc:78:09:12:82:
f8:b9:ef:7e:53:a9:14:ed:41:81:e3:06:f3:9c:16:
d1:d3:d8:bc:87:9d:d4:10:c8:da:51:aa:8c:32:01:
9d:49:1b:4c:3f:44:01:66:d6:e7:20:c7:a2:e6:58:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6E:CA:DE:39:7B:B8:68:D0:92:23:8F:0D:54:69:6D:B4:C9:AD:03
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:eb:bf:b9:f4:bb:4b:ae:d3:9a:16:87:ec:73:8e:1b:1e:5c:
17:bc:34:92:ea:dc:ce:57:c5:20:cc:fa:ec:e8:46:33:86:55:
14:2e:76:8f:0f:02:65:b0:24:e4:51:bc:8e:b9:c0:b4:a1:64:
48:f6:c1:72:66:51:4f:62:38:c9:6c:f6:1f:e3:91:70:03:e2:
87:9b:00:b4:34:3c:19:ae:35:82:fa:8b:1c:ee:ac:40:5a:df:
1e:da:1a:9f:07:09:b5:02:dd:4b:22:f1:be:70:50:c8:3d:7b:
00:37:3a:46:bf:97:96:48:90:c3:a9:49:16:8f:83:ab:f3:d2:
35:cc:03:cf:b4:16:41:19:cd:e4:ec:13:47:65:27:3b:e9:43:
88:76:eb:4e:5c:2b:7a:9f:2c:97:44:91:3f:9d:35:47:57:21:
4f:61:8e:e4:86:b4:42:65:3d:5b:97:cc:3c:80:67:42:a4:00:
ee:e5:d6:2d:31:35:ec:5e:d2:e3:d5:8c:8d:3d:44:24:1e:b4:
5d:97:1b:9d:6b:66:10:71:38:17:34:31:29:d6:f0:bf:09:d8:
f8:7e:6a:97:f8:87:d0:f3:21:93:f4:e9:22:83:f2:5e:a9:14:
02:dc:29:08:b1:e0:68:5f:a5:20:bc:7d:5d:09:ea:36:05:69:
70:0a:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:02:58 2025 by rpki-client