Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: 2v9NyMbOyynaW92YLl9EojKIKXAs4jbOMKkDOHJvbYM=
Subject key identifier: 36:13:C4:E2:70:1E:74:70:31:41:56:C1:68:31:D5:C4:8D:D8:34:81
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 0196542531DC7B390CEA52EE74A34D602463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 17:00:45 +0000
Manifest this update: Sun 20 Apr 2025 17:00:45 +0000
Manifest next update: Mon 21 Apr 2025 17:00:45 +0000
Files and hashes: 1: SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa (hash: hA+a1SinlIIzAIvLt/cO3Kjqq6i5Xzb+bDE4vvr8VPM=)
2: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: SPc1hs8TWvNRr/oqWzxc85oapcHAjnfYpO6Y0Dgkz7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:31:dc:7b:39:0c:ea:52:ee:74:a3:4d:60:24:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Apr 20 17:00:45 2025 GMT
Not After : Apr 21 17:00:45 2025 GMT
Subject: CN=3613c4e2701e7470314156c16831d5c48dd83481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:45:09:8d:5f:da:18:3f:b7:ca:9d:52:fa:
c8:51:3a:56:8f:42:cd:35:da:68:f0:93:bd:f1:09:
bc:71:82:dc:04:1b:b0:94:1c:ed:15:6b:dc:8f:6d:
95:11:a9:2c:df:5d:05:5d:ff:f6:53:17:30:34:3f:
d9:4e:97:99:36:38:69:bb:f8:dc:ec:47:72:99:a1:
44:1e:51:53:47:3c:6b:bb:4b:e9:67:d3:63:fe:ef:
a1:1f:35:4d:52:78:ee:d3:a2:91:67:6a:d7:8e:6e:
64:20:80:13:13:43:79:56:67:44:ba:bb:db:57:51:
07:2f:e1:15:61:ed:e3:5b:13:aa:8b:6e:3b:4f:ca:
67:dc:09:6f:5a:b8:30:f4:b7:cb:2f:cf:8d:f5:de:
22:c2:65:6d:9b:41:5f:14:bd:94:41:a2:90:e8:49:
0c:c9:ab:02:64:fd:05:d7:be:3a:9d:41:56:e5:c2:
16:18:15:c7:29:b1:5c:51:24:ac:d2:f2:4c:36:28:
c2:f6:c4:11:aa:ec:62:a8:8b:17:62:8d:75:25:62:
41:7a:53:69:f4:bd:7e:b2:a6:a9:30:17:5e:a1:d8:
47:bf:62:6a:9d:65:ef:bd:bc:c2:59:77:75:1f:0c:
a9:70:f2:36:79:3b:92:21:e3:a6:01:40:b7:b5:56:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:13:C4:E2:70:1E:74:70:31:41:56:C1:68:31:D5:C4:8D:D8:34:81
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:94:19:4a:a8:d4:f8:33:f3:ed:ed:6c:4e:f3:61:2d:fb:23:
69:20:b7:54:93:7d:4e:e8:c1:5a:ec:1e:4b:9e:26:10:96:34:
40:57:7f:b6:77:ed:28:9c:54:9d:9f:c9:c7:04:28:ab:70:88:
6f:7c:e1:d4:9d:8d:4f:7f:89:40:cd:7b:9e:35:8c:77:a7:94:
91:a1:3f:9e:34:97:e7:d5:f5:12:59:1d:5b:3b:b7:31:4c:09:
13:70:bb:a9:a2:ff:85:96:4a:83:44:cf:9b:bc:68:6f:77:a7:
bc:a1:72:0b:2e:e7:d6:7e:cc:04:09:51:d8:b0:0e:68:f7:41:
f3:4a:fc:ef:a3:79:e1:29:71:05:8a:d0:0f:c9:10:f0:e0:da:
5d:e9:7c:ac:a4:4e:57:03:94:a1:0d:ee:d8:30:4e:c8:33:31:
91:6a:69:f4:ee:a7:7b:26:8e:7a:67:31:69:b0:fd:fd:a9:28:
eb:aa:e5:a2:20:e5:7a:4b:08:ae:b8:04:6c:d8:de:50:a3:82:
e4:88:0e:3b:83:ce:71:22:40:43:84:d2:0f:64:4b:3e:3a:d5:
8d:40:c5:90:55:b0:b3:19:b8:55:7c:ef:6a:68:3f:1f:dc:26:
9d:9e:c5:cc:2e:c0:31:9d:4b:07:13:27:06:9f:fa:61:20:f2:
a8:72:42:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:47 2025 by rpki-client