Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
File: _Jvk7U5UtgHmtqQtC6BM-3qyw78.mft (raw, json)
Hash identifier: lYefBmxLEaW3xqszrjCzhRGReVx69PjJLBWrjESk5uk=
Subject key identifier: 66:B7:87:91:C0:2A:1C:85:9C:BC:28:AF:CB:41:87:17:23:6B:3A:F7
Authority key identifier: FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
Certificate issuer: /CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Certificate serial: 019652367F0D54E02878308E3DCCB80AA8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 08:00:25 +0000
Manifest this update: Sun 20 Apr 2025 08:00:25 +0000
Manifest next update: Mon 21 Apr 2025 08:00:25 +0000
Files and hashes: 1: UT4NXn4ZcTkJwvgQgl9dQtMGQHY.roa (hash: nylFSQWGan1W87gYguk9ri6Ziw1VxhwDfj3K/sUzuCM=)
2: YrzvUNT5M4hj46aUuOCmh4XVM5A.roa (hash: rUaB6yYaD6EfXVc/GJmri33jh5n71ZBoGI/gA7B8G6I=)
3: _Jvk7U5UtgHmtqQtC6BM-3qyw78.crl (hash: 22AnSilpb73kf/PpyuQSCYB4bvnpUMCT8b4ZMfJjuX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:7f:0d:54:e0:28:78:30:8e:3d:cc:b8:0a:a8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Validity
Not Before: Apr 20 08:00:25 2025 GMT
Not After : Apr 21 08:00:25 2025 GMT
Subject: CN=66b78791c02a1c859cbc28afcb418717236b3af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6a:e1:a0:e1:0b:9a:19:64:0f:ef:56:66:52:
7e:16:36:63:f8:66:29:14:aa:b0:22:09:bc:fd:74:
f0:fd:92:fe:c2:f3:ce:fc:d0:51:2d:31:c2:07:23:
9f:bd:dd:35:d8:4f:6a:70:77:24:ed:5e:e4:5d:49:
28:fd:2a:30:79:38:c0:97:f4:7e:9a:d8:71:c3:6b:
e6:3d:12:a1:e6:44:ae:4d:23:3f:91:40:76:93:b3:
12:0e:c5:ad:73:12:3a:a0:a7:57:82:a6:de:90:72:
60:d4:d6:5d:03:93:86:87:17:bf:62:3a:b6:34:79:
8b:d3:72:53:9d:b8:8d:cc:64:97:12:0f:9c:e8:1a:
81:73:e0:d2:1b:58:06:14:28:c7:38:cf:4e:3a:81:
95:e2:4c:3f:24:ad:1b:f7:75:57:22:08:ce:3b:00:
ea:9c:57:26:12:6b:8f:0f:38:11:17:e1:32:cf:6c:
41:c9:9c:a0:69:be:87:c9:c9:b2:4e:3e:87:25:a1:
49:ad:6a:ed:6a:94:49:8e:38:ad:0c:63:a3:49:71:
3d:08:10:66:6f:14:ed:c8:15:30:ba:23:2c:8b:70:
ae:bd:5e:1a:99:38:3d:59:72:03:4d:ca:d9:9d:e5:
bf:f2:7d:21:ab:54:dd:8b:db:d3:5e:ad:9a:43:69:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B7:87:91:C0:2A:1C:85:9C:BC:28:AF:CB:41:87:17:23:6B:3A:F7
X509v3 Authority Key Identifier:
keyid:FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:07:c3:da:85:aa:9f:4b:b8:c0:0d:15:3b:46:77:b7:7b:8a:
99:1c:70:34:3f:d3:f8:db:92:f3:f4:da:d4:96:1a:01:35:41:
5c:65:da:4f:f6:e6:0a:03:38:9e:6c:a8:ba:3e:c4:b5:b1:c6:
09:54:4a:ba:29:08:1d:40:6d:50:4f:cb:65:b4:7f:9b:a7:60:
f2:ef:c5:32:51:2c:a1:dc:75:ae:f8:07:ee:46:12:f8:d8:f0:
b6:92:75:c6:e9:c6:62:20:f0:e7:d6:02:0b:bc:b2:9e:e3:84:
0f:30:fe:37:4b:70:73:ad:ae:90:20:11:96:b3:b0:1a:66:09:
d5:d1:69:3e:58:da:41:88:17:5d:7c:56:84:87:69:c5:89:7b:
4b:8b:be:5e:ac:c5:5c:ea:d3:17:6d:33:d5:c7:a5:4b:5a:1f:
05:61:3d:23:dc:58:35:cd:af:74:1e:d6:ed:60:85:21:b1:83:
50:75:da:86:62:19:ef:aa:0a:dc:f0:93:6f:b8:fa:4e:ca:b8:
49:5a:9e:a7:d3:0e:a1:12:bf:84:81:a0:9f:9e:c9:27:db:b1:
c2:8b:2d:0c:c8:b3:c0:61:ec:31:08:be:a0:ce:db:0a:86:83:
32:66:a9:67:cd:bb:ec:69:95:8b:72:8e:ba:2d:e7:f7:88:f1:
c9:55:df:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:29:25 2025 by rpki-client