Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
File: V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json)
Hash identifier: +BaY4ki6qbpmPZvRUGorFaQ/Zx8OcoXi9RnMEvXXLN8=
Subject key identifier: 53:02:3D:2D:E2:7C:30:40:F7:6B:70:E7:A6:8E:5E:69:B9:A1:5D:25
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 0196108E0774647D1E152C846DFBE439497D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
Manifest number: 14DE
Signing time: Mon 07 Apr 2025 14:01:05 +0000
Manifest this update: Mon 07 Apr 2025 14:01:05 +0000
Manifest next update: Tue 08 Apr 2025 14:01:05 +0000
Files and hashes: 1: EjNs4c7ExfB-Xn86trYUTIGxY9M.roa (hash: 5gdWhqxScCqY+ac2NlShb0emeLCeoscJIL/u5Z1pQss=)
2: FQ_8F69qJ1OIvrywFvryFirKQj8.roa (hash: q2ovk1tVG4lGYgmszBcNRyfEZ8Wo4tad3oDRiuzylzY=)
3: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: NWR530ntyM9Afyok8BdNJ3YdAtSLNGmCEtqtbvuzVqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:07:74:64:7d:1e:15:2c:84:6d:fb:e4:39:49:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Apr 7 14:01:05 2025 GMT
Not After : Apr 8 14:01:05 2025 GMT
Subject: CN=53023d2de27c3040f76b70e7a68e5e69b9a15d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:88:2e:10:d2:a2:98:6a:54:05:1e:f0:eb:
ce:2f:fe:70:63:9d:3c:9e:86:06:93:98:10:52:07:
34:3c:56:20:f6:11:cc:c3:b2:03:f5:b7:61:89:69:
0b:6f:61:5b:f6:67:e0:f9:b1:d0:31:10:3c:73:22:
ce:18:b6:9f:ab:c6:05:19:b7:c1:f0:70:16:db:1d:
68:1a:0e:7c:62:6a:b5:f0:8e:3b:2d:f5:2f:1d:96:
58:97:ca:9a:a3:93:9f:07:8d:60:ff:82:c7:ea:be:
37:41:78:12:bb:be:e8:13:8b:dc:c4:65:03:29:fd:
0e:ac:2b:df:66:7a:b5:ee:33:dc:9f:f6:16:3b:e3:
a6:45:01:3b:3d:a1:38:93:a4:b2:77:3d:84:71:0c:
74:24:2e:1a:4b:dd:c5:1b:2d:88:87:e1:ad:9b:de:
e1:78:42:cc:66:af:7e:24:23:81:2e:9c:71:3b:23:
9c:68:25:ea:cd:b4:c1:db:04:de:f1:6b:c3:38:b3:
74:42:ab:5f:df:56:03:73:37:19:a9:21:c8:6c:ff:
7d:95:02:f0:52:ff:e8:d9:04:22:96:c5:9a:d5:fb:
44:2b:6e:ae:72:3e:36:ed:9f:d4:05:a8:a0:97:58:
17:da:03:8a:a7:bb:be:65:86:4b:18:d2:0a:81:cc:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:02:3D:2D:E2:7C:30:40:F7:6B:70:E7:A6:8E:5E:69:B9:A1:5D:25
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:53:d2:88:2f:66:1a:f4:58:21:3b:14:b4:d1:09:1e:ea:1e:
02:6c:bb:df:1a:a5:50:09:a7:a9:5f:31:a8:0e:ed:ba:41:e7:
a2:55:62:88:06:08:b5:b4:fb:c4:a6:88:0e:f8:e9:e8:a3:4b:
bf:3b:46:7d:a3:75:0e:8e:9b:61:10:04:23:b5:80:d8:76:1a:
9a:30:ba:e8:19:c1:b6:a6:cc:4d:fa:f1:ff:62:d2:f7:62:f4:
f0:cb:dd:37:c6:6e:ef:a8:6d:69:19:35:23:4f:31:65:12:72:
93:b1:e5:57:2c:77:c4:8b:ae:f7:29:38:0b:d6:e8:00:2e:73:
de:bc:a7:0d:32:18:52:05:9d:4e:d9:09:b0:53:ef:8b:80:18:
84:aa:54:3c:82:12:0d:ef:a4:41:d1:ac:4e:ab:56:7b:e3:70:
ce:80:61:6f:65:3e:61:63:ed:bc:14:e3:d3:7c:26:a9:da:22:
8a:c1:8f:db:88:f5:54:5a:9c:e9:43:ab:ab:36:cb:15:a5:ea:
9a:ad:5f:49:71:5c:cd:11:dc:15:88:ad:c2:e4:f3:7a:f8:10:
3c:b4:12:de:ad:46:62:90:96:ef:44:33:9c:16:cd:7b:b8:06:
af:6c:a5:24:e8:9a:f9:56:72:2c:16:16:ab:fe:b0:82:ab:a4:
ed:2c:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:05 2025 by rpki-client