Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: y/A+nBzpHU/rDpcW6tmtSUXTwn7pZoz3kl/Z2di8DOg=
Subject key identifier: 91:98:87:27:57:9A:2D:C5:49:D5:48:7B:D7:25:A9:D6:CB:99:73:17
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 01960BD5EE5DAF4E53E3BCB6EDBB2AEF44F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 14DC
Signing time: Sun 06 Apr 2025 16:01:31 +0000
Manifest this update: Sun 06 Apr 2025 16:01:31 +0000
Manifest next update: Mon 07 Apr 2025 16:01:31 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: zNbo+h/z+8rXotJsHht6EcxEp7e654Bni8Wtmi+JaaM=)
2: xOgebtB7-JslaYskbHWpkE_rjGk.roa (hash: WlppSlnMGpM2+YnpOQ+4knYBpRNoouui2tk9UJv6tWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:d5:ee:5d:af:4e:53:e3:bc:b6:ed:bb:2a:ef:44:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Apr 6 16:01:31 2025 GMT
Not After : Apr 7 16:01:31 2025 GMT
Subject: CN=91988727579a2dc549d5487bd725a9d6cb997317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:39:14:03:c6:31:b4:30:8b:80:71:37:dc:
68:49:0b:d9:e6:56:4f:5a:f4:3d:7f:b4:1b:6a:0f:
99:9e:ed:b4:6c:22:98:38:7b:1d:6f:0f:fc:95:f2:
4e:6b:4b:74:eb:dd:74:8a:33:7a:93:e9:b7:1c:c3:
fa:8e:e6:c7:13:e8:2f:49:1f:ad:71:78:f2:16:1d:
cf:64:7d:fb:6b:f3:92:27:e1:55:bd:9d:fd:41:ce:
f4:34:70:60:be:1f:14:66:2e:bd:52:49:3a:69:6b:
34:2f:ca:61:00:80:47:78:74:03:96:f4:b1:7e:7c:
b4:f5:80:6c:a8:56:f8:c8:17:d0:dd:66:d1:2f:98:
86:d8:03:87:61:01:7c:d8:8a:92:1e:3e:20:89:dc:
53:bd:74:2b:c3:b0:93:ff:72:8f:d6:fa:be:03:af:
c5:cd:69:94:d6:49:50:af:6d:48:cf:c7:2a:2c:84:
43:86:8d:b2:61:64:51:21:72:7d:db:68:99:2b:76:
22:6f:03:cf:7e:b5:4a:2c:74:69:b4:db:28:da:5a:
a6:72:f1:0e:e6:09:b9:7e:76:93:ed:ef:db:b0:d4:
48:3e:c7:84:8e:71:67:3e:43:22:2c:6c:c4:f9:c4:
1d:7b:09:80:ad:75:a7:bc:b9:f9:e5:95:09:9c:9e:
6b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:98:87:27:57:9A:2D:C5:49:D5:48:7B:D7:25:A9:D6:CB:99:73:17
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9c:a6:ad:ae:ee:fa:d2:c1:dd:f1:37:b7:40:4a:a6:20:b3:
94:ac:40:82:14:2f:58:64:18:24:1d:b1:6f:82:5f:c5:49:ff:
7e:09:4a:3a:78:7a:c4:93:0e:f3:a4:7f:2e:b5:07:5f:39:a5:
2d:7f:66:5e:ae:70:ec:a3:14:19:4d:5e:30:9a:87:e1:8a:cb:
c4:9f:09:da:1c:fc:69:e5:9b:72:2b:52:b0:4a:ac:0e:1f:a3:
90:5c:e4:50:b1:e7:9a:1e:b0:ba:e1:2f:94:5c:1a:c6:1f:6f:
d2:32:60:10:4d:e1:7a:c3:df:1a:65:3d:36:6d:13:9d:c2:ed:
3a:4d:2a:c3:16:ea:6f:04:6a:b8:9b:e8:cc:8c:ac:ce:43:81:
f2:85:53:13:1e:34:31:02:71:bb:13:e0:8c:2c:2a:9d:47:2d:
9d:ee:78:42:1f:26:fe:86:ee:19:af:b9:d5:7a:21:f6:d5:9d:
dd:ea:3e:43:43:77:8a:58:8c:06:d3:10:df:f1:e4:27:90:ce:
d7:18:af:a7:21:a6:6f:b0:62:67:d7:43:4d:93:18:72:8d:88:
0b:26:fb:e7:84:fe:19:86:54:de:17:70:73:fd:77:28:52:33:
cb:20:fa:82:95:ea:c1:c1:39:10:fb:24:f7:dc:ce:ff:66:3d:
e9:9c:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:58 2025 by rpki-client