Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
File: d53x3kOsymHuwDTOomi0ZUzBXKw.mft (raw, json)
Hash identifier: knCHETbh2Zt7Vb/mcJHfQh5Dgkf0j9EbjWVjWNcTCLM=
Subject key identifier: 79:21:A3:A3:F7:F7:B1:FF:8A:58:F2:E7:1E:48:EB:52:33:42:DB:08
Authority key identifier: 77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
Certificate issuer: /CN=779df1de43acca61eec034cea268b4654cc15cac
Certificate serial: 019652A47A65519E785F85AFB11294D80C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 10:00:32 +0000
Manifest this update: Sun 20 Apr 2025 10:00:32 +0000
Manifest next update: Mon 21 Apr 2025 10:00:32 +0000
Files and hashes: 1: 0vZUeITqxhjYTZ09-IZPJQyJrFs.roa (hash: XWy8JIsvHPb13TWVq0G62lkPYB9FumkdweR7BRskWwI=)
2: d53x3kOsymHuwDTOomi0ZUzBXKw.crl (hash: QtbEjheE/oXxpD/hJm6UoDJqv8D+Q9GV8jGX16PZM+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:7a:65:51:9e:78:5f:85:af:b1:12:94:d8:0c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779df1de43acca61eec034cea268b4654cc15cac
Validity
Not Before: Apr 20 10:00:32 2025 GMT
Not After : Apr 21 10:00:32 2025 GMT
Subject: CN=7921a3a3f7f7b1ff8a58f2e71e48eb523342db08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:e5:b2:29:c0:8d:d6:0b:b6:3f:f0:2e:d0:
2d:bc:19:6d:9e:84:e3:d1:97:ef:85:b4:6f:cc:ab:
70:94:c3:63:56:3e:b3:2f:28:bb:ec:a7:22:8f:9a:
2d:23:b6:00:89:c2:15:db:66:d0:eb:29:f5:29:51:
29:06:45:08:68:7a:76:24:7c:be:d5:f5:2b:cf:1f:
90:7f:ae:35:16:f4:6b:2f:0c:9e:55:02:2e:24:b3:
df:93:1e:7a:86:6d:42:b1:e5:be:08:80:a0:7f:56:
12:1c:51:ca:e3:1e:03:21:2a:2e:c8:cc:bb:0d:b8:
10:c4:07:78:ac:a1:00:fe:cd:c0:cc:53:81:c7:38:
d0:4b:d7:b4:c3:3a:a7:62:5d:0a:9c:07:14:bc:2d:
30:58:0f:62:aa:dc:ef:ff:07:0f:dc:36:3c:9e:03:
a1:cf:56:fb:68:93:dd:91:ba:b8:b8:b3:dd:6e:c3:
ea:b1:e0:d6:22:56:ac:8f:5d:62:e6:52:61:47:91:
38:41:0c:20:61:ec:87:ff:32:3c:d1:85:1a:0a:f8:
54:a8:4b:11:f1:31:a0:cb:79:45:2d:23:5f:d5:05:
b2:e3:92:af:09:7f:aa:3c:41:af:d6:d0:0f:c6:d7:
69:83:e3:ba:b8:73:7f:13:64:27:10:90:15:8f:6c:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:21:A3:A3:F7:F7:B1:FF:8A:58:F2:E7:1E:48:EB:52:33:42:DB:08
X509v3 Authority Key Identifier:
keyid:77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:25:f7:58:cc:df:ad:a3:54:c7:26:ca:93:ce:b8:7f:13:c1:
8e:e8:d9:1e:4f:d0:45:45:7d:8f:2d:d7:2c:f8:21:9c:a3:f0:
c2:b4:db:d3:27:00:29:bd:1f:29:f8:8a:f1:88:22:5f:f4:4d:
16:62:d6:21:08:e0:a2:b6:72:2e:cd:f3:a3:0c:0a:b1:e5:5e:
67:14:f6:fc:19:cd:06:f1:6c:41:5e:2e:ec:06:7b:21:f8:de:
bd:cd:84:53:ec:76:8c:5f:d7:b6:89:b2:ff:97:b8:48:b5:af:
f8:63:f1:e0:81:53:af:c3:1c:80:1b:13:db:80:31:59:a6:6c:
0b:ff:fb:7b:85:ec:a2:59:e1:e7:8d:85:62:f4:4d:fd:98:32:
2c:63:bd:33:c4:ba:58:37:99:a9:2b:0e:26:f1:1c:bf:34:69:
d5:dd:06:e8:11:6f:70:dd:67:66:ab:c4:e1:f2:9c:09:06:56:
82:f2:62:da:a4:2b:dd:db:15:7c:f8:dc:56:f1:55:d9:dc:01:
ef:de:ca:ea:cb:fd:50:6f:d6:b9:b2:14:9a:dc:f0:80:3b:e0:
8b:8a:9c:62:32:08:6e:aa:b8:24:df:9b:b2:57:8a:03:ab:5f:
d1:41:06:3e:5a:41:51:71:e1:50:0d:2b:11:4f:8e:43:6c:5b:
eb:96:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:25:01 2025 by rpki-client