Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: YSDPm1KbFyprb2LOhVM7nQuOLTRO1+tmF1HCdIV66/M=
Subject key identifier: 48:F9:B2:EA:9F:AA:B7:9B:B3:16:79:BD:85:21:91:2F:F8:60:84:E5
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 01963EE68199CB5E00BCF17434CFE8C5DCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 14:00:15 +0000
Manifest this update: Wed 16 Apr 2025 14:00:15 +0000
Manifest next update: Thu 17 Apr 2025 14:00:15 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: wb+6LMUUqKkWOJX4Dh0oU9j2Ay4nFlLNsEC5NCkqjH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:81:99:cb:5e:00:bc:f1:74:34:cf:e8:c5:dc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Apr 16 14:00:15 2025 GMT
Not After : Apr 17 14:00:15 2025 GMT
Subject: CN=48f9b2ea9faab79bb31679bd8521912ff86084e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:bb:ad:d8:15:8c:2b:c6:e3:87:99:f7:12:
63:bc:dd:8d:06:27:1e:6d:1a:2e:ba:f0:42:34:bb:
c7:2d:81:a3:b7:ea:4e:99:c4:19:52:a9:1c:f6:79:
d8:e5:ff:34:8c:1c:00:76:72:67:02:e0:f6:20:31:
b6:ea:88:a9:30:09:cc:54:5a:4f:c3:f3:46:3a:30:
c8:00:5e:13:49:63:c7:3c:e2:1a:e0:6b:80:ee:18:
74:9e:38:58:77:f8:8c:75:f0:4b:8b:b6:56:a6:1a:
b6:66:06:c5:2a:c6:54:0c:ff:7e:32:61:c7:2c:6d:
06:ed:4c:f5:ec:78:7f:9c:d4:46:1f:95:d4:2e:4f:
65:6e:40:f1:47:69:b9:8c:af:58:1a:f5:36:96:f0:
6c:0a:17:40:c6:3a:12:26:c1:65:f5:6e:c6:61:0b:
f2:af:ec:4a:51:97:bc:c6:82:02:f9:d8:2f:d2:1c:
9f:cb:75:d8:14:23:08:94:73:b5:3f:e2:79:8b:b5:
e0:48:28:0c:54:9c:42:6c:d7:42:84:66:f5:e7:ea:
23:26:fd:a5:fd:1d:8d:df:9f:6b:b0:e6:29:69:c3:
54:c6:d3:25:72:f3:66:47:01:0b:1c:59:18:2b:7d:
1e:69:dc:ca:c2:a7:88:cb:3b:05:30:59:32:44:ae:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F9:B2:EA:9F:AA:B7:9B:B3:16:79:BD:85:21:91:2F:F8:60:84:E5
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:2d:09:f9:12:18:3f:a4:02:f3:88:2d:52:d8:a7:cb:85:c4:
fc:cb:67:87:13:c0:c1:3a:2a:64:9f:b5:49:39:5f:63:2a:7d:
50:bf:4c:b1:b0:83:53:d2:94:75:2d:af:24:88:84:9b:25:44:
e6:3e:93:c9:04:92:af:d1:53:99:7c:76:78:22:93:b2:f0:73:
5d:67:c7:b6:8c:27:fb:62:fe:9e:b3:f6:e4:89:86:64:7f:25:
6d:77:e5:8a:7e:fb:d7:47:00:c0:c3:55:be:ed:a9:73:6a:f8:
2f:a8:91:56:43:e1:90:f4:4a:7f:34:15:f1:01:cc:0b:be:87:
33:91:12:64:d8:aa:c4:c1:83:e1:c0:7b:bc:aa:76:e1:c8:20:
7d:4f:f7:3e:47:f8:a2:08:32:a6:5a:c7:a5:c3:04:f8:8c:c9:
fc:1e:14:7a:5e:dc:42:c6:90:a9:a9:65:ac:c8:e4:cd:8f:90:
fb:bf:ef:47:c6:6f:e3:db:52:b4:40:29:97:72:7f:d3:b3:53:
81:96:14:23:12:bd:1e:16:3c:65:5b:31:6d:df:c8:b5:e7:ee:
ba:3d:0a:ef:db:f3:d2:e1:d3:7c:68:6c:78:e8:8c:64:e1:be:
09:28:50:ff:4b:6d:54:d9:e9:c3:49:4b:a1:31:c4:91:20:cc:
9a:2b:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:01:20 2025 by rpki-client