Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: z/LdOGVRqg+d+rCMUwASIiUY6PR0aoewNSWro1R0iik=
Subject key identifier: 05:E7:D9:7F:8B:C3:3B:8D:1F:6B:92:F8:7D:2B:0A:44:B4:C9:D4:E6
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 01964D7DF6FEADD37AAF88F0CD72EE3410A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 10:00:22 +0000
Manifest this update: Sat 19 Apr 2025 10:00:22 +0000
Manifest next update: Sun 20 Apr 2025 10:00:22 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: LP3yWLjcRBd7ceanq3zr44sgWhO9sBQ85RRdDqO02e0=)
2: f0gof4jxw94Oa83YFTdbTbKjLPk.roa (hash: TTuzPsw9kpuOO/S82uUhytdELCayKcLt12jYeRdVVIg=)
3: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (hash: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:f6:fe:ad:d3:7a:af:88:f0:cd:72:ee:34:10:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Apr 19 10:00:22 2025 GMT
Not After : Apr 20 10:00:22 2025 GMT
Subject: CN=05e7d97f8bc33b8d1f6b92f87d2b0a44b4c9d4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:c3:cb:65:c2:b2:30:24:11:10:40:3f:e4:
df:7f:59:d4:6c:3b:c8:7b:c5:61:5c:6d:7e:77:54:
6c:e7:b2:d5:fe:d3:d6:7a:e1:d7:81:82:81:42:d4:
fc:ce:2c:cc:f3:fb:e3:a0:c0:ea:6b:ce:9a:05:63:
aa:5d:31:8a:df:2f:3c:cd:b9:be:2d:9b:49:ad:a1:
48:ad:a7:d1:2b:41:62:c9:fa:63:30:d2:08:d0:8d:
8f:43:03:fa:1f:77:01:99:ea:02:fc:9c:31:e7:0c:
ef:5a:9d:f4:e6:46:bb:c9:ef:95:4b:14:1d:4a:a3:
32:cb:b1:30:21:42:4a:42:80:18:2d:7e:10:f3:43:
43:19:86:03:a3:b0:1e:c9:9c:8a:92:23:13:8d:3b:
a1:1b:c9:52:25:e5:81:79:95:70:82:f2:d9:98:ee:
dc:35:82:cf:45:44:5b:ec:7f:e4:cb:ca:09:fc:3b:
58:7d:ff:84:38:1b:f1:47:6b:a9:c5:de:17:89:7e:
39:78:25:70:b6:25:cc:7e:e0:65:60:7b:db:ec:41:
02:23:5c:be:f6:d4:96:9e:ae:9f:14:bd:b1:66:e1:
c7:bb:18:5d:3b:4b:a0:9f:8c:ad:e0:84:88:68:3b:
ac:49:80:bc:a4:5c:3b:92:b6:13:50:9e:29:8e:49:
6a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E7:D9:7F:8B:C3:3B:8D:1F:6B:92:F8:7D:2B:0A:44:B4:C9:D4:E6
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:95:4c:07:48:56:c9:a5:84:38:3b:1f:57:a0:7c:88:b6:89:
36:6b:74:9a:bb:ca:07:22:19:66:8f:1c:25:40:c0:4f:21:62:
42:0c:c6:eb:77:a3:a5:7d:19:d5:4b:60:cc:57:06:e0:20:21:
93:37:d2:a6:e4:19:1e:99:62:f5:1f:c3:b5:d6:62:20:ac:3d:
bc:9f:21:ed:a1:92:a6:3d:1d:bf:75:e0:1e:2b:70:ce:eb:89:
83:e0:3b:97:12:c2:0c:4f:ee:b4:c5:5a:d2:f1:74:34:76:d5:
88:fe:7c:a5:ce:0c:df:05:1f:bc:d0:0c:49:c2:32:55:a3:9f:
a0:63:9a:86:96:17:8e:2c:c8:73:b6:b4:ad:da:fa:64:2a:af:
f8:7f:95:8e:25:64:7a:1e:21:0d:26:1f:1a:55:03:d0:34:0d:
9b:95:94:f9:e1:44:71:0d:14:ac:ac:05:1e:8c:e2:a4:39:a4:
07:c7:a2:53:3c:28:6c:f6:01:8b:c7:e5:34:1f:1d:ee:0c:28:
7d:40:d4:7d:85:35:54:ca:c5:20:25:fd:e2:8c:05:34:51:b1:
3e:af:b2:cb:e6:67:64:ed:ac:e3:31:c2:d3:30:de:a5:3e:49:
df:dc:d2:ed:70:aa:5d:b7:2a:76:2d:6d:8c:89:ba:fc:4f:43:
b4:a0:5e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:29:43 2025 by rpki-client