Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier: 3RC3SMpJyDQ5bG9A45t7UAN4ONwF767fEau0lHKCqbU=
Subject key identifier: 0A:F2:1C:ED:16:3A:02:0F:60:A0:67:84:E1:80:4D:9B:CD:2F:87:8F
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 019613FCE6151382E051B9D2FAFDE7C9F47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number: 14E3
Signing time: Tue 08 Apr 2025 06:01:02 +0000
Manifest this update: Tue 08 Apr 2025 06:01:02 +0000
Manifest next update: Wed 09 Apr 2025 06:01:02 +0000
Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=)
2: bTDx6BY2_bieAYAIiAFgdyKIF9k.roa (hash: qCwMntOeFKqowJO7prWM5i0O+TccBmu2GDJdiZbI22w=)
3: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: E97p5SlV2Bx/B0B5saSdrVRspDrgRnWbMSCD7ZX1OIU=)
4: kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa (hash: eW1HiHgHjju0NsKcsTSvzT72THKILOyyGeew75G0SSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:fc:e6:15:13:82:e0:51:b9:d2:fa:fd:e7:c9:f4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Apr 8 06:01:02 2025 GMT
Not After : Apr 9 06:01:02 2025 GMT
Subject: CN=0af21ced163a020f60a06784e1804d9bcd2f878f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:82:9a:ed:32:cf:b8:e5:32:ad:58:7d:43:
05:7c:71:41:d7:17:d1:f6:7a:cc:c8:45:9a:28:81:
31:0f:b4:63:1f:81:48:1e:96:da:ff:b0:4b:d5:89:
20:1b:65:f7:52:c8:f9:98:32:20:3d:44:f2:e9:2b:
ae:60:7e:6c:b2:07:90:e1:e5:91:3b:3d:e5:33:33:
3a:e4:a5:93:df:eb:01:a8:88:6d:25:99:9c:1c:e3:
be:31:65:40:ed:16:f0:3c:b7:1d:da:81:07:ec:47:
2a:3a:f4:17:ef:ba:d1:3b:66:44:33:3c:dc:73:35:
6c:d7:b9:c2:6c:65:9b:82:96:e7:81:91:2f:ba:61:
f8:dd:e1:96:ec:82:7c:fc:b7:1c:67:e8:8f:b5:9f:
65:74:4f:47:1e:ff:c2:13:99:59:ce:ab:8c:04:39:
17:97:27:2c:f8:94:a3:6f:50:f6:28:17:2b:3a:01:
71:a1:c5:5f:a1:77:1b:82:b1:24:3d:aa:53:4a:ce:
3e:41:f4:3d:cd:3f:51:7a:30:a6:28:53:6e:d8:a8:
ed:e5:c6:f9:4b:94:ad:51:ea:47:fa:9f:41:37:bb:
ce:35:7c:68:00:3a:c2:e2:3c:8e:95:bd:5e:4e:c1:
86:37:99:11:b3:a6:23:c6:c8:41:3d:b8:e7:bd:65:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F2:1C:ED:16:3A:02:0F:60:A0:67:84:E1:80:4D:9B:CD:2F:87:8F
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1f:e6:e9:59:52:ec:ac:e2:12:10:fd:19:71:2f:54:b1:34:
31:70:93:75:f5:4e:b6:b2:67:02:b1:0d:14:67:aa:23:2e:84:
76:2b:13:1f:b3:61:4b:f2:ee:33:d3:9b:9d:8f:e6:f3:69:ec:
aa:b6:47:ab:33:04:eb:bc:33:a1:80:ec:44:9d:c2:fc:37:ec:
85:dc:87:9c:83:b5:61:ce:68:dc:4a:5d:52:8e:10:07:95:24:
95:f8:5e:e4:c3:33:93:6d:63:5e:21:f1:a9:ab:00:4e:65:0e:
a9:49:40:32:de:14:98:01:5b:09:b6:44:fe:06:53:4c:5d:1f:
48:b1:fe:e4:4f:2b:2b:9e:eb:99:33:8e:4a:87:7c:2d:6a:a6:
80:68:c9:e5:d2:ff:60:c1:fc:fa:b3:83:e8:0a:5d:9c:fa:a8:
db:ff:28:00:d7:7e:5f:14:7f:31:cb:36:1d:68:46:cb:b2:46:
c0:1a:02:7f:e6:4a:4e:4e:02:e5:e4:7e:4f:b9:f5:34:9c:e2:
38:e3:78:24:ac:41:c6:8b:a1:18:07:3e:e2:52:23:f8:2d:bb:
4e:61:f4:92:6a:b7:42:a1:98:54:4c:6a:7f:87:63:02:47:e6:
31:5f:01:89:de:37:be:0e:f7:91:b3:97:e2:26:c3:c2:28:63:
8b:d9:0d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:38:44 2025 by rpki-client