Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: ln1aCIFluXBVLMhKnI2zXXHuRmj1U0MS4s9ZgqZsZRM=
Subject key identifier: 7D:8B:17:B0:AA:D5:CB:07:5C:80:3E:F2:78:2B:A3:2A:B0:88:93:C5
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 01976704B9BB3CC108BC40D5691EEB5923BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 02:00:52 +0000
Manifest this update: Fri 13 Jun 2025 02:00:52 +0000
Manifest next update: Sat 14 Jun 2025 02:00:52 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: 3UldoG/ln/L2JNchNV2rKsC3FUJ65d0EhMY/FHb2YPc=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:04:b9:bb:3c:c1:08:bc:40:d5:69:1e:eb:59:23:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jun 13 02:00:52 2025 GMT
Not After : Jun 14 02:00:52 2025 GMT
Subject: CN=7d8b17b0aad5cb075c803ef2782ba32ab08893c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:10:ef:37:48:91:ed:9c:e5:2b:cc:b1:d7:
0c:97:73:28:a5:cf:3e:90:d9:79:3a:c0:c3:c1:73:
4e:34:e7:88:90:e0:74:dd:b0:8b:b4:08:35:5c:5d:
6e:9b:b5:4d:b8:4f:97:5a:b7:38:57:e3:1e:0e:d8:
f9:79:5b:d1:62:ca:2d:7c:ae:e3:14:2b:46:5a:5a:
c1:c8:0f:96:66:14:c4:b9:af:51:ce:93:a6:8a:e9:
da:f9:21:78:05:a8:c5:c0:f8:d1:d6:da:fb:6a:42:
d0:c6:37:4c:5e:e7:41:42:01:73:ed:e9:a2:5e:37:
d1:7a:fc:e8:4d:79:9f:36:e9:93:4c:aa:0a:0b:0d:
ac:ea:26:9b:e8:36:6b:d1:44:6a:f4:66:14:82:cc:
ee:9f:b6:11:54:c7:0f:96:28:37:f6:2f:aa:84:de:
3e:75:a9:46:e2:db:33:9f:31:30:44:74:dc:df:61:
3e:f1:53:1b:a1:9b:df:3c:44:91:03:c2:58:79:3f:
ee:50:86:4c:00:17:59:27:42:bf:b8:02:0c:13:d2:
c8:51:2d:f6:ac:30:b1:63:ad:b3:03:cc:06:e9:e3:
b4:ce:b1:24:bb:4d:87:94:c0:69:b4:5a:04:4d:ef:
d5:03:c1:e2:6a:28:ba:e9:b1:cd:4d:72:cc:92:9e:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8B:17:B0:AA:D5:CB:07:5C:80:3E:F2:78:2B:A3:2A:B0:88:93:C5
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:64:d0:c6:ba:14:6f:a5:e4:fb:84:d6:cb:6b:e7:5f:69:50:
61:9f:17:56:ae:dd:0c:56:4b:23:83:77:50:a9:5c:3f:66:01:
f5:82:ae:47:60:41:d4:e4:06:c5:b1:f9:33:19:29:5d:67:5d:
db:be:72:15:31:07:be:18:d7:d0:17:35:b1:8d:68:03:81:05:
fc:52:5b:59:db:bf:1e:a6:13:2f:8c:8b:0a:9d:41:60:89:ad:
d6:e5:b4:c2:53:08:08:aa:69:c9:5d:62:8b:ba:ae:3a:a6:cc:
de:2f:fe:c7:87:ae:ff:ce:19:4a:3a:ba:f0:af:0e:9f:8b:cf:
87:02:f0:3e:93:fa:c4:6a:36:42:39:90:d4:09:3b:03:a9:f4:
bc:3e:e6:8d:4f:91:8a:f1:06:c8:65:9d:5b:10:d7:68:83:6c:
37:67:fa:2e:37:fa:ee:e4:66:7d:7d:2b:6b:51:73:22:e8:46:
fe:de:23:07:f8:c4:75:17:5a:93:a3:53:a0:b9:c5:3c:54:b6:
e4:03:9b:38:da:65:95:61:a9:15:39:2f:d7:0b:ea:75:47:7e:
44:b6:e0:3f:f6:a1:8b:1b:47:eb:d8:b4:5c:91:1a:03:9b:07:
e6:1a:29:eb:8a:7f:2f:1e:7f:a9:9b:ff:51:62:fb:02:78:52:
a0:4d:31:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:49:24 2025 by rpki-client