Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: c93fOJPzM/W7kQSxo8cwZjfdJLsR8PDcX7CAF6XOB2Y=
Subject key identifier: A6:56:FE:3A:8C:13:EB:24:C9:2F:14:20:97:1D:D5:25:13:C4:1C:AB
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019753B45C6F306EF78842A9171DC977F089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 1587
Signing time: Mon 09 Jun 2025 08:00:18 +0000
Manifest this update: Mon 09 Jun 2025 08:00:18 +0000
Manifest next update: Tue 10 Jun 2025 08:00:18 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: +WJQYmYmpjWkpoPAm2o04vuWoQ2K3bpQiZzRRCSLbeE=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:5c:6f:30:6e:f7:88:42:a9:17:1d:c9:77:f0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jun 9 08:00:18 2025 GMT
Not After : Jun 10 08:00:18 2025 GMT
Subject: CN=a656fe3a8c13eb24c92f1420971dd52513c41cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:eb:92:a0:7d:a7:4f:4b:7a:3d:7a:41:7a:
d7:a1:b0:85:d6:4c:f8:7b:fc:66:cf:d2:41:a5:06:
5d:c8:e5:7f:fb:78:a3:38:cc:ec:7d:8f:8b:fa:d2:
f5:cb:30:cb:e7:6c:70:91:bd:3a:51:5c:d6:cd:66:
fc:a0:7f:2c:b9:4a:0b:c5:5e:f4:87:a3:74:6d:0a:
2b:f1:94:3c:f9:6b:73:df:b1:33:1c:78:56:db:66:
84:53:64:55:dc:5a:45:e0:b4:59:5a:6f:dc:48:e0:
b5:97:21:86:e1:d5:6f:3f:2b:72:f2:b2:3e:ab:18:
76:73:0f:a2:e0:f0:6c:9e:a2:37:79:61:b7:67:d6:
fe:30:9e:6d:3e:84:30:54:78:44:83:f8:b2:c1:33:
33:d8:cc:2a:f0:6d:f7:1c:ce:e9:e6:be:92:fc:ee:
ff:50:1c:9d:7f:51:6f:d5:c2:c4:9f:cd:6e:ed:70:
2c:fb:9e:4e:f0:00:35:dd:9d:6a:f0:16:c6:d1:fe:
fb:47:c3:85:d5:1c:1b:39:94:64:2a:f8:c0:1e:4a:
8a:25:39:f0:d3:0c:fd:db:3c:01:94:77:70:e6:5a:
84:c3:57:dd:2e:b5:44:a3:2c:af:1a:f2:1e:86:92:
27:f2:5e:56:a5:83:cf:f2:1c:fa:67:58:69:51:6e:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:56:FE:3A:8C:13:EB:24:C9:2F:14:20:97:1D:D5:25:13:C4:1C:AB
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:78:5a:02:72:1f:2d:38:c4:1a:78:8e:95:c6:20:de:13:bd:
e6:ac:b0:9c:02:1d:ab:4d:46:4c:76:8c:7d:74:3b:f9:e1:63:
7b:80:8a:55:d2:f2:c3:aa:4b:5e:0b:b6:98:56:92:47:8e:a1:
02:5c:c4:b9:f3:a3:17:b5:f9:36:08:e8:f7:00:f1:a7:e8:c6:
1e:00:ad:15:18:b2:ce:f2:1e:01:b0:c3:ea:1e:1c:a0:41:a0:
96:2f:b1:88:71:b5:f2:49:7c:72:b7:b5:d3:1c:ea:03:cc:4e:
47:8e:32:42:c0:56:a2:43:ae:06:dd:29:63:01:b9:43:e6:82:
cc:fd:2f:1c:46:48:10:aa:6d:8e:21:bb:30:5e:eb:cf:34:fa:
8e:20:11:37:e9:a2:c5:a1:49:e6:be:4c:1d:5b:0a:a7:f3:85:
0c:de:7a:e7:87:b0:76:ad:57:6b:38:b5:48:bd:76:a6:10:e2:
95:54:d1:fb:27:12:58:d3:ce:b2:09:e4:39:f5:ff:a2:23:f3:
21:66:ca:e3:9d:9f:e1:76:f9:d3:60:9f:6b:a4:3c:1d:b2:54:
3c:3d:08:2f:05:05:9e:59:01:46:2c:32:d3:14:f3:bd:4b:49:
2e:1e:62:c0:fc:da:26:f8:27:1c:70:62:83:1a:2b:b6:bf:a1:
92:e1:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:44:48 2025 by rpki-client