Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: c+cMEl8hhJPcKexcMT5nTnrd+gzkBBALmFTNFYfdCbw=
Subject key identifier: C0:27:F3:9A:F1:A3:88:44:47:86:87:0E:1F:F3:21:C3:F7:75:2D:64
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 01976516506066A407A762DEE4767B5D3485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 1590
Signing time: Thu 12 Jun 2025 17:00:50 +0000
Manifest this update: Thu 12 Jun 2025 17:00:50 +0000
Manifest next update: Fri 13 Jun 2025 17:00:50 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: nT+JrgF5ubggJtBnSVDeUJpSwAn7Xj/QmMFW0DpO3Bw=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:16:50:60:66:a4:07:a7:62:de:e4:76:7b:5d:34:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jun 12 17:00:50 2025 GMT
Not After : Jun 13 17:00:50 2025 GMT
Subject: CN=c027f39af1a388444786870e1ff321c3f7752d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:df:38:ac:77:33:ba:8d:5f:b9:cd:ea:f3:
37:9e:a1:d1:2a:0f:21:47:d0:0b:4f:1e:98:1a:b5:
56:71:16:2d:70:61:cc:ea:8a:c3:15:89:37:a8:11:
23:0f:0a:39:19:0a:91:e9:97:db:15:02:8a:e6:e3:
34:a2:77:d9:0b:d8:f3:0b:43:78:8d:f2:9a:2c:75:
c1:60:94:61:73:1f:41:1e:82:8e:89:f4:ba:ce:fb:
ba:83:32:ae:95:a3:34:af:51:f5:33:e7:a3:29:0c:
92:11:49:7b:f3:68:a5:aa:10:7c:58:b6:48:8f:e3:
83:41:a7:b8:1e:6e:5a:5a:f0:f4:df:96:dc:91:1f:
e9:86:d0:2c:6e:21:9d:a9:b1:ce:86:4a:a9:71:1d:
59:f7:d6:75:fb:57:7d:6b:6b:2e:f2:e6:07:30:73:
05:52:aa:84:5c:e0:0e:b7:9b:61:55:23:ee:b5:51:
e9:e9:10:ad:c0:a8:ef:44:0d:c9:f5:c2:c4:22:0a:
45:f0:92:01:19:d2:b4:49:cd:97:f7:0e:eb:80:37:
0b:b2:5b:2f:33:58:31:a7:ef:be:dc:93:3d:70:86:
60:1c:ec:de:83:f1:d3:d2:90:8f:25:05:ca:e9:b1:
34:a1:3d:87:0c:c7:0c:c1:37:81:e9:79:5a:f9:04:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:27:F3:9A:F1:A3:88:44:47:86:87:0E:1F:F3:21:C3:F7:75:2D:64
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:20:52:1f:7f:80:69:a6:a2:55:f1:b8:31:51:9e:fb:56:7f:
26:6a:88:6a:33:6f:22:75:ad:75:33:79:df:c7:12:e4:2c:c7:
d5:41:7a:fc:63:d9:42:b6:94:6e:e0:93:e9:1c:a4:5e:fa:87:
30:6c:41:a3:99:81:2c:89:99:b6:6c:51:69:77:06:e5:e1:9c:
60:d4:23:f7:c3:2c:e1:92:cd:17:f5:9b:28:64:8b:30:e8:6e:
46:19:8c:69:67:61:d5:53:92:51:0d:e9:01:0b:19:59:cf:02:
9a:b4:f3:ce:df:cd:d9:9a:f7:09:76:01:8e:c2:95:d9:2f:c4:
86:3a:f5:a6:c4:06:f8:60:70:3a:3f:0f:1a:ca:0c:7f:be:1a:
6d:d0:51:5b:c5:7c:25:cb:92:76:86:cb:84:44:7d:80:72:0e:
f8:75:4c:c3:46:34:bd:43:17:53:a0:bf:62:41:8d:f0:8b:b8:
39:ba:07:5a:86:02:4e:58:8c:56:ca:81:c9:cc:b6:b4:2c:57:
39:83:62:79:e8:ac:33:b8:63:04:bd:f1:c5:df:ef:4c:19:4e:
73:6a:18:cc:1c:99:39:cf:39:e1:38:95:32:95:ff:96:0c:13:
0e:d0:95:2a:c7:ca:cf:37:2b:e2:dc:f8:61:f3:c4:e6:4d:e4:
f3:81:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:20:24 2025 by rpki-client