Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: +Fy0HmOApXS8JLIiXL8kSphPJSMaWJrkQnqZOOxemhg=
Subject key identifier: E0:04:73:86:00:88:0E:57:76:54:05:4C:05:99:7C:54:BF:92:4C:FE
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 01962E2AF650775C668E4FAF86075E6088D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 14EF
Signing time: Sun 13 Apr 2025 08:01:29 +0000
Manifest this update: Sun 13 Apr 2025 08:01:29 +0000
Manifest next update: Mon 14 Apr 2025 08:01:29 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: 7K8A6xj/nb27ICzE6xgqrYecRoi6p4MefHFUR1ge/9g=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:f6:50:77:5c:66:8e:4f:af:86:07:5e:60:88:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Apr 13 08:01:29 2025 GMT
Not After : Apr 14 08:01:29 2025 GMT
Subject: CN=e004738600880e577654054c05997c54bf924cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:42:bc:87:97:2e:5f:14:fc:05:7a:72:37:
38:a1:21:2e:93:c5:31:83:54:3e:30:f0:7d:92:79:
39:79:ab:42:e0:1f:b8:d6:35:1d:e2:b0:42:24:e2:
ff:5b:1a:d6:49:ea:d1:d7:66:ce:c2:3f:13:e2:a7:
7c:d3:42:cd:54:44:af:1c:52:cd:b8:d7:95:f5:c1:
a7:74:df:43:c3:f3:2b:a8:47:22:40:7a:09:64:51:
f4:40:21:80:10:c0:24:da:1c:6c:d5:dc:d8:47:76:
21:74:07:0a:35:12:73:98:75:31:f5:24:1e:0f:f2:
52:f9:f0:e5:15:67:7f:02:35:9d:ca:e9:f9:a8:4a:
39:0f:c3:b9:b1:3a:51:2f:55:cf:74:76:6e:70:59:
40:c6:8f:37:47:99:04:6d:ec:22:ad:96:2b:20:7a:
e9:3d:5f:53:97:3d:d5:8c:e7:c2:aa:5c:2e:e3:82:
92:93:dd:45:e0:af:3f:a3:be:f9:32:6e:45:37:ab:
c4:57:0a:54:ba:3e:7a:9c:05:48:4a:7e:12:ea:fe:
56:9b:ff:c6:ad:d3:bb:36:e0:3f:60:42:f6:e9:26:
10:7c:a7:1e:a4:53:8d:c5:66:32:9f:e4:e7:ee:95:
94:d4:6b:ed:8e:5f:c0:4b:76:98:d2:9b:f4:d5:28:
d4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:04:73:86:00:88:0E:57:76:54:05:4C:05:99:7C:54:BF:92:4C:FE
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:88:a3:0b:3e:1f:07:c0:f6:f3:9d:49:77:d3:2c:18:94:28:
70:d0:e3:4f:c7:d4:cb:a1:16:a6:bf:e9:2d:f4:c9:00:8c:17:
51:ad:5e:d7:05:1d:9c:3b:df:26:5f:dc:a3:53:50:fb:17:93:
43:a9:28:dc:72:b4:5c:ab:4b:7c:97:95:76:e2:89:e5:58:9c:
b8:4c:84:5c:4b:fa:8f:b4:9e:09:62:95:15:c6:ab:9f:40:0f:
a7:0d:70:65:53:46:13:d3:6e:2e:73:df:4c:1b:fe:ee:16:df:
90:02:77:15:a9:19:89:a3:fc:66:20:06:0b:e4:1e:a8:ad:32:
ff:13:f3:30:d1:17:f8:6b:2a:3b:27:e8:08:06:9a:2f:7e:ed:
31:7b:ce:a2:d7:4c:e3:c6:a1:88:cf:9d:bd:a8:16:5c:63:32:
c9:2b:22:9b:ba:03:e7:db:5f:52:57:ae:e0:9e:bb:54:21:ce:
59:81:20:e1:5c:f6:0a:7c:50:91:1f:bd:99:e4:46:dc:db:be:
e1:1a:14:15:16:34:b8:91:29:40:1b:04:e5:8d:a5:d0:80:a7:
63:9c:55:8b:21:87:81:68:fe:06:3b:0c:0f:02:f7:ad:c6:c1:
d3:40:01:13:98:e4:0a:fe:50:7f:01:4f:95:02:7b:d4:26:af:
b6:a5:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:29:18 2025 by rpki-client