Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
File: MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json)
Hash identifier: LF5RQG2s89K/FqBmGefjPHTJn2IuJ6zEi5StOlfraS8=
Subject key identifier: D3:C9:D5:C1:51:31:B8:43:59:11:8B:B6:18:E4:FD:58:C0:EA:86:43
Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Certificate serial: 019652368987D6AE361EC6C22970DA19532E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 08:00:27 +0000
Manifest this update: Sun 20 Apr 2025 08:00:27 +0000
Manifest next update: Mon 21 Apr 2025 08:00:27 +0000
Files and hashes: 1: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: PvQvxxrzESGdxZ+4OVitJuXPijWQ+UEJzwaqUkSr6TM=)
2: uvD1NcvE0sPpTuXNxuhcQ5fPB6Q.roa (hash: OX3lDi/3JYwmJY7qneRsBmTQJvJ1wj5rMRdXng4YNi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:89:87:d6:ae:36:1e:c6:c2:29:70:da:19:53:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Validity
Not Before: Apr 20 08:00:27 2025 GMT
Not After : Apr 21 08:00:27 2025 GMT
Subject: CN=d3c9d5c15131b84359118bb618e4fd58c0ea8643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:f9:52:d1:e2:f3:77:69:ee:74:fd:c2:29:
2b:c5:ce:2f:b8:d9:0d:58:c7:b8:af:b1:de:f2:c7:
cd:69:66:43:b8:54:05:7b:0d:96:bc:df:88:6b:e1:
a7:52:48:da:c8:d6:88:5b:98:1d:5e:62:3f:5f:9d:
51:f5:af:69:5c:5a:50:74:28:54:d2:31:f5:bc:7d:
a7:b7:dd:69:c4:21:2c:0f:16:c3:48:5f:aa:09:61:
de:1c:2b:7e:eb:7b:aa:6e:c9:90:51:84:84:06:93:
6f:5f:9a:8e:1f:bf:fd:2a:e4:db:58:ca:59:83:49:
c6:2c:9e:b6:24:1f:e4:d2:a8:46:f0:d8:c4:9c:fd:
ab:c9:2a:ad:95:fe:1d:74:4d:33:47:c5:e1:89:6e:
db:81:f8:5e:d6:d6:99:81:a3:8a:74:b4:54:7e:32:
9a:56:f4:31:62:77:f4:6d:20:98:e3:1b:33:4f:1b:
72:a4:db:cc:2f:31:9e:26:e7:47:bb:ea:c6:17:06:
79:54:5b:48:cb:4d:78:24:3e:90:fd:bb:5e:aa:ff:
a0:c0:74:54:fa:cc:bc:33:b4:52:18:8a:ee:c8:7b:
fc:6f:76:bb:4c:0b:66:a8:0b:6b:e7:22:4f:68:51:
fe:d6:79:2e:b5:22:a4:ed:ef:29:bd:98:01:16:22:
55:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C9:D5:C1:51:31:B8:43:59:11:8B:B6:18:E4:FD:58:C0:EA:86:43
X509v3 Authority Key Identifier:
keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:28:4e:ca:f3:e8:ba:4b:70:3d:61:a3:ad:f2:0a:f7:b0:07:
3f:3d:2d:98:ef:f6:ad:82:73:84:96:70:a0:54:01:1d:82:5a:
78:67:ae:12:ba:a0:c0:5a:a1:23:0d:46:56:d9:84:1c:9f:fc:
60:d6:60:fa:3a:ae:c8:27:bf:b8:9c:83:5d:c2:8e:d6:82:50:
4f:e0:82:b8:90:20:e3:63:fe:e9:89:9b:d7:07:03:ec:f5:17:
82:9c:57:f6:e1:9f:05:c6:5a:f4:44:88:92:8e:b9:d3:d4:e3:
13:4b:8c:6c:08:54:22:75:df:1f:b4:9d:01:37:21:80:21:cc:
51:0f:40:1b:94:02:35:7c:44:77:f9:b2:cd:05:8d:b4:63:72:
b1:d3:95:7b:2e:70:04:a3:ac:b6:17:e7:9a:f2:90:b2:1d:61:
a3:79:fa:8c:57:89:a7:1b:e1:d7:40:59:07:af:9a:3b:73:27:
26:8b:d3:e6:59:63:00:30:2e:96:2c:8a:52:13:5a:ab:e0:81:
07:7e:4b:1b:f0:44:9b:0f:22:d2:1b:f3:dc:af:48:a9:83:89:
d3:7b:6a:6b:14:43:56:1a:3a:d4:c3:75:b9:c3:94:fc:67:eb:
02:0d:05:23:c6:88:83:90:12:f3:53:18:d0:25:b6:a6:de:ca:
f8:94:62:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:18 2025 by rpki-client