Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: f4tga0cqql/zcQJcvLK1WFJfbs70E/2DqDMyg/WQ/wQ=
Subject key identifier: 2D:02:50:D0:19:1C:FA:F0:6D:09:0B:F3:A4:4F:C4:7E:3A:E5:68:69
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 01965424F29E4FFF2F35CE1C0B991874BA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 17:00:29 +0000
Manifest this update: Sun 20 Apr 2025 17:00:29 +0000
Manifest next update: Mon 21 Apr 2025 17:00:29 +0000
Files and hashes: 1: BHvEiTbi4Pq6B9PpmT5f6n87vL4.roa (hash: s+QevCZ3wcDACFh+jWTrJPdapoQkuOB0iQkRIdmgUkk=)
2: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (hash: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: VtbBgaEnLV7u5Ak9q4qeU3Q2vyU2ZwNx4tIE/b7dsDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:f2:9e:4f:ff:2f:35:ce:1c:0b:99:18:74:ba:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Apr 20 17:00:29 2025 GMT
Not After : Apr 21 17:00:29 2025 GMT
Subject: CN=2d0250d0191cfaf06d090bf3a44fc47e3ae56869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:11:0b:44:fb:ef:47:09:26:7e:ea:38:7f:
d9:55:f2:52:f6:78:1a:05:9c:5b:5f:38:ac:41:3c:
80:82:df:23:e7:f1:17:2c:1e:dc:7a:ee:4b:06:80:
f1:27:e4:45:a2:ae:18:59:bd:1e:1d:6c:0b:58:75:
37:75:51:85:db:c3:31:69:0d:b1:5b:6b:80:63:32:
4d:e0:6f:14:e4:02:18:32:d9:09:a6:1b:71:a5:f6:
d5:25:2f:89:86:e2:15:84:27:c0:eb:83:02:7d:d8:
c1:1c:1c:a7:e9:4a:f7:92:d6:42:6b:7a:ff:ba:76:
5d:14:88:85:b8:5f:1d:c1:8b:ce:67:0e:b8:2a:75:
02:5c:22:f7:f9:7f:37:20:ab:fb:0c:ce:91:ec:86:
d7:44:9f:d3:1b:db:f5:d2:ce:72:0c:ee:b4:e2:fb:
1b:6c:3c:46:60:6c:69:43:f5:5b:a6:a6:2b:d6:75:
81:37:4b:7a:89:a0:df:e9:92:5c:67:f0:2d:28:a6:
d6:9d:71:34:11:92:c1:95:25:c4:99:87:17:b9:c7:
64:9e:64:3f:c1:35:a1:04:3e:a4:9a:94:ac:5e:01:
64:df:e0:26:6d:92:ef:f8:7a:5e:a0:e1:5e:3f:2e:
90:84:ff:34:93:2a:ee:18:ee:e0:15:1b:79:6c:30:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:02:50:D0:19:1C:FA:F0:6D:09:0B:F3:A4:4F:C4:7E:3A:E5:68:69
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9d:ed:c7:91:d0:2c:9f:93:20:5c:f6:6a:c9:34:9b:a2:f5:
15:c2:e0:a1:bc:8e:5b:dd:62:85:84:c3:6b:2e:d5:0d:6d:4a:
44:5e:02:77:e3:74:09:5b:7b:02:53:e6:17:94:de:ea:4d:b4:
16:f8:01:43:6f:a5:55:14:de:fd:64:54:65:92:ad:a9:90:2c:
b4:86:5e:0e:12:1b:eb:01:86:3f:02:e8:fb:72:3b:65:19:b1:
fa:13:a2:de:85:b4:f8:eb:a3:a9:5d:3e:48:76:21:ca:14:65:
93:18:02:6e:86:9b:e3:5c:1e:66:f6:4a:e0:24:a8:8d:e0:c6:
2d:df:74:3f:9e:3b:20:1c:8c:10:9d:c9:d1:b0:cc:cb:01:f9:
39:6d:66:27:ba:03:83:d5:5d:43:98:42:0e:91:fc:a5:29:df:
56:40:08:f6:1e:92:bf:d5:d8:5a:cd:24:b5:c2:e7:df:46:a9:
87:65:75:0d:5b:be:d2:d4:1e:8d:53:ff:39:cf:bd:92:0a:9d:
23:eb:74:da:81:10:c0:0d:ed:3d:29:8e:36:d4:b7:de:31:bb:
ef:de:5d:3d:4c:d6:2c:63:6c:5f:44:59:32:c7:cd:54:23:e5:
09:b1:85:da:5d:fb:8c:0f:76:cc:cb:89:a4:42:a3:f6:06:e9:
4a:76:39:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:22:21 2025 by rpki-client