Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: VV5eLIt7kC7MP7x9sLD7qZdf79jTCCmEVa11sw0w398=
Subject key identifier: D1:34:F5:21:2C:F5:24:9F:25:7E:EB:59:90:71:07:17:6E:B4:F3:64
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 01965424C98E5E654A21CCF556AE125D0346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 17:00:19 +0000
Manifest this update: Sun 20 Apr 2025 17:00:19 +0000
Manifest next update: Mon 21 Apr 2025 17:00:19 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: P795rww3lTcBRZVOrsy6ecTPJOXBBHhNrRhIMGXsQPc=)
2: giZEtebKwrV_K5a1acLqZif6N-k.roa (hash: lzFFffl4lpHRD7ZMSU5Ky5FbKZMuom72Ko9x5UDmCAY=)
3: r2MDM9YmqLIjylrH2WoKfJ8F-hk.roa (hash: 5oJl1RSDkKpv/NrAOtgSj/GjDfrDxGm50iGVTH3ViuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:c9:8e:5e:65:4a:21:cc:f5:56:ae:12:5d:03:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Apr 20 17:00:19 2025 GMT
Not After : Apr 21 17:00:19 2025 GMT
Subject: CN=d134f5212cf5249f257eeb59907107176eb4f364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:ff:05:dd:33:d4:87:b1:80:88:a6:22:cd:
a1:fc:a9:7f:bb:55:47:69:6e:04:dd:d7:9f:fa:83:
bb:fc:11:ce:a0:dc:dc:8d:2a:57:bd:29:00:ae:00:
e8:6d:1d:c4:4e:fd:42:21:8c:c1:3b:f7:70:da:11:
95:ab:e7:0d:87:d5:be:94:e9:67:c6:cb:6a:f5:b2:
01:8f:39:81:6a:ba:a2:ca:d0:b6:10:9b:e8:29:44:
0e:3c:49:19:f4:67:ee:73:c5:a5:40:ce:c1:a0:96:
0f:51:6d:11:0c:f6:ad:35:81:ef:1c:6d:db:54:ee:
aa:99:ff:1a:87:89:05:4e:11:db:5a:f3:ec:04:7d:
e4:ef:68:d9:13:55:ee:6c:5f:29:03:32:a1:9a:2f:
8e:fd:a6:6d:0b:78:5a:e3:66:04:34:8b:1b:dc:e5:
c4:02:18:7b:67:5c:5c:fc:f4:4d:dd:55:0f:5c:66:
aa:c8:c1:9d:96:70:35:db:89:7b:1e:d4:03:ba:a2:
89:73:ef:24:ea:e3:e3:62:db:fc:b3:27:c1:75:a3:
69:ef:88:e3:ba:71:91:ed:c0:2f:ed:c0:ba:72:7b:
03:90:70:8d:a0:0d:57:49:f7:d8:d0:77:c5:80:50:
34:69:0d:06:6c:11:3e:a0:9f:d6:38:7b:d1:d0:c1:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:34:F5:21:2C:F5:24:9F:25:7E:EB:59:90:71:07:17:6E:B4:F3:64
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:47:b3:49:75:d1:1c:0b:50:c6:38:3a:b6:af:62:78:06:ea:
b0:00:1b:d0:e3:69:0e:02:2a:06:32:9b:44:1c:c2:04:f0:32:
74:e5:ef:30:8b:32:74:e4:60:39:b8:0f:1e:eb:62:06:89:d5:
e8:61:92:4f:e7:35:4f:cd:91:81:ef:7c:0e:14:51:bc:d7:dd:
81:21:6d:ca:da:b2:70:fb:37:90:ee:5c:e1:67:c1:60:93:4b:
3f:fe:cb:8a:49:95:31:7f:d5:fb:d3:a9:91:ff:90:c6:15:ee:
c0:b8:c3:91:6a:e6:71:8a:b4:9e:e7:57:90:53:87:f4:75:82:
4b:0e:de:f9:0a:75:67:66:c8:9b:6c:b3:0a:e3:8b:fd:e1:74:
e6:22:d2:1c:b6:e4:f0:e8:c2:e7:9c:41:c5:a3:cb:df:d6:3b:
85:ef:19:96:ad:7f:d7:db:3d:5b:13:3a:01:14:ba:90:ce:7b:
3b:92:01:36:ae:85:79:cb:e9:8f:25:1e:58:a7:cf:de:5f:62:
e3:84:32:7e:22:36:38:2e:e9:11:f4:89:86:f2:65:40:3d:26:
2d:24:db:8a:16:c7:ba:37:8b:79:dc:a0:da:84:2a:d0:88:0c:
7e:ef:4f:6e:b6:31:61:ee:b0:eb:34:78:0b:6f:89:7e:67:d3:
7d:bd:31:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:25 2025 by rpki-client