Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: JVmmf68orN1XoAsXJhq/M9z5rNFEjEm6avHBydWaMXc=
Subject key identifier: FD:3C:F8:21:63:5F:69:6F:A4:20:72:8D:63:19:2E:A2:D0:59:61:86
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 019630BDE7F0DAB3D27E1B01474FA5D9AB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 14ED
Signing time: Sun 13 Apr 2025 20:01:14 +0000
Manifest this update: Sun 13 Apr 2025 20:01:14 +0000
Manifest next update: Mon 14 Apr 2025 20:01:14 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: laxUpiCTYUsrCw5U/zvbQ8uvgEDA+7NZJikufk5vstU=)
2: YVQzd6PcqiODUsbYmUonrXOMiW8.roa (hash: UXmPQNw2cgJnJveX2kfmMJ+ICGqK1YqsczZUPC4FYUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:bd:e7:f0:da:b3:d2:7e:1b:01:47:4f:a5:d9:ab:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Apr 13 20:01:14 2025 GMT
Not After : Apr 14 20:01:14 2025 GMT
Subject: CN=fd3cf821635f696fa420728d63192ea2d0596186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:3d:4a:86:60:2d:47:9e:9d:a5:2e:dd:f7:
0c:07:23:b7:09:c4:5d:b6:b5:e0:f7:92:fd:ef:d8:
fd:88:0b:19:55:c6:8c:2f:73:f4:c4:0a:42:35:68:
6b:a2:10:d4:03:43:f0:d6:1e:b7:b7:54:72:9f:bc:
af:e1:6e:35:28:05:fa:f8:b9:7c:4e:eb:17:e1:40:
65:7b:a2:e0:62:43:fa:bd:b1:1b:ce:fc:15:34:be:
dc:2e:ff:18:a9:3d:20:b9:95:c4:61:3f:55:93:f5:
b4:dc:bb:b7:a0:68:e4:fe:9b:b2:8a:e5:7d:6a:09:
01:44:31:2e:ef:a2:c2:6e:5b:19:bd:d9:b4:0b:fc:
23:c2:2a:b8:56:95:76:84:17:de:32:ca:13:3b:74:
e3:7c:ae:83:37:f6:90:3f:f3:cf:6b:5b:7d:e9:a1:
57:db:bb:bb:4d:d9:36:15:09:31:3c:18:c3:87:d6:
17:ec:a4:26:83:b8:fa:1f:ac:3f:d5:e6:3a:54:22:
a4:fc:14:f9:00:ed:7a:30:09:0d:ab:64:97:19:fe:
f5:fc:7b:6d:66:71:18:f6:50:60:5b:37:99:a2:9e:
a4:82:1f:a8:43:a8:ae:2f:41:2a:15:db:96:0e:6d:
55:57:52:a6:2b:78:8c:60:71:15:54:dd:26:97:d7:
44:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3C:F8:21:63:5F:69:6F:A4:20:72:8D:63:19:2E:A2:D0:59:61:86
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ca:26:45:ea:e7:10:f5:5e:4e:d1:a6:39:92:28:b9:93:86:
ac:6c:3d:b1:60:5d:7a:b4:3e:00:a0:05:da:fe:9f:cd:5f:10:
21:f2:4b:16:bc:f0:6f:c9:f9:e7:b4:55:cc:e5:44:9a:5b:15:
a5:bc:ee:15:29:27:cd:96:89:20:e4:fe:31:f5:00:08:db:9f:
e2:2a:ce:00:a4:36:ad:26:e0:40:53:cc:45:ee:0e:73:66:1e:
0c:d7:c1:4d:f1:67:d9:a1:c5:1c:5d:58:c3:44:1f:07:4b:d6:
22:12:62:86:4d:bf:ea:42:ba:35:f0:83:e8:32:01:f1:cb:82:
3a:48:90:a1:19:a7:19:36:44:fe:e7:17:74:3e:0e:a6:f7:b8:
8e:5b:b5:21:79:ae:21:3b:d5:8b:6b:8d:f1:db:57:81:f3:b4:
df:64:41:d1:d7:bb:2a:8b:e7:55:06:69:da:6c:20:d2:23:2a:
ef:ba:2b:9f:fe:dc:1e:c7:0b:b4:77:8d:47:0d:1a:d6:9e:f1:
22:c0:ef:04:72:fd:08:c2:36:1a:17:58:d2:ae:00:fe:09:42:
79:d4:96:a5:1f:3a:00:80:82:fa:d1:b4:db:1c:a4:59:8b:0e:
6b:ee:ca:db:49:4c:15:4d:bb:12:5f:d0:a6:f7:25:f3:0c:d6:
ce:1f:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:46:48 2025 by rpki-client