Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier: IhPgd51vQiaGJiqk0uKNpq7WrVtjRuiGguhEZAO3pgo=
Subject key identifier: 4B:D7:E1:A0:38:3E:D6:3A:D7:76:E4:1D:A6:EA:23:77:88:CF:0F:A3
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer: /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial: 01965537658E610C991E8A33B5A27C7FB28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 22:00:15 +0000
Manifest this update: Sun 20 Apr 2025 22:00:15 +0000
Manifest next update: Mon 21 Apr 2025 22:00:15 +0000
Files and hashes: 1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: cODCx3swVLcU/mq2Ig+y6ziJl+Uo+1yHXRObK1yM20c=)
2: A8TukvgDm2_mAvbO8Qh2ldXZd9Y.roa (hash: /JIMryvixQaluB5n97mezkD1EyPJinxMba0OGSdEKhE=)
3: vP5uRCtVJRUJyzhFaWsuhTzkTw8.roa (hash: y1OFWyB3EPXzoJcEAkwbjykFdh6ALTnHBPCo+2KwzSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:65:8e:61:0c:99:1e:8a:33:b5:a2:7c:7f:b2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Validity
Not Before: Apr 20 22:00:15 2025 GMT
Not After : Apr 21 22:00:15 2025 GMT
Subject: CN=4bd7e1a0383ed63ad776e41da6ea237788cf0fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:f7:00:3a:aa:d6:24:0f:2e:4f:53:df:06:
22:c7:89:42:b1:61:78:e3:18:ca:ac:9e:e1:c3:8a:
4d:14:7f:54:8c:d6:d1:42:0f:89:36:69:07:40:33:
fa:2e:35:e9:e9:97:a3:d2:1f:40:f2:1d:2d:ff:4b:
76:8e:36:60:d4:38:af:98:10:da:f3:2f:ba:b2:db:
48:f8:57:c3:3b:b2:ad:61:4f:00:e4:70:df:21:9b:
78:88:a8:b6:8f:e9:26:04:f7:ff:ff:b5:e0:e9:78:
21:6e:45:f8:f4:2b:a0:d4:93:c5:4b:ce:91:54:f8:
08:26:24:9b:c5:3d:29:bd:4f:f2:bb:d4:1d:a5:91:
a2:8d:33:26:df:03:1b:d4:d9:f0:e7:38:d6:c8:05:
78:fb:70:3b:2b:b5:de:ac:56:d9:1e:2d:18:b0:68:
06:a3:ef:b6:c9:f1:ef:22:94:da:2e:5d:f0:35:23:
fa:9d:64:a7:9c:9b:fe:69:02:2c:61:16:60:69:e9:
6d:8b:ec:48:c2:66:e4:d4:6e:6e:98:3e:73:05:09:
07:a8:17:9e:3a:26:0d:7b:b2:08:3c:c8:fd:6b:75:
c3:ef:75:16:a8:39:4b:d2:ac:af:3c:16:5a:e7:32:
e7:6d:99:53:f4:e5:2e:bd:45:15:3a:36:d7:f0:6e:
2b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D7:E1:A0:38:3E:D6:3A:D7:76:E4:1D:A6:EA:23:77:88:CF:0F:A3
X509v3 Authority Key Identifier:
keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d3:91:d1:2d:c5:2c:f3:a3:51:64:7f:47:a4:ab:3d:b6:fd:
bf:94:1f:bc:ed:52:4b:fa:30:5f:b4:52:d4:d5:03:0f:ad:c0:
99:17:b7:5e:7f:84:1e:5f:aa:28:3a:26:b7:0f:03:3a:fd:2b:
d1:3b:41:ef:f1:94:ea:8f:77:34:88:36:ac:61:13:f4:54:26:
33:33:d2:4a:16:0f:5d:bb:a9:19:a9:59:df:82:9d:2f:a5:a1:
ed:77:ef:d3:66:43:be:ad:82:99:34:1b:33:56:c8:c2:81:1f:
ea:a2:f8:65:45:d1:eb:81:a8:87:a3:41:84:2a:60:27:0a:4d:
91:fe:74:2b:f6:bc:bc:50:e8:24:6c:8c:2b:40:54:07:ba:e6:
36:f9:3d:ee:9a:e8:e6:68:54:85:82:31:02:d4:ba:e3:27:bb:
93:11:77:40:32:06:b2:e1:82:f7:e2:c9:b6:f7:b5:f0:b4:3f:
91:a9:37:38:04:78:4f:b2:c5:79:33:c8:cb:28:49:9a:37:ef:
58:a6:12:96:9e:12:af:ee:50:fb:5a:ba:60:98:ae:60:11:63:
9b:3c:94:13:df:43:f5:e1:54:b9:a5:75:bc:ee:72:3f:4e:9f:
8e:d5:1c:a3:d9:d8:8b:2f:c2:3e:36:fa:d4:12:5e:19:f7:ed:
af:db:35:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:16 2025 by rpki-client