Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: sK9PDP5JyZ8rJ/SZahhPviMYXtZmsYaS4XCj3rwxpMc=
Subject key identifier: 04:47:A1:A3:36:28:B6:A6:DB:60:CA:EA:09:16:C3:3D:29:01:E2:04
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 0196477C4BAE382658C3903F0060229D5BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 14FC
Signing time: Fri 18 Apr 2025 06:00:49 +0000
Manifest this update: Fri 18 Apr 2025 06:00:49 +0000
Manifest next update: Sat 19 Apr 2025 06:00:49 +0000
Files and hashes: 1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=)
2: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=)
3: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: 1UFfJ//Gex+6FAviLbto4JxN1mQDWkyUJZUbo/hiCQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:7c:4b:ae:38:26:58:c3:90:3f:00:60:22:9d:5b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Apr 18 06:00:49 2025 GMT
Not After : Apr 19 06:00:49 2025 GMT
Subject: CN=0447a1a33628b6a6db60caea0916c33d2901e204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:7e:75:4e:c7:90:bd:1e:b7:3c:8e:8b:6e:
19:07:e0:00:e1:e5:92:98:46:2d:cd:42:71:b8:c9:
85:fd:78:17:22:1f:cc:14:a9:5d:4a:30:3f:e6:e2:
38:be:ca:69:74:1d:e6:30:f1:82:fb:7d:bb:b6:41:
1b:18:69:56:7a:5d:6e:50:9e:25:a7:9d:e7:69:f6:
bc:6a:8a:ea:ea:60:03:85:ae:a3:f3:21:6e:4f:34:
62:4d:1f:83:43:0e:09:df:fe:ba:6e:4c:ab:2d:5c:
f3:26:f3:4e:fb:c2:1c:4a:b7:e0:71:fb:43:d2:d5:
e5:f6:44:6d:ae:b9:76:ed:42:95:be:da:f6:a9:b3:
9e:2d:4c:db:d2:c5:a6:c3:4d:1f:d9:76:01:db:2b:
a5:9b:84:92:bf:97:2a:20:08:ca:4b:b9:e5:f8:2a:
7d:c1:ed:3d:7c:73:7c:87:d4:09:cc:b1:2d:0a:37:
35:10:db:78:8a:22:4f:95:74:e3:09:5c:cc:6c:18:
7c:c6:a5:ed:8d:cb:6f:26:1f:c5:81:7a:6a:26:e6:
4c:27:0b:1e:7d:4d:45:26:b3:81:fc:2e:95:dc:ab:
18:2c:bc:69:79:76:97:7b:29:83:3a:c6:c1:51:79:
cb:f1:9a:82:30:9b:05:ba:83:eb:f8:54:fb:09:88:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:47:A1:A3:36:28:B6:A6:DB:60:CA:EA:09:16:C3:3D:29:01:E2:04
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:dd:a9:a8:2f:d7:49:2f:03:79:5c:33:66:f0:6c:82:c7:dd:
ed:6c:2c:39:3b:a5:ab:6a:8a:79:7a:ab:54:59:aa:0a:b1:ee:
88:b8:53:dd:95:68:d7:b6:f6:a3:9c:ae:b9:b3:33:44:d2:93:
2c:3c:ae:bf:56:c8:bf:ce:2d:1b:54:2e:8f:ca:f3:d8:d3:43:
ec:c6:30:1d:da:d2:68:32:5a:23:3d:78:f7:42:2d:9e:b8:59:
8b:c8:a1:4f:1a:0a:30:c5:06:21:f2:00:ab:d2:3b:55:62:c8:
74:c2:dc:68:f4:4f:6d:62:2a:b4:bc:f8:69:72:15:a7:61:57:
0e:1a:ee:75:f6:f0:4b:e0:7e:f2:69:a3:3c:b3:35:47:cc:e2:
fa:62:ee:23:d2:ab:36:a3:99:05:cd:c2:ab:6c:fd:ee:38:36:
5b:1f:81:eb:9d:98:f1:47:6c:3d:5d:d2:b1:0b:ea:b3:83:44:
a6:b7:f0:1c:d7:23:15:80:8b:c3:00:28:41:f9:98:ba:bd:d5:
00:27:ec:18:c2:da:99:28:50:23:4f:70:19:76:5b:76:fa:94:
93:77:56:ab:dc:6e:2e:11:91:7b:56:7d:04:11:57:52:9a:66:
fa:3b:7d:a5:31:e3:6a:a8:81:db:b0:19:13:a0:39:1b:8a:2c:
55:69:f1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:18:11 2025 by rpki-client