Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File: S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier: wTh4Z3T1spd4DGbGsiBgJKA2AQpd7S3zu6vNmQwm2Fg=
Subject key identifier: DD:89:95:F6:6C:17:73:AA:20:BE:CA:46:84:0C:A8:D4:45:0B:1D:C3
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer: /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial: 01965492D8C43808A70E7BB09BBDC4CED951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 19:00:31 +0000
Manifest this update: Sun 20 Apr 2025 19:00:31 +0000
Manifest next update: Mon 21 Apr 2025 19:00:31 +0000
Files and hashes: 1: Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa (hash: reqjwr/lIQUNR5CfmDP6LbkF/9R8ba/CN2hm8CCraWc=)
2: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: zv1BnGvon30kEb7dxIUwRq2ZGXeWJSLQVrC9X3tnQo8=)
3: peuDJmf6zM6U61VIEEyh_v80gok.roa (hash: Wogbvdr+avtRUDbVrcdv31PQBFMPbgQzhKkNxPsoSfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:d8:c4:38:08:a7:0e:7b:b0:9b:bd:c4:ce:d9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Validity
Not Before: Apr 20 19:00:31 2025 GMT
Not After : Apr 21 19:00:31 2025 GMT
Subject: CN=dd8995f66c1773aa20beca46840ca8d4450b1dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:32:50:1a:e6:e9:5e:b1:b3:40:4f:87:48:
4a:74:1c:d7:94:18:ba:91:1f:96:82:fb:c8:49:ec:
f0:01:22:38:8a:21:17:2d:d8:33:ae:47:f2:1d:aa:
8d:2b:0c:31:a6:c7:d4:28:e4:cf:b6:eb:cb:14:22:
91:ad:de:b2:d5:25:bb:18:14:2d:49:16:37:54:c9:
f9:b3:4e:1f:1e:92:c4:65:67:3e:08:53:d2:db:20:
4e:b6:1c:40:ed:7a:54:b5:6b:92:e8:70:db:45:12:
20:8e:25:41:e5:bf:75:65:f0:33:2c:6f:62:32:0e:
7c:5f:ad:6f:b1:d9:b1:db:cc:33:15:17:72:ec:f2:
8c:0d:f5:0d:a1:82:39:4f:6e:0b:8c:3f:18:4a:ec:
1d:b9:16:19:d3:ab:f5:c1:33:75:a4:6e:cd:7b:2b:
9a:12:86:e1:8d:11:b0:31:5f:73:8b:90:1f:25:fa:
a7:2e:03:a1:23:91:e1:47:2c:c2:0b:2a:ef:8e:70:
a1:43:24:c9:99:df:67:99:c3:9f:39:85:a9:00:ce:
5a:ea:7b:f5:ec:b1:35:80:f1:bf:92:a9:63:3c:58:
a7:f0:f4:39:3c:3e:71:8d:25:a9:86:ad:3b:31:0d:
92:00:ad:6c:9f:87:37:8b:aa:10:f1:cc:a5:9a:41:
db:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:89:95:F6:6C:17:73:AA:20:BE:CA:46:84:0C:A8:D4:45:0B:1D:C3
X509v3 Authority Key Identifier:
keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c4:fe:2e:a2:80:fb:84:08:a0:04:1e:cf:eb:a9:37:cc:f1:
79:c3:3c:a9:ca:51:55:c3:6f:87:ff:a6:ec:e5:fc:9b:ad:63:
68:6a:9d:d1:e7:40:04:84:12:ae:73:3f:26:9e:1f:33:c9:3e:
1e:69:7a:60:9c:b0:8d:c5:e8:c3:83:f3:63:15:52:75:7e:55:
9e:8b:70:9c:9a:d4:66:c0:45:53:44:72:86:50:fc:02:b1:a0:
44:67:3a:b6:8c:75:ee:ee:1b:88:b1:cc:53:9e:15:55:04:2e:
e8:16:6e:d0:05:1e:7f:94:df:dc:9b:8f:68:7e:89:83:d8:66:
3e:07:75:e3:83:01:41:ff:60:7b:55:c9:4e:d4:71:f9:fb:29:
fc:d9:c7:35:58:8d:c0:89:7b:9e:9c:78:7d:50:1e:ea:2c:e7:
37:80:5f:54:04:03:4a:88:11:24:69:d2:75:e0:c1:df:97:f9:
c0:e6:bf:6d:6e:fa:0a:d3:0a:51:d2:ee:db:47:4a:55:05:61:
fc:3a:f1:67:aa:f7:51:d9:44:30:d7:11:b0:74:fe:f2:2a:85:
95:f6:14:64:59:84:93:87:4a:ed:7e:32:10:6a:f5:76:9b:b0:
d4:5c:71:d3:1b:a4:15:33:ea:9f:3c:6d:5b:48:18:6b:62:c3:
02:23:d0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:35 2025 by rpki-client