Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: D/QelIs1JvdT0K245LGkatkD8tk/4K7ltnJ6zlvW+lQ=
Subject key identifier: C7:F7:A8:E1:A9:0F:88:43:19:6A:15:F4:A2:CC:6D:41:48:92:6C:D1
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 019635AD74C3404C6F38CA6812B408AFDE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 14EE
Signing time: Mon 14 Apr 2025 19:01:21 +0000
Manifest this update: Mon 14 Apr 2025 19:01:21 +0000
Manifest next update: Tue 15 Apr 2025 19:01:21 +0000
Files and hashes: 1: 3TsgJTCqJzOcEWU1D_eLkn9vlVQ.roa (hash: FocquAr/i2n2K968hOeO0r6QOp/B6G9WWrm69jbwUbg=)
2: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: gyMCi7Sqxd1MV5+IG/8W0yg8GQKJa4pdc0jnkA1omk4=)
3: XfddXSazKRwlAti_xB3GX9aF4dA.roa (hash: 6Q++0e98qDqGZws++WyKl8Tb8aXZP/cVoTXv/5uSSrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:ad:74:c3:40:4c:6f:38:ca:68:12:b4:08:af:de:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Apr 14 19:01:21 2025 GMT
Not After : Apr 15 19:01:21 2025 GMT
Subject: CN=c7f7a8e1a90f8843196a15f4a2cc6d4148926cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:6c:47:2b:88:f2:62:66:a8:a1:8c:a7:a2:
bd:58:d1:da:2e:ed:17:9a:31:b0:dd:ff:b7:98:ba:
a4:fa:6c:0f:af:cb:05:b7:de:ee:3b:b9:8c:38:ca:
01:ba:3a:21:8f:a6:26:d8:a2:95:bd:ee:13:fb:fe:
b8:94:13:55:45:58:7b:5f:d4:28:6a:88:7b:52:89:
28:6c:24:b3:c9:04:59:b5:e2:2b:04:a8:73:a5:4a:
dc:59:b6:89:b2:d7:6e:4a:e2:65:25:d7:31:ae:4d:
c4:7a:e7:dd:9e:00:ae:5a:61:19:5a:20:cd:48:37:
84:57:13:ae:c6:ad:35:b6:b9:23:5b:a3:2a:63:d4:
49:29:9f:80:9c:35:c8:ad:f6:d3:cc:0e:2f:ad:77:
93:bc:83:2f:4f:ee:63:b5:fe:a2:cc:0e:25:19:02:
5d:3a:91:5f:9d:71:b8:19:30:ff:57:c2:67:3e:3e:
c2:f0:d9:df:e7:d5:53:16:59:bd:ab:cd:04:ee:2c:
99:c3:74:5a:7d:1b:b8:c3:59:d6:10:bd:56:88:51:
ab:28:fd:9e:fd:44:f9:0e:b5:57:bb:b8:64:a0:d6:
70:f0:65:2e:5b:79:21:c9:94:a0:2a:08:f4:72:3a:
60:91:fe:6b:90:23:91:24:62:b1:aa:d0:4e:0a:bd:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F7:A8:E1:A9:0F:88:43:19:6A:15:F4:A2:CC:6D:41:48:92:6C:D1
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:06:57:85:56:2e:b5:f1:00:22:83:51:b3:b1:dc:62:94:20:
57:12:cd:a2:bd:87:6d:8d:b5:c6:6e:f3:57:fb:28:ea:da:51:
a4:78:3b:f6:f3:44:14:14:df:c7:73:c4:9a:9b:a1:55:db:7e:
d5:98:68:8b:d2:a8:8e:bd:7f:33:5d:75:1c:21:e2:fc:93:e1:
68:f1:b2:f2:80:57:80:5e:65:2c:ff:32:7b:6c:13:80:87:f5:
7f:56:d9:69:26:e4:a6:c5:a1:4a:2e:13:4e:46:13:0d:70:28:
e7:c0:be:78:c4:df:79:d2:46:3e:f0:3e:5d:1f:8e:a2:98:39:
09:05:b0:8f:68:03:39:57:a5:c4:fb:dc:58:1e:1e:81:bf:c7:
6f:d4:8c:73:bf:d0:60:b2:0d:7d:a1:c4:05:36:dd:7f:d1:d3:
be:cf:84:24:b3:a2:9d:6d:3e:16:d6:4f:ec:ed:8e:1c:cd:8e:
22:52:45:89:76:3b:2a:85:53:fb:6c:2b:ca:f8:40:7b:3c:32:
68:d9:76:4e:7b:cd:37:3e:61:d3:1e:2e:02:1f:1d:3c:88:6a:
fc:9a:ce:73:e2:c0:a0:b5:45:ef:c1:08:59:99:4c:3c:48:66:
ed:ed:11:3c:85:dd:49:2d:54:ba:34:c0:31:10:03:ce:8b:d4:
ff:fd:0f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 04:32:12 2025 by rpki-client