Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: gfqI9FwgI2ZwBQeoudh5pgWHLVyydhAKox789cICrgk=
Subject key identifier: 02:4E:56:5D:AD:42:EA:64:F0:3F:8D:10:7B:A7:D2:C7:70:72:77:61
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 01958C97074C17966712579C696619EA02A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 23:01:02 +0000
Manifest this update: Wed 12 Mar 2025 23:01:02 +0000
Manifest next update: Thu 13 Mar 2025 23:01:02 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: Ixa8pbuDDHQoRYknyGPF2JgxfmTFUaMXGbpklY7uGn4=)
2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:07:4c:17:96:67:12:57:9c:69:66:19:ea:02:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Mar 12 23:01:02 2025 GMT
Not After : Mar 13 23:01:02 2025 GMT
Subject: CN=024e565dad42ea64f03f8d107ba7d2c770727761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:a7:de:db:79:33:f4:c9:a9:d5:9d:51:87:
c3:45:dc:fc:9f:59:77:7e:53:c6:ea:62:d7:cd:03:
c6:a8:14:fe:78:4c:91:38:e9:92:63:7a:e2:ef:00:
5e:5e:d2:5b:86:f6:be:53:6d:f9:97:46:21:d1:2d:
f5:8b:25:c1:19:21:de:2a:ac:bd:74:dd:bc:00:e9:
e3:e0:91:6a:71:38:2a:f5:9d:28:16:37:14:ae:73:
b9:2a:db:0c:47:89:07:46:40:eb:6b:ae:9f:3a:0e:
c1:8e:29:05:4d:9b:97:82:57:ed:68:5b:cb:d0:56:
4e:84:cb:f9:9d:39:f5:ad:c8:f2:f8:1d:dc:29:43:
66:85:b9:d6:79:da:af:1a:f2:d8:d9:ce:9d:da:14:
88:8e:41:d7:c1:41:50:66:e6:ad:72:53:62:2d:76:
81:e3:5a:f3:b4:dc:e5:3b:ef:b0:dd:50:dc:aa:65:
25:8a:4b:b0:3d:d4:25:f3:62:9b:2f:c7:0d:0b:57:
6c:08:27:48:41:86:27:f2:39:1a:14:ad:e2:85:56:
cf:8f:3b:00:89:92:c9:02:91:93:86:94:6e:74:fa:
54:d4:0b:eb:3f:a6:7d:5f:77:33:49:25:9b:c4:5f:
7c:9f:94:37:53:5e:c2:88:9c:a5:d3:ef:0e:ea:9a:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4E:56:5D:AD:42:EA:64:F0:3F:8D:10:7B:A7:D2:C7:70:72:77:61
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:60:fb:f3:dd:77:e6:30:49:5a:d4:05:49:51:46:47:2a:9a:
c0:dd:2f:c5:44:25:8d:c1:a9:0a:1c:4e:5c:90:50:4b:a2:f7:
4a:aa:ee:be:00:ca:bb:f7:72:9d:06:79:69:9b:f7:46:5d:96:
15:19:23:04:29:50:40:c5:c3:d4:5b:bf:e1:6f:69:da:64:99:
95:c3:c6:52:8c:4b:a9:d8:98:de:0a:ff:ae:38:be:6b:03:cf:
58:1b:fd:65:9d:2d:86:37:7f:e8:55:82:ad:07:dc:f2:5a:d1:
58:9b:43:b3:67:5a:cf:bf:c3:74:54:db:8f:9c:be:d3:6c:ba:
fd:38:e8:33:69:3d:8b:5d:46:97:56:b8:10:a8:68:dd:a3:44:
47:26:cc:ca:02:63:04:d0:04:87:6c:44:6b:4c:2d:cd:07:88:
d6:47:24:fa:97:ef:2a:75:d7:dd:67:9c:e5:ed:dc:af:32:19:
50:4a:82:c2:8a:8f:36:d4:4e:45:d9:56:0f:b0:f9:3d:34:22:
df:67:ef:2b:53:5c:c7:68:04:e2:23:6f:cb:a2:71:fe:79:b5:
dc:c9:60:9a:38:a8:6a:34:9a:b0:50:31:7c:32:e6:65:9c:d3:
b5:db:7f:38:11:4e:30:1a:0b:be:64:1a:3d:4e:ef:a9:02:96:
ce:f5:39:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:21 2025 by rpki-client