Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: 6zhxE5fyzG3fb6ha3u6KwZz2aSN2wvUsc3ayxtsUXHA=
Subject key identifier: 9D:C6:49:0A:C9:E7:84:E6:FA:D7:C0:34:19:91:17:75:65:B7:7E:75
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 0196594B503388FFE151A8105064698AB124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 17:00:30 +0000
Manifest this update: Mon 21 Apr 2025 17:00:30 +0000
Manifest next update: Tue 22 Apr 2025 17:00:30 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: /bM/axwju56LmFbZptWmqPXyNFastSGymgSi/2B4ya0=)
2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:50:33:88:ff:e1:51:a8:10:50:64:69:8a:b1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Apr 21 17:00:30 2025 GMT
Not After : Apr 22 17:00:30 2025 GMT
Subject: CN=9dc6490ac9e784e6fad7c0341991177565b77e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:4e:b7:32:df:86:b1:eb:ea:0c:b9:ea:ba:
b7:1f:27:ec:04:a9:3e:1e:b8:ec:fa:64:7a:6b:b8:
f1:53:4e:77:3d:0c:00:50:a1:73:b1:af:ea:50:6b:
f4:14:06:81:b5:c2:e4:e1:66:2a:78:90:d9:8c:c8:
7f:13:8e:30:d9:ae:f7:b1:41:f2:67:13:a5:91:29:
d3:99:2c:23:e5:23:3c:c6:0f:da:59:d0:63:da:cb:
da:3d:91:7c:07:bf:bf:79:8e:72:db:b7:ce:c2:fc:
6a:4e:91:10:56:45:81:8d:29:57:35:c5:92:b6:ed:
15:89:a0:d8:46:0a:7f:c4:cd:b0:a6:f7:26:86:3f:
e9:88:a3:63:3f:97:d2:fc:a1:51:cf:ff:f8:2f:f2:
13:ad:16:ce:c4:44:27:7a:3a:23:b3:bf:42:a0:91:
ce:53:4a:ac:00:f4:64:c7:de:70:f0:18:1d:4e:87:
52:4c:c6:3f:6c:c0:d9:ad:96:83:16:1b:fb:b3:87:
9f:b1:e4:47:c2:74:be:27:86:52:59:46:94:f1:3a:
09:20:03:90:01:49:67:67:d6:79:8e:9f:61:5b:9e:
c3:62:fc:20:a0:cc:06:78:6f:9b:de:14:39:84:be:
fa:bd:79:c9:6f:06:5c:2e:e9:82:98:d0:e8:06:32:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C6:49:0A:C9:E7:84:E6:FA:D7:C0:34:19:91:17:75:65:B7:7E:75
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:66:50:2e:e2:2e:c3:d8:b9:82:ff:61:ed:22:1a:1a:b3:8c:
2d:a0:e3:8a:4b:ed:09:33:11:98:07:2c:24:f1:d2:87:68:5c:
75:77:b7:c7:51:28:de:9c:bf:96:ac:1a:5a:75:ac:3c:8f:ac:
2b:a6:58:6d:36:1f:16:bc:c7:14:2c:ff:06:7f:a3:ff:86:87:
75:19:dc:b0:7c:bb:bb:61:6c:53:ca:ef:e2:db:4a:ee:b5:e0:
3b:05:d6:bc:13:be:8f:e8:fd:94:63:e2:47:64:a2:50:5e:18:
82:9f:f6:a5:d6:3b:d2:60:f9:2f:7e:34:88:b5:17:80:cf:2b:
b8:2e:9a:9c:7c:ed:c3:2d:d6:c9:84:92:fb:f0:05:bb:94:c1:
92:08:db:6a:ab:7d:70:7d:e8:31:64:37:2a:ab:6e:f5:87:6c:
4a:e5:40:a2:d5:19:2a:fb:94:1c:73:90:7c:19:b8:02:55:93:
b0:66:a9:a7:ab:38:5a:81:3e:fb:d9:59:18:92:42:9c:ab:25:
84:51:2b:f4:07:53:a6:67:f0:44:d3:65:89:ea:d3:f7:21:df:
24:fb:01:05:47:d7:7e:4c:c0:db:37:c1:ff:e9:b9:62:71:c8:
16:6f:34:a1:bc:a7:3c:b0:99:e5:44:f8:7d:55:ec:8c:ef:24:
f6:b4:b7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:18 2025 by rpki-client