Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File: exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier: pYjaYI03d+TGCVB/ixXn7O4lsNRxa9lLppXyrzEe2Wk=
Subject key identifier: 9A:A9:8C:BC:27:C6:22:4F:08:AC:0A:2D:95:EB:40:91:5B:2D:3D:D9
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial: 01964D46FA194B83319F924E5351A9278D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 09:00:19 +0000
Manifest this update: Sat 19 Apr 2025 09:00:19 +0000
Manifest next update: Sun 20 Apr 2025 09:00:19 +0000
Files and hashes: 1: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: tt/HqjRwGyZyv2IBSUjEnmDGuUGQAmuk9Kui3ZHkY88=)
2: iUoNxOhwebXoe8b72BR2AhmpSeA.roa (hash: tWfhDKNLJhumUMuEB+92tFSBgGLOO7GXSiupWsvky5w=)
3: xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa (hash: NF3FvBakkmVr+pBAEq+awbP4Tn7Z+Cmnixhp8Jn6OBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:fa:19:4b:83:31:9f:92:4e:53:51:a9:27:8d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Validity
Not Before: Apr 19 09:00:19 2025 GMT
Not After : Apr 20 09:00:19 2025 GMT
Subject: CN=9aa98cbc27c6224f08ac0a2d95eb40915b2d3dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:4a:76:60:fd:77:5e:01:96:67:4b:2f:7e:
6c:68:6d:f9:9a:53:be:81:46:45:14:ca:33:58:4c:
a4:8e:c6:c9:4d:b6:84:1d:88:f6:ab:52:ae:34:66:
4a:9d:31:01:c9:d2:b4:dd:2c:7e:17:d7:d9:9d:15:
40:49:cf:4c:35:eb:99:23:65:90:c2:13:ee:4e:76:
de:d2:49:f8:c8:e3:7d:c7:3b:e2:52:fc:2f:d5:a9:
62:74:99:e5:70:55:47:d8:1e:3a:47:88:2c:02:69:
5b:91:1d:35:fa:4c:04:e7:30:8f:b6:a9:08:8a:2f:
3d:aa:41:8b:72:15:48:34:2f:68:c7:d6:8a:9b:07:
af:64:df:46:e2:c0:81:30:7a:b9:4b:f2:23:98:f7:
24:7a:63:e5:07:d3:fd:05:c9:82:10:e1:b1:30:2f:
96:f9:71:cd:97:6b:7c:6c:a5:c2:89:30:05:93:bc:
0e:00:a1:ed:88:7c:f4:b8:95:54:38:33:22:2f:ee:
dd:d5:a1:a7:ea:84:77:b1:05:a4:40:03:82:e0:39:
1b:a2:3e:d5:07:26:d2:67:95:60:7c:57:2c:2b:68:
56:6b:98:10:a5:cd:db:a2:40:66:93:25:3b:43:4a:
14:cf:d8:78:d3:ed:2f:0a:63:9e:bf:ff:35:9a:d0:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A9:8C:BC:27:C6:22:4F:08:AC:0A:2D:95:EB:40:91:5B:2D:3D:D9
X509v3 Authority Key Identifier:
keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:81:42:53:8c:46:49:05:0a:57:ff:fe:a9:09:c9:92:c6:d2:
cb:9b:cd:df:96:d8:57:17:2a:9a:7e:cc:06:34:e6:65:6d:21:
b5:e7:74:5b:7a:99:ce:94:36:f3:5d:1f:c0:a4:13:3b:1c:4e:
9b:bc:cc:89:c9:25:61:9d:27:1b:05:56:34:e9:ce:a0:a1:f9:
71:7a:f6:19:ee:ab:67:f7:2c:82:09:7b:2c:4b:3d:91:0d:f4:
27:f5:98:99:c9:56:c5:6e:b8:92:49:bc:4c:1e:cb:c8:9b:9a:
e2:46:f4:b1:d0:13:76:e2:c9:3f:95:0b:62:a6:10:10:06:65:
5d:fd:14:bf:99:75:a0:2f:ec:1f:24:5f:d2:e8:fe:25:64:cb:
48:a6:1f:45:17:82:a1:5d:3b:5a:87:5f:93:ac:da:9a:b3:88:
5b:82:19:9c:b7:3e:78:ed:8a:31:7d:d9:aa:31:90:2f:46:82:
54:9b:93:a5:bc:9f:ee:4d:24:ca:e6:76:2c:b5:bd:a3:5c:94:
ba:04:b7:55:2f:86:4c:7a:1a:3b:59:66:f5:37:b3:37:4e:44:
7a:64:dd:c2:ec:e8:80:63:b2:4c:56:95:34:95:fb:dc:ac:06:
58:ac:e8:7a:1a:29:47:7c:17:ef:32:0c:f9:95:04:ab:43:25:
11:9c:5b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:03:35 2025 by rpki-client