Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: mXVO+35TMcaDEdk9nkCH0wrKU5FyAIi0YCpuNFGoyTo=
Subject key identifier: DD:59:FD:E6:B5:EF:0E:3A:24:5E:53:25:8A:47:67:E6:8B:CC:B2:C9
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 01965191CBC07F32CB34B090CEFF9507E418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 05:00:31 +0000
Manifest this update: Sun 20 Apr 2025 05:00:31 +0000
Manifest next update: Mon 21 Apr 2025 05:00:31 +0000
Files and hashes: 1: S84INADK9hbzUCAynI1288S4OaU.crl (hash: c4MZAzZUC1WlobQjn5+iihZFCJLMNis5tAZq7pnmGig=)
2: xu8AVZlYRkARGQOdM9wgzlgLlPk.roa (hash: z2f5UKfOO2uXvhmwbBAmMbbk0ctXWHQsq/ILki97gKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:cb:c0:7f:32:cb:34:b0:90:ce:ff:95:07:e4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Apr 20 05:00:31 2025 GMT
Not After : Apr 21 05:00:31 2025 GMT
Subject: CN=dd59fde6b5ef0e3a245e53258a4767e68bccb2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:b9:a6:4f:5a:47:79:ce:88:48:5d:3b:25:
0e:69:36:b7:ff:a1:9d:6f:86:4e:cc:6d:e0:5d:48:
dd:5b:88:5f:03:16:e9:f3:28:6f:5d:4c:d8:58:6e:
98:9b:0b:db:ba:54:ed:6c:d0:fa:24:cb:8e:dc:82:
c9:31:9c:67:35:a4:53:59:de:06:4d:34:e8:65:3e:
f0:2c:3b:00:b1:5c:62:c0:2b:c4:a6:32:1e:ae:18:
59:2f:46:d8:b3:bf:b3:e2:d4:de:2a:17:ef:61:90:
9e:75:d8:6b:aa:d2:3b:99:c3:b0:b2:1c:fc:83:bf:
b1:58:6d:8d:61:5a:ed:dc:29:fb:f2:5b:61:f1:78:
10:77:9e:58:ea:e2:77:6a:c8:91:e5:d0:2b:bc:32:
24:57:5d:52:4b:d1:be:42:2f:ce:be:b0:00:46:60:
bf:af:a9:ae:71:a8:2c:5f:d7:eb:73:f9:7f:0d:e1:
5c:5b:27:fe:df:91:a7:2d:9e:0a:d9:be:c5:f7:ea:
47:5b:94:3e:47:49:31:4a:82:5b:36:95:ee:c5:1c:
9f:59:95:f7:67:e4:bb:91:07:a4:73:a6:1a:5d:e1:
3c:ce:50:61:6b:eb:de:84:a2:a7:b0:91:cf:e0:1a:
b0:0b:14:60:87:55:69:a2:30:89:8c:a7:74:30:20:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:59:FD:E6:B5:EF:0E:3A:24:5E:53:25:8A:47:67:E6:8B:CC:B2:C9
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ce:36:4b:a1:ff:91:b0:34:3f:09:a7:1d:4e:e7:86:52:ae:
a7:ef:63:03:c7:7f:01:c6:0e:20:42:4a:c0:c6:7a:ba:6e:3d:
6c:8b:a6:e1:dd:66:98:e2:52:3c:d9:3d:61:aa:b5:59:36:ad:
62:69:e6:a7:b2:17:53:48:9d:36:c2:c3:a2:31:10:2d:f4:48:
8c:63:91:27:e3:24:32:a1:b2:b4:16:ce:73:3b:0d:d3:ce:de:
4e:f7:35:aa:d2:84:60:69:c1:0e:ba:c1:46:1a:7b:15:4f:1d:
57:1b:c1:38:92:54:e9:3c:d9:0a:8a:ce:b8:fc:29:54:d7:e2:
68:29:a1:49:c3:0c:f8:47:b3:8c:04:31:66:bf:61:3d:a9:e4:
5f:55:b4:11:b7:be:1b:ad:bc:93:27:2a:3b:82:11:52:13:bf:
4e:86:a8:c0:c6:31:05:12:cc:ec:82:45:ca:d9:9c:3b:36:8a:
bd:60:07:0f:48:99:70:08:f0:16:60:17:78:07:66:e9:e4:09:
f0:92:b5:84:a5:66:4d:0b:7a:ac:e4:42:6e:25:58:46:1e:a1:
a0:4e:12:11:4d:12:a2:3b:e7:ac:9d:fd:bf:56:01:0f:a5:ab:
ac:d2:78:21:53:6b:00:52:de:8e:4b:48:48:de:87:85:d3:d1:
20:92:43:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:27 2025 by rpki-client