Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
File: mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json)
Hash identifier: cOrIB+q7hkZ4XEDnjBJPkonuXFchdw4yJtaeoAb47qY=
Subject key identifier: 55:01:09:A4:2B:6F:95:CA:BB:01:E2:E9:B9:6A:60:B6:AD:5F:2D:33
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial: 0196504890DA02B15ACD83D04FA8D5456CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 23:00:55 +0000
Manifest this update: Sat 19 Apr 2025 23:00:55 +0000
Manifest next update: Sun 20 Apr 2025 23:00:55 +0000
Files and hashes: 1: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: q2yFdX0BRecCUdf7VVUYemkaxXecyrLmqeqAH1QeQ94=)
2: u9xJm6a8iv-NU5QCZgFCUyU_CIQ.roa (hash: a1ccdr3daMuWhcGyGVwNFs2+CFRCY21VguoNG+TE+38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:90:da:02:b1:5a:cd:83:d0:4f:a8:d5:45:6c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Validity
Not Before: Apr 19 23:00:55 2025 GMT
Not After : Apr 20 23:00:55 2025 GMT
Subject: CN=550109a42b6f95cabb01e2e9b96a60b6ad5f2d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:28:7d:1b:c2:b1:ec:b4:aa:3a:2d:2a:a7:
50:dc:9e:27:ad:77:1a:78:5d:04:75:4f:50:bc:3c:
b7:81:58:67:2f:09:30:cf:04:6a:f5:69:1e:7d:ab:
4a:81:34:e9:7c:e3:d0:52:fd:70:a8:2c:9d:67:7a:
8c:0a:7f:32:bc:f4:bf:00:31:ab:6c:9c:80:b7:3a:
b4:1f:b1:a8:54:94:18:b6:3a:58:3b:a8:e3:75:36:
45:44:d4:fc:58:4c:d8:b5:0e:50:61:76:5b:64:62:
de:cb:80:2c:49:07:19:e6:03:1f:0f:a6:d3:d8:75:
58:c2:83:c9:b5:b2:79:1b:14:42:60:aa:6f:74:7f:
c3:4d:57:68:33:f2:cc:9b:31:f6:e1:48:89:e9:a9:
bd:51:d7:4c:f9:54:35:97:21:da:bf:4e:85:0f:74:
d7:68:d5:e4:70:b3:f4:6d:6c:56:56:79:75:09:a3:
a8:1c:77:fb:37:7e:74:f1:88:15:4e:aa:62:7b:bb:
54:c1:7b:af:ad:e8:09:5d:40:61:b9:3b:94:af:c4:
00:c7:c1:d4:c2:04:73:48:bd:99:4c:c9:02:3a:0e:
f0:35:42:be:bc:39:d0:35:e4:e2:7a:33:47:58:f9:
b5:4d:52:b4:1f:f7:fe:e3:d2:48:1e:ed:f8:79:fa:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:01:09:A4:2B:6F:95:CA:BB:01:E2:E9:B9:6A:60:B6:AD:5F:2D:33
X509v3 Authority Key Identifier:
keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:79:d9:10:fe:8f:69:ca:93:e4:5e:2e:f6:3e:cc:d7:a5:8d:
28:2e:59:5d:6e:ec:42:a1:be:3a:0b:80:d2:f6:08:df:45:94:
c8:44:01:87:44:b9:85:66:ee:c8:9a:88:5b:40:8c:7d:6c:96:
04:94:c2:d1:36:38:c8:52:6c:f9:41:38:08:7c:34:82:30:27:
fe:a7:92:27:6d:9c:c5:79:41:f7:96:fa:a5:ed:8e:d5:5b:79:
3b:54:fa:c2:15:17:a5:6b:8c:0e:93:de:08:2e:9f:0e:50:1a:
23:59:da:b9:d8:96:d2:9a:78:4e:73:9d:c9:89:54:60:a2:0a:
9d:9f:d0:4d:9b:24:f8:07:e4:c8:81:0d:cd:14:87:73:78:a3:
6a:e4:d2:49:7a:73:8f:76:19:21:18:df:6f:e6:5f:23:ef:db:
1b:b2:17:ec:19:90:fb:20:34:3a:19:fd:d0:cd:27:9a:c0:3f:
c4:69:ec:41:f5:32:9a:99:1f:c5:77:2c:d0:5d:bc:1c:be:40:
43:b5:47:64:aa:0b:41:0d:b8:f3:ca:f2:7c:8a:dd:01:30:b3:
1b:5f:e2:e7:b3:a1:c5:f8:82:fa:95:ae:0c:f5:10:78:2b:cf:
b1:2b:87:c7:5b:4b:cf:89:64:a2:fc:bb:2f:b5:21:a3:9d:06:
df:81:6d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:49 2025 by rpki-client