Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
File: r6URZapQNqzaEf7gAg40_MQ57eY.mft (raw, json)
Hash identifier: oPBGi/vJjOiAK9ohFp8YYpd3dbcukWjziLm+2MV4lYQ=
Subject key identifier: 82:A2:2E:6B:3E:00:B4:CE:79:4A:B3:89:88:F0:98:B3:2D:72:91:32
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 01964669E85C86B03EE9D16D2DDAEE92DFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
Manifest number: 14FC
Signing time: Fri 18 Apr 2025 01:01:07 +0000
Manifest this update: Fri 18 Apr 2025 01:01:07 +0000
Manifest next update: Sat 19 Apr 2025 01:01:07 +0000
Files and hashes: 1: JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa (hash: YAf2/29DjA3Na+Hgt1fQsq3jSQYLqFSkMb1fHAx4RUM=)
2: r6URZapQNqzaEf7gAg40_MQ57eY.crl (hash: gXO0nV8ISNJ5cci+6Nl2pddsozoxJdn524MBbCNlVTg=)
3: rJjHJUl0uD_7dHjW4bG3nCxQ5iY.roa (hash: nazoboMf2p4XX7ExK1xqcEEDrXTJmHzU9uxX+kIOchk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:e8:5c:86:b0:3e:e9:d1:6d:2d:da:ee:92:df:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Apr 18 01:01:07 2025 GMT
Not After : Apr 19 01:01:07 2025 GMT
Subject: CN=82a22e6b3e00b4ce794ab38988f098b32d729132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:23:fa:ff:92:5c:23:f4:b1:0a:86:d5:d3:
cc:b7:9d:18:56:2e:fb:ef:06:ed:cb:c0:c8:eb:f2:
f0:aa:ca:86:e0:47:64:a3:c9:92:30:e5:02:92:de:
04:9e:a8:9c:1c:81:fc:42:ce:76:8d:85:e3:46:9c:
1b:a0:84:bf:ed:1a:4f:94:ee:53:b2:9a:18:99:7a:
23:df:8b:15:81:2f:8c:2f:0b:5a:24:e4:3c:5f:64:
e3:a4:fc:38:8e:e2:fd:a1:fe:4c:93:8d:d4:a4:5f:
51:cc:11:d4:81:d7:69:f1:03:a0:36:11:cf:2c:b4:
38:74:6f:bb:c3:23:30:7a:04:0a:46:c8:fe:f8:68:
3b:b1:e7:62:c2:6f:3e:3e:0e:fd:82:e9:37:09:3a:
97:83:0b:7c:12:b4:3e:d5:f8:8c:b1:b5:ed:65:b7:
b4:89:ff:ac:9e:70:64:79:f1:14:6e:42:6d:a6:40:
b0:3f:e3:73:47:9c:07:54:be:3b:62:fe:ed:3e:3e:
7a:3e:d6:e6:23:3d:a5:6b:d8:c5:9e:91:7b:36:ac:
4d:3f:ba:01:d9:e2:58:4d:10:bb:07:cf:27:40:a7:
1e:81:72:0c:ce:47:c2:14:4d:62:77:cd:34:c2:38:
ce:92:34:1a:26:1f:6c:ce:83:12:b9:c3:3d:41:a8:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:2E:6B:3E:00:B4:CE:79:4A:B3:89:88:F0:98:B3:2D:72:91:32
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:be:5f:e8:31:f6:3b:e4:dd:c0:60:cd:4c:88:e5:16:23:c3:
96:f6:cc:1d:f0:32:55:c1:65:18:43:9b:c6:79:e8:c2:87:2e:
58:6a:da:1b:44:dc:ee:95:55:7b:15:d7:f3:35:a3:2b:2b:a0:
6d:ce:2d:33:0b:e0:0a:ec:37:cd:0a:ac:7b:0e:c9:ec:f4:f2:
3e:02:0f:7e:c6:6a:f7:88:18:b3:2e:68:0e:39:cb:9c:ae:83:
83:69:71:ec:54:8f:bc:af:19:e0:f4:06:e2:42:08:63:85:c5:
42:86:78:fd:e7:97:47:ef:e6:d7:dd:a1:1f:72:b9:79:83:74:
46:eb:45:f7:40:92:b1:b8:ac:17:1b:8e:22:39:b2:6c:2f:dc:
95:19:1a:a8:06:96:6e:30:8d:17:68:6f:51:a1:d9:a3:7b:6f:
96:d3:90:f9:0b:13:70:a0:a1:c9:c2:57:c5:82:71:a3:5d:6d:
00:a7:f2:80:3e:c6:b7:8f:21:28:1e:8b:c4:e0:3e:73:63:7c:
de:6e:7a:aa:ef:4a:52:bb:ad:12:6b:7d:1a:23:4a:2b:7d:a0:
4a:5a:42:30:67:0c:ed:39:58:9d:99:b1:90:8b:6d:5d:f6:0c:
cc:78:08:30:19:71:64:d1:70:f7:3f:bd:3e:d3:d0:91:20:9b:
c9:ab:b3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:21:03 2025 by rpki-client