Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
File: m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft (raw, json)
Hash identifier: aNxYmcFjhwQcBF2uCx1aX7rRgJiLfbHPdxGjGEbtf4Y=
Subject key identifier: 45:3F:B6:D0:60:B5:CC:33:C7:BD:F9:23:71:23:C6:85:D3:1A:EE:7F
Authority key identifier: 9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
Certificate issuer: /CN=9b868a76f5b4748e1e4bba834701a68577c63462
Certificate serial: 0196436838CC339AE43054D5FA0E249AD497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 11:00:25 +0000
Manifest this update: Thu 17 Apr 2025 11:00:25 +0000
Manifest next update: Fri 18 Apr 2025 11:00:25 +0000
Files and hashes: 1: El3AzP_du9cgKwe4cAMY6ohro7o.roa (hash: unokVLZGXnsuik1b2lzzTnShCOzK3B+jbNl72+ddVqo=)
2: m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl (hash: QrkZuCaj6gKAr6ijPLyE7lzx4q8q0pEWnXhndZSzwU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:68:38:cc:33:9a:e4:30:54:d5:fa:0e:24:9a:d4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b868a76f5b4748e1e4bba834701a68577c63462
Validity
Not Before: Apr 17 11:00:25 2025 GMT
Not After : Apr 18 11:00:25 2025 GMT
Subject: CN=453fb6d060b5cc33c7bdf9237123c685d31aee7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:db:a5:05:ba:7f:0a:e4:42:0e:92:e8:85:2c:
4e:b4:65:3a:99:75:b6:4c:39:99:f3:96:f8:ee:c3:
b9:e5:ab:a7:27:5f:fb:cc:2f:41:9d:fd:23:5c:a8:
38:c9:ee:ca:ac:47:a7:7c:d8:5a:d9:f2:9a:35:28:
71:67:5b:5b:f2:05:dd:1d:7b:d2:ef:35:50:0a:14:
65:0b:08:a9:75:85:a9:f5:c0:38:c7:84:e1:28:3c:
0e:df:e3:27:03:65:1e:fb:50:24:00:6b:3b:76:ee:
db:b3:d1:5c:9b:e4:cd:cd:db:ae:ec:b5:42:c4:47:
57:d9:89:c1:22:ef:f1:ca:0d:00:eb:93:97:96:f9:
bc:ec:e2:a3:97:35:38:41:6d:6a:d2:62:d5:b1:c9:
46:ad:07:3d:e8:81:2b:84:f7:c7:9a:68:89:3a:9c:
57:08:9d:d2:3d:88:e4:7d:6c:03:f1:7e:38:a6:06:
45:95:4c:2b:3d:48:45:25:00:0f:91:04:52:ab:70:
a2:07:8e:49:bd:b2:c4:12:e1:3d:50:19:35:29:b4:
f1:29:0f:85:02:1e:6c:a5:eb:80:7d:44:fb:4c:ae:
61:44:be:06:85:7c:21:c7:96:9d:d4:96:42:00:d3:
8a:c3:99:58:ac:7f:8a:08:46:8c:01:2b:fb:2c:f4:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3F:B6:D0:60:B5:CC:33:C7:BD:F9:23:71:23:C6:85:D3:1A:EE:7F
X509v3 Authority Key Identifier:
keyid:9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:35:88:dc:88:7b:87:4d:f6:72:9a:8d:80:0d:88:1e:bb:64:
18:dc:ee:81:b9:3f:1c:a3:26:ea:04:c5:02:57:c3:93:2a:ee:
72:08:ed:1c:bd:88:61:e3:c4:97:3e:2b:c7:b0:33:5e:f0:be:
64:d5:12:41:98:ca:1c:42:3f:1c:2a:bc:cf:81:9f:85:59:6b:
3e:e5:6a:bc:2a:d3:02:69:6b:8c:cc:d4:70:29:51:f0:ae:6f:
75:29:11:25:16:d4:f4:d9:2d:9f:59:57:77:c3:63:bb:c4:54:
22:25:54:39:ce:01:dd:fa:6e:8a:e8:63:10:53:29:df:82:b1:
7c:07:40:0c:6a:f5:c2:01:a0:a9:ea:04:72:69:29:b2:e5:7b:
02:74:03:4b:9f:b8:1b:f3:62:a1:c4:6c:73:36:ab:2d:b4:ca:
c5:be:28:87:87:5a:d2:68:66:d9:9d:58:6e:38:f0:ec:b5:1f:
bf:b0:1a:76:4f:b7:32:90:d0:a9:6a:e2:e8:b2:23:dc:fb:3a:
65:4c:e0:1e:2b:76:27:f1:75:7c:1f:a2:5c:0f:89:7a:63:5f:
72:df:fc:23:78:75:ae:1a:64:31:39:02:ae:35:ef:d0:de:d0:
77:82:05:4b:f6:8d:5a:60:ae:70:8f:52:02:84:ed:df:4e:41:
63:14:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:03:46 2025 by rpki-client