Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: sqWjQakyquWCWxJBZTD7KBSTrK/bY8WLBi0VJul9W64=
Subject key identifier: EF:B4:A9:C8:99:1C:E6:A9:B4:12:CB:94:89:42:AA:73:A0:35:8F:85
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 0196545BC871C0A3A7BEFE37DCADF8879A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 18:00:23 +0000
Manifest this update: Sun 20 Apr 2025 18:00:23 +0000
Manifest next update: Mon 21 Apr 2025 18:00:23 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: JteFmB9den318gHbDe78RwgwiiVTe6CDKMOHHnX7V8k=)
2: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (hash: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:c8:71:c0:a3:a7:be:fe:37:dc:ad:f8:87:9a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Apr 20 18:00:23 2025 GMT
Not After : Apr 21 18:00:23 2025 GMT
Subject: CN=efb4a9c8991ce6a9b412cb948942aa73a0358f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:e0:6a:0c:93:8a:71:d0:8a:2f:73:d0:30:
a3:bd:69:07:56:ad:f4:c4:74:0e:06:4d:e7:c1:ff:
a2:b2:69:34:d3:5d:6f:4f:49:ea:b7:ce:2d:42:86:
fb:9a:ca:bc:ca:18:ab:e0:5a:32:e9:8c:9a:70:29:
bb:05:96:d6:a1:63:51:a9:94:f2:75:92:c8:88:9d:
81:f1:7e:8f:a8:f3:87:ff:f4:38:04:46:07:58:c5:
57:29:f7:95:98:40:bb:01:63:0b:8b:74:cc:ed:80:
51:b4:12:31:21:56:aa:30:81:71:56:0b:86:4e:c8:
c3:22:0e:86:99:c1:4e:71:d8:15:0d:f3:0d:36:d9:
8b:07:43:9e:ac:6b:cd:b7:d8:e6:0e:96:b4:92:5c:
77:4c:59:7a:aa:e6:7c:cb:52:0d:14:e8:69:4b:4c:
93:2b:da:61:ed:e9:35:f0:5a:ef:b7:a4:2e:7b:a4:
d5:f3:80:27:64:3d:bc:0d:e4:3e:08:e6:e9:ad:fe:
43:09:d5:a5:3e:4c:c6:95:ab:6b:dd:12:be:6b:e8:
fc:70:7d:20:a5:c0:e8:87:19:8f:12:27:c5:e9:b6:
2f:80:08:46:fc:71:a3:56:f0:1c:83:e4:c6:e9:9d:
e8:3d:94:ff:ac:e7:78:a8:de:36:f6:44:12:78:ff:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B4:A9:C8:99:1C:E6:A9:B4:12:CB:94:89:42:AA:73:A0:35:8F:85
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:48:46:54:29:be:ef:8c:4c:3c:c9:f7:a7:d0:9f:f8:a5:12:
15:8e:2a:47:75:06:47:fc:ca:78:1c:23:f8:19:2c:81:87:59:
35:c5:b8:ec:ab:b6:7f:43:8a:94:2e:01:dd:54:70:2e:19:6a:
15:a2:cb:50:ba:5c:99:32:a5:83:f2:80:eb:f9:2c:b0:8e:68:
43:f9:c5:5d:47:bb:66:8b:c2:9b:1d:78:cd:70:a7:32:7d:f4:
c3:aa:1d:e6:5e:fd:3e:0d:7e:30:fa:ac:2f:c2:b4:03:4c:0c:
c6:48:d9:d6:eb:34:2f:a6:f6:24:76:25:28:75:9d:3e:37:e5:
91:e1:93:9f:4a:f9:2b:e6:9e:95:8b:45:e8:77:25:20:c7:96:
d6:17:73:95:2a:dd:09:bb:bb:39:c0:0d:c0:04:e9:85:46:3e:
51:8b:f9:5c:ba:44:27:28:f3:82:6f:38:da:e1:c4:09:b8:31:
aa:14:31:3e:71:d2:57:a8:2c:ed:a2:54:c7:a1:87:70:2d:70:
01:75:f3:b9:2c:92:2f:6d:2b:eb:f2:42:f0:2c:9a:12:32:83:
29:a5:2a:3c:c3:c8:d3:a6:b6:bc:4c:d7:8d:27:99:64:00:40:
99:af:29:d9:b4:a9:9e:1b:75:8a:e2:36:b5:18:16:1c:81:8b:
f3:22:25:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:19:46 2025 by rpki-client