Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: uzT/X0bNGgmjT7iZopirLp/xjdFT83Qre/DfPx/K8DE=
Subject key identifier: 85:A0:33:29:0E:E5:E1:18:3A:CC:77:52:9E:98:54:67:A7:B9:C4:BB
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 01962CAA6C8897636E29530E76FFDD093C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 14E8
Signing time: Sun 13 Apr 2025 01:01:28 +0000
Manifest this update: Sun 13 Apr 2025 01:01:28 +0000
Manifest next update: Mon 14 Apr 2025 01:01:28 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: G2zuVM/qsxOQv2UFt450+Luj3sID6zkOCFPnIe3xvGE=)
2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:aa:6c:88:97:63:6e:29:53:0e:76:ff:dd:09:3c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Apr 13 01:01:28 2025 GMT
Not After : Apr 14 01:01:28 2025 GMT
Subject: CN=85a033290ee5e1183acc77529e985467a7b9c4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:05:1f:0e:86:8a:75:e4:6f:c9:07:31:1b:
e4:f6:56:d4:4a:ed:0c:3a:33:e0:3e:ff:e7:66:0a:
06:8d:3d:0f:ba:4a:1c:f8:38:68:f9:35:79:52:4f:
85:8f:2e:f5:c7:6b:24:7b:48:84:0e:59:a4:4e:cb:
ee:0e:16:b5:da:a3:56:c3:15:e8:6e:d7:22:2b:96:
58:4b:e7:51:15:52:39:5e:be:ad:39:29:95:10:5f:
6e:f7:ba:67:de:d6:03:15:4e:51:39:9f:fc:ab:29:
20:ef:63:f2:24:cb:f8:10:3e:4e:6f:37:f2:5d:84:
51:55:f4:b4:c8:da:2c:19:d9:4e:13:1f:83:71:17:
0a:83:0b:00:cf:2b:a4:28:55:a3:73:ab:23:3b:fb:
21:b0:79:98:c0:3a:17:a6:87:e2:c1:6a:72:58:16:
05:b7:9f:68:36:b4:b4:41:70:af:80:c4:e8:17:17:
b3:ec:f5:bd:38:25:e1:85:76:bb:8d:b4:09:bd:fd:
2b:78:a0:ce:ed:c7:f6:fa:3b:36:49:84:0a:e7:8c:
33:ad:84:8c:ee:80:8b:87:26:a8:67:95:89:36:33:
9a:20:52:bc:23:cf:02:1a:22:3a:36:89:d0:9e:81:
b8:ff:f7:ab:fd:c9:17:34:d1:fc:b2:92:0c:16:66:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A0:33:29:0E:E5:E1:18:3A:CC:77:52:9E:98:54:67:A7:B9:C4:BB
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5d:42:7f:1b:6d:a8:7b:60:d6:ec:b8:9f:40:ca:44:e8:71:
52:5b:bc:4d:e2:7a:fb:63:af:60:83:cc:40:67:1e:a9:f0:ba:
29:a3:60:60:46:0c:3f:2f:f3:e4:1e:52:54:55:ea:d7:19:b3:
62:7d:21:34:cd:3c:71:12:28:29:08:6b:fc:4a:07:07:b5:03:
28:bb:d0:43:6b:be:8b:05:be:4d:56:8b:c9:e5:86:ff:bc:a8:
2f:4d:36:05:48:5f:3d:ee:79:0b:ea:bc:0c:d4:1b:6b:c5:b3:
3c:0f:d8:41:ae:c2:e9:a1:3a:da:cf:20:8f:7f:f3:e8:41:47:
82:70:b7:9b:4c:3f:b4:ec:9e:99:b8:f3:3c:85:d0:81:0b:6b:
73:d0:c6:a1:59:9f:e9:ad:7e:30:f3:c2:af:42:d3:8a:10:f6:
dc:6b:eb:4d:d2:a6:95:1d:00:c4:ab:ca:ed:c8:41:32:a2:be:
60:a4:f1:06:60:35:ba:69:29:f2:47:14:23:6d:26:84:b0:5b:
f5:92:ad:db:08:9c:31:a2:4c:e1:58:2d:0d:22:91:7a:32:a4:
47:72:13:cb:77:75:0b:d4:95:f6:bc:6e:6a:9b:e5:f5:07:22:
a6:88:84:80:f1:75:03:33:7d:2f:87:47:23:e1:70:e6:99:84:
62:7b:d5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:07:06 2025 by rpki-client