Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
File: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft (raw, json)
Hash identifier: vvMLQwI2gTmw7vz2wumkkMbEYMMr2JDzgZono2QGUP0=
Subject key identifier: D6:9D:17:D7:9B:D2:FC:46:3F:49:25:08:7B:9A:C3:2C:9A:3B:0C:C7
Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Certificate serial: 01964A7D4F27F0ADC41AA97E5B9C4E1EEF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
Manifest number: 14FA
Signing time: Fri 18 Apr 2025 20:00:48 +0000
Manifest this update: Fri 18 Apr 2025 20:00:48 +0000
Manifest next update: Sat 19 Apr 2025 20:00:48 +0000
Files and hashes: 1: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl (hash: 2lrFzCn8JEgHIdOakc8faBL1oEPHrtLnVWkhCZsy2Eo=)
2: VDDxUy1rUQDxJYT3ATBjI69SbdQ.roa (hash: oF1hkO2cydZ9A84V2XohR++dZN8uh+qMwIFTNO+4W4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:4f:27:f0:ad:c4:1a:a9:7e:5b:9c:4e:1e:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Validity
Not Before: Apr 18 20:00:48 2025 GMT
Not After : Apr 19 20:00:48 2025 GMT
Subject: CN=d69d17d79bd2fc463f4925087b9ac32c9a3b0cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1c:2d:d9:b0:0c:f5:4e:5f:62:62:f1:12:ef:
67:67:85:64:70:46:ab:21:d4:28:b2:10:43:41:65:
49:bc:9b:7d:22:65:5f:5a:20:9b:61:8a:54:a2:dc:
f4:a2:b2:11:6a:a7:5c:3f:a0:d0:2c:e9:ec:05:57:
da:fe:73:47:6e:81:da:ba:ad:4f:f2:43:49:e5:94:
57:a2:a9:d5:01:1d:89:b1:dd:a9:bb:65:b9:53:37:
2f:e5:d8:d9:89:e7:7f:a5:79:ca:6d:87:de:8f:f1:
77:1c:22:91:4e:6a:b0:52:a8:9d:69:9e:a3:de:4e:
d9:53:f5:4f:5b:5c:46:44:6c:b2:33:93:6e:b8:2a:
1c:e9:14:ce:c8:78:77:49:9d:ee:0d:83:ac:8e:df:
50:db:a3:98:fe:1b:cf:75:45:80:d1:e4:d5:af:bf:
79:8e:17:96:1f:be:1a:de:d1:c7:37:f7:7d:ab:06:
eb:49:46:4a:45:7d:67:62:04:66:d4:fe:06:c0:0f:
08:80:f0:23:7a:51:d5:95:02:e1:73:a6:bb:13:5e:
13:41:2c:86:55:cc:9f:54:b6:80:aa:d5:4c:66:c7:
95:10:69:83:a3:f0:be:47:c1:f2:12:e7:97:95:22:
76:27:50:b4:e8:3e:0a:ec:64:89:27:c5:47:95:44:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9D:17:D7:9B:D2:FC:46:3F:49:25:08:7B:9A:C3:2C:9A:3B:0C:C7
X509v3 Authority Key Identifier:
keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7c:6e:5c:57:51:db:5e:e6:af:3e:fa:e7:42:e2:07:46:d5:
65:7f:bc:a3:e7:a5:5a:50:70:72:44:a4:da:fe:d2:20:71:46:
78:fe:ef:eb:da:6f:25:29:7b:ad:2e:aa:8e:76:1c:b5:49:61:
98:eb:75:5f:0c:21:3a:aa:77:b6:66:52:02:56:ff:89:4f:93:
a0:90:a9:3a:bc:4f:60:f6:21:f3:c6:9f:0b:98:94:7c:85:19:
fb:aa:4c:ff:4e:0e:dc:14:2f:64:53:25:6c:f1:be:38:9a:7a:
e6:8f:24:30:d0:4d:d2:eb:49:f5:2c:f4:1e:41:ce:fd:31:ca:
d8:ce:3e:d4:46:fd:e7:16:71:5a:1e:d4:42:04:e9:c4:da:ae:
61:e8:e9:ad:9a:1f:31:1e:bd:ab:81:73:1f:c0:34:b7:05:98:
2e:82:e8:ac:d7:c6:c1:9b:89:b5:a7:f8:ba:0e:01:9b:a2:6b:
f9:7e:9e:a4:60:12:34:a8:bd:8e:99:f3:8d:81:97:f9:d1:88:
c1:d7:4d:a8:12:ca:f9:ca:9e:27:78:25:02:43:72:13:b1:74:
23:63:4f:93:57:07:c2:68:95:e3:85:3a:11:aa:d8:a9:2f:b7:
bd:0b:91:ba:52:43:d0:b9:79:f2:6d:f8:da:9b:de:78:a4:96:
63:ea:12:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:08 2025 by rpki-client