Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: hqPeCOLF4mpPOHK16xuhyQVmKtV1H8M8qwMtutlz9D8=
Subject key identifier: 84:BE:E1:C8:E1:51:0C:26:80:DB:BC:B1:28:C7:5D:42:3C:81:86:B5
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 019647B2D5A0DC53108A6EABC4CE3208AF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 14FE
Signing time: Fri 18 Apr 2025 07:00:24 +0000
Manifest this update: Fri 18 Apr 2025 07:00:24 +0000
Manifest next update: Sat 19 Apr 2025 07:00:24 +0000
Files and hashes: 1: R42xE2mJMD9gnW-S_3g2XV8r74E.roa (hash: EXpcy7RAsA9U8XogEzCQScUz5RV6/SXT/hCfZDn3n2Q=)
2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: r7PEJtMM5KHTmKOn7S6DMMzlmtZ3QhMYXSGncewVerY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:b2:d5:a0:dc:53:10:8a:6e:ab:c4:ce:32:08:af:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Apr 18 07:00:24 2025 GMT
Not After : Apr 19 07:00:24 2025 GMT
Subject: CN=84bee1c8e1510c2680dbbcb128c75d423c8186b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:33:2a:0d:96:a2:45:23:4e:a3:8a:65:37:4f:
9d:8e:3a:32:9c:06:a4:4f:00:17:18:05:fa:ae:07:
f6:1c:37:99:0b:5a:70:8e:86:02:b5:07:8a:15:46:
08:3c:45:a6:74:8f:63:96:4f:68:ac:cb:47:88:6f:
8e:8b:2e:1e:e0:77:b1:17:fd:a9:d6:f9:a2:6b:55:
22:8d:ca:57:9a:ae:4a:99:6c:c5:ee:67:ac:b9:3f:
79:5d:ba:f5:14:e1:ce:7c:b6:22:8b:2f:e6:38:bb:
e3:30:81:18:62:1d:0c:6b:9b:dc:1d:5c:5c:8f:56:
8d:d2:64:23:20:be:c9:2c:55:30:df:38:1f:70:11:
ac:98:fb:0b:0b:73:e1:71:a0:47:94:54:86:8a:b3:
6c:e2:97:1a:41:1d:8c:b1:c7:a8:1a:f5:db:ab:b8:
35:11:12:82:f4:54:96:c5:1c:31:4f:14:87:09:ea:
7f:ee:1a:5e:1f:52:fb:2f:5d:f9:00:d7:25:da:56:
0c:bc:6c:e5:d6:76:7e:9d:0f:ac:2f:42:98:8d:cf:
45:59:4a:77:83:f1:c9:a4:9b:c3:dc:1e:d9:1e:69:
ff:0d:de:f5:04:37:57:cd:73:89:3d:06:f8:7c:da:
78:b3:ec:c3:b3:89:ad:6c:9e:60:f0:b5:74:f6:05:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BE:E1:C8:E1:51:0C:26:80:DB:BC:B1:28:C7:5D:42:3C:81:86:B5
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ca:b6:da:7c:13:58:d1:c7:7f:80:6a:d9:66:7a:6d:4b:b2:
92:9a:6a:82:39:bd:b3:cb:38:94:b0:9f:92:0a:e2:6d:c8:31:
0f:a8:df:bf:f1:3d:af:b9:30:ce:26:e3:95:12:cf:d6:9b:b4:
0b:f4:7d:82:3c:d7:a9:71:3d:34:4e:2b:a7:57:9f:9f:bb:ef:
17:4e:a3:48:3a:22:b4:92:3a:30:97:74:10:04:fc:2c:c5:76:
bd:52:d4:ea:fd:e1:59:be:d6:64:7e:0e:df:6e:00:b5:9b:02:
19:dc:7b:34:d8:bc:49:a6:99:86:a1:07:ab:a2:24:64:ba:93:
b4:99:6d:83:5f:69:89:f9:36:d6:df:59:64:15:be:43:32:1e:
14:07:40:9b:83:67:33:fc:b0:6c:23:cb:84:82:f6:96:d4:8a:
9f:49:ac:41:7a:1c:e7:4c:d9:4d:ca:0b:a9:e9:58:c9:f4:a8:
35:34:e8:27:86:cb:95:9d:ab:24:d6:58:ad:81:25:10:5d:40:
74:88:75:4d:75:62:ef:f5:7a:d7:6f:5b:bd:fc:3d:86:c8:fc:
16:92:d2:02:8e:1a:d3:9e:b4:a9:a8:70:ce:3b:fc:1e:04:d9:
ef:51:ac:0d:6c:d3:d1:d9:b8:a8:ab:c5:6b:ca:e2:f2:9e:5d:
f1:21:6b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:59:20 2025 by rpki-client