Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: UhHwTHjZbSYbEvB/R3Nv2rDWy7+OpeNzmFXT4XKFDOg=
Subject key identifier: D0:A3:32:73:0A:FE:3E:6B:64:7A:DA:29:4B:79:D2:91:BC:32:36:5F
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 01964C34E9C060D088DB56D1AFA64AA035FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 04:00:58 +0000
Manifest this update: Sat 19 Apr 2025 04:00:58 +0000
Manifest next update: Sun 20 Apr 2025 04:00:58 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: vkzSYplvtaO0ftv+MaJFcNmUQCMqKD+V1RIRZR39/gk=)
2: Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa (hash: LAVz+eXpY1hxXAk84MXSOTjvvsZinRJwSkGnPzVHurQ=)
3: g7m9yx1NW8SRIFbI1YMp1R07s_U.roa (hash: j5HohraLr+uvJe+BKNjv5aVmggl6w9ivQvztm8iHfjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:e9:c0:60:d0:88:db:56:d1:af:a6:4a:a0:35:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Apr 19 04:00:58 2025 GMT
Not After : Apr 20 04:00:58 2025 GMT
Subject: CN=d0a332730afe3e6b647ada294b79d291bc32365f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:69:13:3d:54:d6:f5:e5:44:d4:41:31:d4:
e6:84:99:0f:f6:52:0f:2e:da:74:dd:9f:5d:ec:3d:
bb:83:3c:66:fb:dc:a1:0a:2d:c0:53:e5:d8:79:82:
95:1e:ea:44:1d:56:94:be:d9:bb:f0:67:ce:b0:37:
ad:1c:46:f8:b4:6e:84:71:90:4d:85:90:8b:d4:86:
47:e7:96:a8:76:74:28:5d:81:6d:a0:a6:0c:a4:e1:
de:5e:36:e2:5c:56:4d:4b:42:44:b4:36:28:1c:b5:
66:2a:fa:aa:c9:36:69:e8:f5:d9:03:97:37:e5:19:
3a:93:84:ae:b3:f2:2b:6a:71:7f:40:10:44:ad:16:
02:a3:c1:d9:34:11:b7:83:9b:bf:b4:10:54:ac:b9:
d5:a7:a4:4b:11:6a:53:06:6d:51:9a:c6:73:38:88:
8b:42:aa:f6:14:00:07:42:fa:04:fb:34:5b:0d:0b:
00:15:1d:d1:27:95:70:e1:e3:11:2d:e6:e3:48:85:
75:67:36:ee:bf:bd:38:c0:2d:8d:1f:ab:47:35:1f:
a2:b1:41:8d:d4:f7:15:99:7d:61:7c:08:f6:57:0e:
ca:0d:fb:c8:49:e3:ba:86:41:05:8f:7a:a8:2e:92:
91:ca:b7:1e:15:72:36:f2:14:fb:0e:40:28:ba:75:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A3:32:73:0A:FE:3E:6B:64:7A:DA:29:4B:79:D2:91:BC:32:36:5F
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ef:85:39:6b:46:f3:b5:0e:79:fe:6b:4b:7d:a9:40:79:24:
b9:6f:b6:29:0e:d2:ff:60:3a:0b:a5:59:2e:ad:7e:2a:32:c1:
65:c0:5a:9d:ae:79:17:25:da:25:40:ab:00:7f:91:dc:31:9b:
af:82:5b:aa:62:e8:ce:e4:fe:20:5d:12:44:55:57:23:8a:48:
7d:0a:c7:94:32:31:90:e7:89:0d:21:ab:c6:a6:36:e9:3b:38:
e3:45:7b:19:91:80:61:0c:c9:1f:0e:81:17:42:be:ec:7c:4f:
27:f1:08:05:f9:bf:40:9a:49:03:97:2e:25:ea:47:fe:da:ac:
cb:9f:88:78:e7:4c:c4:a4:22:35:03:53:49:24:67:07:71:8c:
7d:31:0c:88:8d:e1:42:bb:d0:5b:0b:45:d7:6b:35:eb:7d:f6:
3b:66:b2:cc:b7:98:90:78:94:3b:90:66:ca:d2:be:7b:d7:b5:
21:10:b5:13:9f:be:f7:81:ed:be:8b:ab:b2:7e:23:97:81:06:
cd:91:ba:4e:a5:23:e7:69:99:5d:14:85:3c:85:a4:97:0b:09:
6c:54:2a:79:f7:19:83:56:5e:cd:14:82:37:a6:27:d3:6f:bd:
50:12:e4:92:42:a1:36:66:5d:3a:df:a9:aa:0f:f4:66:11:61:
f6:ee:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:17 2025 by rpki-client