Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
File: p72rJYCrs79ii11PidSXzZ2SpOM.mft (raw, json)
Hash identifier: qLxK682vG5gFgOgRJt+TzGNm/CNdstrSSS4f2DjKRxg=
Subject key identifier: D4:1C:52:95:80:1B:7A:E7:FC:C2:8B:FC:CD:18:FF:BD:8C:B0:FC:BC
Authority key identifier: A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
Certificate issuer: /CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Certificate serial: 0196526DD186D4ECC2C110CCA167D8E82AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 09:00:50 +0000
Manifest this update: Sun 20 Apr 2025 09:00:50 +0000
Manifest next update: Mon 21 Apr 2025 09:00:50 +0000
Files and hashes: 1: GdFZWMri9TOgFT_NeIYkh_SHlw0.roa (hash: NbWz1qM9hdBHH2+QMgdXpTZoVY8ecNxlY44TCKHTwLo=)
2: p72rJYCrs79ii11PidSXzZ2SpOM.crl (hash: xXwMvaOaqBJzWw9l65pU1spZ4sV19q75Z1SEXLuXv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:d1:86:d4:ec:c2:c1:10:cc:a1:67:d8:e8:2a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Validity
Not Before: Apr 20 09:00:50 2025 GMT
Not After : Apr 21 09:00:50 2025 GMT
Subject: CN=d41c5295801b7ae7fcc28bfccd18ffbd8cb0fcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:c1:91:5a:52:d4:ec:ba:59:3f:b2:5a:d3:
14:a7:01:90:a8:bb:2c:a2:59:af:1e:67:ee:9b:47:
43:b5:41:2b:91:6a:84:0e:46:cb:b9:19:3d:88:95:
b2:2a:1e:22:f7:1e:56:65:09:a8:14:c3:94:b8:96:
13:da:f0:52:5d:81:ec:1f:98:74:55:20:76:e4:89:
30:56:94:dc:f2:33:e8:46:61:ee:41:cf:62:e3:20:
24:a4:58:de:79:c6:2c:3d:92:11:3a:9a:4e:3e:31:
ee:1d:a6:60:e6:a9:9e:5d:03:74:f1:7c:72:36:60:
28:c6:ed:79:01:5c:51:d9:63:b4:ea:25:44:f3:75:
ff:54:c2:cd:c5:b5:6e:20:a7:47:7c:d1:f7:98:bb:
74:e7:13:81:61:b8:e3:b4:72:a9:4f:0e:1c:0d:14:
dc:f9:e9:df:bb:47:e6:fa:c8:8b:62:79:62:af:2e:
12:e1:dc:80:3a:ee:dd:1d:04:b1:05:05:ef:03:9d:
7d:0c:f1:51:36:63:ce:12:14:7b:61:7e:b4:05:90:
c2:0c:d8:3d:c3:78:f2:32:e2:f2:2c:ba:a9:5c:56:
a6:c0:cc:36:88:03:1e:fe:72:2d:df:c2:1e:ef:ef:
fc:03:34:1e:76:b7:58:df:7d:fa:b2:de:73:a9:ee:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1C:52:95:80:1B:7A:E7:FC:C2:8B:FC:CD:18:FF:BD:8C:B0:FC:BC
X509v3 Authority Key Identifier:
keyid:A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:44:24:ed:0f:1d:12:b2:59:80:39:8f:ef:00:20:73:67:6e:
58:cb:51:fe:a5:37:32:bf:89:15:e4:c7:65:b3:38:32:49:c6:
c7:07:ef:43:34:94:5e:88:52:3e:51:30:f9:da:e6:fb:b6:21:
57:36:53:e9:1c:ad:16:f9:e3:f4:e9:38:38:e3:e3:ad:d1:67:
06:7f:0f:2b:c0:3e:bb:76:5f:0f:41:bc:c1:b4:e4:0e:ee:02:
7b:65:3b:4e:0d:ad:92:b2:fe:e5:1c:70:63:22:96:46:27:7a:
11:4c:7e:51:bb:6f:25:f0:52:7a:5a:9b:a0:6c:0d:90:21:0c:
77:9b:c0:8c:78:e7:a6:c0:a5:89:1a:93:6e:3d:9c:98:dd:c9:
8a:76:f5:f5:6f:2d:10:2c:cc:72:5a:4a:22:89:59:16:47:f4:
7c:c5:81:93:3a:cd:a8:40:a1:69:83:5c:36:55:92:ce:c3:03:
56:68:38:29:9a:3b:67:31:44:28:a0:95:7c:ca:c0:f6:77:64:
a3:7b:e4:ce:ca:a7:9c:58:88:96:b1:3d:35:2b:66:b5:09:c6:
85:2b:31:55:4a:4f:21:fd:8e:db:e5:a1:20:fd:2b:9d:cc:e4:
b1:cf:73:14:1b:c5:e8:2a:7e:14:a4:ca:ab:af:33:88:f1:71:
32:14:93:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:17 2025 by rpki-client