Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
File: p72rJYCrs79ii11PidSXzZ2SpOM.mft (raw, json)
Hash identifier: 0laTqHdI48GydTndLdcyfPAqW8LbyQqiWUBuI/bwtxA=
Subject key identifier: 14:DF:A8:D1:82:04:82:C3:14:06:BA:55:64:64:40:D0:F5:C1:B7:15
Authority key identifier: A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
Certificate issuer: /CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Certificate serial: 01958F617450D18B52CE3ACE50315AAFCB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 12:01:23 +0000
Manifest this update: Thu 13 Mar 2025 12:01:23 +0000
Manifest next update: Fri 14 Mar 2025 12:01:23 +0000
Files and hashes: 1: GdFZWMri9TOgFT_NeIYkh_SHlw0.roa (hash: NbWz1qM9hdBHH2+QMgdXpTZoVY8ecNxlY44TCKHTwLo=)
2: p72rJYCrs79ii11PidSXzZ2SpOM.crl (hash: 5SXEKAd2CdOVBjSLE5ZCbgcrEITshUBDRMhNg7Tj0N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:74:50:d1:8b:52:ce:3a:ce:50:31:5a:af:cb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Validity
Not Before: Mar 13 12:01:23 2025 GMT
Not After : Mar 14 12:01:23 2025 GMT
Subject: CN=14dfa8d1820482c31406ba55646440d0f5c1b715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:f2:10:25:42:c0:33:6f:81:34:e3:dc:c4:
4b:03:e3:fe:99:37:37:c8:58:51:12:1c:fc:12:56:
2e:9c:0f:ee:86:be:e3:eb:a7:10:72:08:19:e9:f7:
3c:ee:9d:27:e2:39:6a:78:7c:8f:2f:62:10:ae:d0:
d4:2f:e7:ea:ef:ff:c4:72:23:9a:19:44:90:bf:b8:
a6:33:28:fe:38:b4:a5:5c:56:a3:8a:f5:f0:d9:b6:
a3:10:9c:21:6c:97:38:b0:68:c8:67:b1:f0:ac:48:
98:be:20:b2:27:93:38:0f:6e:3d:cd:89:4a:0a:b0:
cc:91:36:35:34:f4:4f:44:bc:a0:ac:28:fb:77:5e:
29:d6:14:be:c5:43:b7:ec:23:10:0b:a1:66:89:89:
78:91:aa:81:6a:cb:63:c0:98:a1:39:fb:a3:60:23:
dc:72:d7:36:fc:54:61:52:39:e9:0e:09:ac:df:34:
cc:6c:ec:23:4a:e3:e3:c1:a1:2f:25:0a:03:28:e3:
7d:b6:68:fd:33:1a:82:ca:ac:c0:74:a0:80:bf:69:
49:09:f3:45:01:83:3a:01:9b:18:9a:39:43:42:2e:
4e:4a:3a:cf:83:29:89:20:1e:cd:95:b0:78:19:5a:
ba:81:0f:ab:d2:d3:87:42:ac:7e:2a:11:94:0b:ab:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:A8:D1:82:04:82:C3:14:06:BA:55:64:64:40:D0:F5:C1:B7:15
X509v3 Authority Key Identifier:
keyid:A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d5:24:50:15:6c:ba:da:ee:76:00:75:3e:88:4f:b4:f1:20:
32:e8:f1:e3:fa:4f:3f:6a:ae:0c:ee:4d:a6:28:5f:d6:74:71:
62:0c:85:2d:8d:3c:7a:0c:86:18:1d:bd:52:fe:6a:4a:d5:98:
2a:8b:18:97:c5:f6:89:d2:6e:86:f4:c2:97:4c:65:eb:13:07:
98:1d:2f:54:cb:91:d6:ea:b0:4a:19:03:ad:bd:52:1f:13:d8:
9b:a1:15:05:30:72:21:cb:66:6a:e0:e4:f3:90:76:10:8f:47:
7f:13:ae:2a:6a:39:62:86:9e:71:38:d4:4f:6e:0a:8d:f5:5e:
a7:80:4b:1a:d0:6c:6a:7a:1e:fc:28:b9:a7:c3:17:72:4f:39:
27:1d:45:a6:b0:2a:dc:df:cc:d0:db:62:33:48:4b:b4:cf:d8:
17:5c:ec:db:83:9f:5c:79:f2:19:bc:fa:23:c7:78:21:71:ed:
49:6b:92:b0:45:d9:ce:8f:2d:77:5b:5d:a4:49:ee:a0:32:dc:
d6:1d:f6:3e:3d:0b:59:9f:23:87:88:81:46:3e:2b:f9:06:b6:
69:a8:d9:d9:55:c0:39:21:0e:b5:8a:4e:67:b0:a2:d3:e7:b2:
9c:9e:57:32:e1:ac:4c:03:33:ee:92:ad:38:39:e2:6e:99:05:
48:1f:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:18 2025 by rpki-client