Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: WS+VflM6fausTPSgNcY1jHCTATHC4uBUCK5fRM6JHUs=
Subject key identifier: D7:2D:35:CF:DA:E5:13:DA:96:A6:60:77:35:AE:46:7B:84:73:FB:CB
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 019603ADF5CCA0E5ED38B2863BE13042369A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 14D3
Signing time: Sat 05 Apr 2025 02:00:54 +0000
Manifest this update: Sat 05 Apr 2025 02:00:54 +0000
Manifest next update: Sun 06 Apr 2025 02:00:54 +0000
Files and hashes: 1: AkKW7m-MHHB19PTWABc4m9rKocs.roa (hash: qHV2PtoHadaa9NwNl5xTEsUFUv4QzTCLjq+mny689nw=)
2: _GG8qubp_g9Px6E1DCD6hAdsvxo.roa (hash: 7gqHqwq0qb4WMuA79mugfXtlkRY7UZiMzeqs0bw/bLo=)
3: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: iW9ENLJ/+6wO0JkcgPnOrFjzfKmQ7TlRh5ELfocOfEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:ad:f5:cc:a0:e5:ed:38:b2:86:3b:e1:30:42:36:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Apr 5 02:00:54 2025 GMT
Not After : Apr 6 02:00:54 2025 GMT
Subject: CN=d72d35cfdae513da96a6607735ae467b8473fbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fb:be:71:0d:9e:21:a9:5e:36:f6:16:26:8e:
e9:1b:bc:bc:3b:47:bc:ff:64:e7:f6:d4:27:b2:01:
0e:2b:58:3b:28:5a:c1:1d:e5:81:a0:1a:fe:fb:b1:
d0:f3:2c:64:ce:4c:04:7b:36:2d:aa:1d:ab:15:bf:
0e:1f:4e:a3:0e:53:52:ca:44:02:63:7f:4b:62:1b:
ca:11:f4:eb:2e:a5:db:6e:a4:ef:46:d4:34:99:82:
b8:16:d7:ea:a5:1b:9a:0d:3b:79:d5:bb:40:58:cf:
e3:b6:c9:1a:1e:8c:00:8e:0a:bd:a1:0f:88:80:a8:
f0:f3:27:25:15:ef:12:de:12:5c:c2:b1:8b:42:e9:
bd:0b:20:c8:1f:a5:52:a2:c9:e5:cd:bb:c7:ff:09:
bf:5a:ac:ee:b6:93:b0:a4:ca:c9:2d:95:19:1c:d9:
0d:28:ac:da:70:41:31:51:6c:61:54:51:30:92:b8:
5b:0d:be:1b:03:1d:f4:2c:5e:48:15:f2:c5:c7:12:
bf:98:8c:b7:2b:19:a5:a7:06:47:e3:20:49:c7:e7:
83:66:7b:4a:71:e6:56:71:36:6f:1f:56:3d:1f:34:
77:9d:76:d4:67:96:c3:13:16:ad:fc:66:3a:ea:82:
24:7c:ed:84:bd:e5:a0:2f:6a:d1:6d:31:26:c2:8d:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2D:35:CF:DA:E5:13:DA:96:A6:60:77:35:AE:46:7B:84:73:FB:CB
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bf:96:56:a8:38:5c:dc:44:4c:4a:80:d6:58:37:65:85:79:
e0:3f:03:fb:22:08:80:0b:9d:0f:29:d7:87:18:75:b2:dc:d5:
06:c0:a3:41:5c:6e:ec:81:04:af:68:0d:6f:3c:d9:13:9f:e3:
fb:ae:40:7b:11:87:cd:b7:2d:77:7e:94:7c:32:55:c9:30:3e:
80:34:bd:ba:22:09:f3:3c:4c:a2:5b:58:f9:24:be:7f:2c:2c:
0d:05:f7:03:ba:1c:e6:84:79:a0:3d:de:df:54:30:f1:42:d4:
a8:a4:3d:f4:0d:58:fd:1c:75:49:25:da:5c:94:c2:d0:45:00:
0b:65:c1:93:7d:6e:1e:54:b5:1a:60:56:91:bd:1d:79:93:85:
bf:0a:a4:22:c5:69:4b:83:55:1d:0f:ef:8b:ca:30:42:b5:f8:
90:7a:8a:57:53:ab:63:64:a2:06:04:ae:38:0a:b0:17:37:d6:
bc:fd:d6:dc:25:ea:91:fc:4f:75:c2:4f:d1:29:1c:db:66:ff:
45:7b:fd:11:f9:a7:ef:ef:c6:ae:7a:57:ef:d5:ea:52:a2:af:
ab:ca:ac:1e:5f:c0:29:28:02:0f:96:6e:f9:eb:3a:26:fb:ff:
e7:bc:dc:27:54:1e:d0:5f:7f:eb:6b:44:2e:43:24:62:c3:5c:
53:42:a5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:04:34 2025 by rpki-client