Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
File: j5voJHXSWAjiFOmlyieRNHwR2rY.mft (raw, json)
Hash identifier: 9HIEOrpdfAn8/oma/xGyRrJIh/m2k60wQCJa+T51n0c=
Subject key identifier: 55:64:80:3F:BC:C6:4C:F9:04:6E:E2:26:3F:76:D2:32:9B:78:13:AD
Authority key identifier: 8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
Certificate issuer: /CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Certificate serial: 01965492A99F724C633F6DDFD2F43F68290D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 19:00:19 +0000
Manifest this update: Sun 20 Apr 2025 19:00:19 +0000
Manifest next update: Mon 21 Apr 2025 19:00:19 +0000
Files and hashes: 1: j5voJHXSWAjiFOmlyieRNHwR2rY.crl (hash: lvKJK1MYKCilplbVES15OdcYxjiDUAS56WD9w+hpOBk=)
2: ys17eRZKf5P4ptEUO7CgY8DVnRY.roa (hash: CelwNs3p1o5270NUJj8ZM/1/+n0plK08szDLjDEXAmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:a9:9f:72:4c:63:3f:6d:df:d2:f4:3f:68:29:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Validity
Not Before: Apr 20 19:00:19 2025 GMT
Not After : Apr 21 19:00:19 2025 GMT
Subject: CN=5564803fbcc64cf9046ee2263f76d2329b7813ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:5a:d3:26:e3:bf:ed:d3:dc:e5:89:fc:1c:
d4:97:69:92:d6:34:bc:2e:4b:db:7f:75:ef:36:57:
f4:64:db:56:8b:2f:14:02:8b:ae:29:e4:9f:fb:2e:
5a:47:4c:8f:c4:b8:cb:2d:40:c3:67:17:66:c0:24:
3a:8c:30:a7:55:9a:41:ab:9b:09:c8:66:c5:58:e6:
ff:74:78:97:18:72:a9:71:59:39:91:ec:c9:a6:08:
e9:9f:cf:64:63:ec:8e:ae:0d:86:7b:73:fd:e4:ce:
b8:79:89:26:a2:5a:fb:e6:2b:1f:8a:09:35:15:86:
a3:b4:34:3f:46:b6:f5:f1:66:67:01:1e:ae:d7:00:
ae:e4:72:68:ec:85:b5:03:20:d0:76:32:d7:62:a3:
72:eb:b5:fe:9b:2a:60:62:98:50:1d:9d:16:c7:1b:
e6:3a:a1:9c:c2:b2:67:10:dc:75:69:58:73:50:d0:
96:77:c7:ce:3b:cf:ea:06:e6:d5:eb:04:db:bc:34:
b2:be:5a:01:61:e9:a2:83:ff:a9:33:b5:06:a8:21:
77:17:6f:fa:c4:a8:46:83:e2:c2:6b:65:a0:41:22:
73:e8:84:f4:d1:ee:19:56:1e:65:e3:22:45:1c:0a:
0d:45:d4:73:37:d3:bb:73:cc:0c:b9:d0:77:48:cd:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:64:80:3F:BC:C6:4C:F9:04:6E:E2:26:3F:76:D2:32:9B:78:13:AD
X509v3 Authority Key Identifier:
keyid:8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:10:d4:ea:26:69:ea:71:f8:7f:a3:ab:e6:03:7d:98:b1:8a:
51:4b:f5:5e:d3:13:69:c0:97:1b:c1:89:80:44:fa:f2:33:2a:
d4:b6:cf:db:58:73:af:6d:7a:27:b9:0d:6d:57:af:0d:de:e4:
5a:f9:b6:30:8a:e8:af:c8:d2:34:4f:a9:be:a3:df:c5:22:c3:
0f:90:24:46:97:e5:38:93:f8:f5:2e:c7:15:69:af:17:c9:4b:
68:2a:b5:30:a3:3c:2f:c6:eb:e7:79:18:c1:1e:e8:f1:a1:83:
e4:2c:6b:48:ca:b8:d5:03:67:cf:3d:21:ee:a2:53:e3:75:72:
fe:e3:56:86:02:cd:b6:e5:1e:ea:9c:fd:1e:02:bb:49:69:11:
f1:2e:b1:04:af:b5:27:a7:df:2d:91:5d:0e:64:60:39:2d:a6:
20:b8:05:3c:a9:3b:eb:e8:1e:35:c5:27:6a:57:de:c6:3a:77:
8b:a9:96:93:67:87:d8:7f:24:f9:24:01:b1:90:0e:f2:8a:64:
b7:d0:87:4f:f9:e3:e2:07:f5:93:fe:84:e5:55:4f:e4:0e:52:
a4:16:fb:e4:8f:68:e1:e1:26:f5:15:7b:34:12:c0:ca:27:e9:
74:c6:b4:aa:67:5e:5c:2f:e8:53:f4:2d:3a:9b:f1:40:57:4f:
43:db:d4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:48:07 2025 by rpki-client