Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
File: flVV8aLO6JtxNGVghvBU15Y1PB4.mft (raw, json)
Hash identifier: HS8xz4WFU3fI6IHXc425hvLxBw2Uyf1fuaPijeo9aG8=
Subject key identifier: E3:CF:72:54:BD:AD:3C:33:46:B1:FA:87:BD:E7:39:30:A8:2D:63:C5
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Certificate issuer: /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial: 01963050265AB44901348017978DAE4F3A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
Manifest number: 14EF
Signing time: Sun 13 Apr 2025 18:01:21 +0000
Manifest this update: Sun 13 Apr 2025 18:01:21 +0000
Manifest next update: Mon 14 Apr 2025 18:01:21 +0000
Files and hashes: 1: KqK95kA_OeRU7nACiSd3lAze0vY.roa (hash: B7AMB5/+VeIa1+pxAsGTh2RB/UvVZMPeKnxdMUh4GP8=)
2: XDVhwmlTf_nqhCgNATZSd0ar0Aw.roa (hash: 4sk0t2n52t1+zIieedKbu6GF5jguH4obuoBrZPYHYOc=)
3: flVV8aLO6JtxNGVghvBU15Y1PB4.crl (hash: ut274sZH9o7AHAAOsHv5JOw5/54+yiIYFNw4rOJWFP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:50:26:5a:b4:49:01:34:80:17:97:8d:ae:4f:3a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
Validity
Not Before: Apr 13 18:01:21 2025 GMT
Not After : Apr 14 18:01:21 2025 GMT
Subject: CN=e3cf7254bdad3c3346b1fa87bde73930a82d63c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ad:e9:9b:9c:8d:89:78:16:cf:5f:89:81:1f:
5b:ad:12:70:d9:01:10:c0:64:82:b6:fe:04:9f:69:
45:b4:11:2f:bd:68:3f:1b:7f:4d:6c:d8:29:f8:69:
3d:4d:91:60:ae:15:c1:c4:e7:52:39:be:02:d7:a3:
6f:28:b5:7c:96:01:3e:a5:6b:f5:55:b2:1f:2e:74:
b2:9c:1b:c6:9c:df:7d:1a:86:02:2b:7f:92:74:27:
74:e6:f4:8c:ac:39:e2:af:a4:8e:1d:c4:be:a5:6e:
41:42:48:04:a5:65:4a:6e:2a:e2:fc:04:74:1c:21:
c0:4d:e8:4d:53:24:eb:42:f5:d7:65:89:65:ed:34:
fc:63:86:07:e6:8e:be:65:40:34:d4:5d:ba:d9:4d:
2b:2b:9a:b6:72:81:7f:60:63:66:2c:26:69:65:29:
ee:19:35:3f:4d:d8:56:13:15:fa:85:03:39:ff:71:
91:90:0e:62:26:40:da:97:cd:f6:1c:7f:a3:bf:0e:
a7:f1:48:d1:29:36:a7:44:3c:fb:3f:b9:5f:fd:1a:
65:4c:b4:6b:c6:53:85:2b:1f:5f:6b:7a:71:c3:2d:
2b:a8:14:db:84:39:3f:aa:00:18:cb:41:43:4b:35:
ba:d3:75:e1:90:0e:f1:0d:db:6b:c6:e2:b6:7b:c4:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CF:72:54:BD:AD:3C:33:46:B1:FA:87:BD:E7:39:30:A8:2D:63:C5
X509v3 Authority Key Identifier:
keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:41:82:e1:1b:d0:87:7b:90:a2:e8:05:8a:88:eb:dc:5f:f3:
2c:d6:3d:22:db:12:95:5c:c5:0d:41:42:b1:9d:bd:79:3d:a6:
f6:50:76:2f:0c:fc:bc:3f:1a:9c:06:e7:21:7e:8e:3c:01:30:
d2:b2:d0:93:c3:a6:dc:ec:e6:0f:b6:0f:f2:1d:be:09:f8:c1:
c6:93:df:55:4b:18:d8:d2:9f:65:0b:d6:cc:46:98:c4:90:1c:
a5:30:41:6b:70:f7:55:50:e4:83:48:43:24:8b:43:f5:1e:ac:
ff:3a:83:8c:1a:af:cb:70:97:e6:06:89:c6:e1:5e:17:70:91:
5f:d1:b7:18:22:d0:11:c3:2e:e4:b7:23:f9:0c:51:c0:f1:8f:
82:ac:31:68:4b:86:70:0a:84:68:b0:4d:08:1f:d9:b9:4a:2a:
fa:9c:7b:bb:3d:d1:ec:88:73:fa:10:b7:7b:ab:63:e0:cf:61:
57:cd:58:38:1e:b8:9c:36:11:dd:0b:4a:e5:81:b6:52:10:e4:
dc:a3:16:57:21:a9:3c:09:02:49:ab:0c:74:b0:15:ec:06:ee:
27:07:2e:9a:31:89:d4:28:e1:5d:39:1e:f5:b3:28:1d:d1:07:
34:4b:07:1c:bb:69:46:a8:14:07:25:81:8a:39:79:b6:cc:5f:
6c:cb:74:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:11:50 2025 by rpki-client