Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: q69xbgG+xePAeQJ2faHZx1/JatacCMzSH7SnwQDYIqY=
Subject key identifier: 03:94:09:5D:5F:4F:FE:AE:5F:F6:9F:EC:D6:DA:C3:F0:F9:3F:60:50
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 01965191DF906ABD183B7991E17AD4059F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 05:00:36 +0000
Manifest this update: Sun 20 Apr 2025 05:00:36 +0000
Manifest next update: Mon 21 Apr 2025 05:00:36 +0000
Files and hashes: 1: WxyFMVLPaoedm2KunMSjCPtRmII.roa (hash: Ungr4kPsfNHZcdD5CyaeCkdVZRH3x9Cj4Xb6OMIiqY0=)
2: ekd0T-pWjR2fdJhmt79rFrJVVFk.roa (hash: SlYmHx07GpRwdPchZU3v+4uB8eJO2LbmRdoWgdkR9QQ=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: +4G54Tr8no/0RAVPXH27SpyWj5OuzZYGgCYUYIl9/vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:df:90:6a:bd:18:3b:79:91:e1:7a:d4:05:9f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Apr 20 05:00:36 2025 GMT
Not After : Apr 21 05:00:36 2025 GMT
Subject: CN=0394095d5f4ffeae5ff69fecd6dac3f0f93f6050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e3:61:86:15:ce:79:eb:b9:c1:2d:1b:46:44:
9c:b1:43:c8:4a:06:7a:a3:dc:c0:8f:b2:2b:51:4e:
b0:6b:b8:66:97:63:7d:60:4e:29:53:96:8d:e1:bf:
f8:01:7f:26:ac:9e:7d:02:54:68:b3:36:83:3f:87:
14:a9:c4:a5:18:c6:3c:ae:3b:c5:f7:95:9c:de:53:
cb:6a:17:d1:9c:5d:30:1d:03:02:7e:48:73:b7:f5:
03:7a:c8:08:6d:66:1e:65:89:07:28:e3:2a:b5:4a:
87:01:30:69:be:7f:e0:4d:c3:95:c5:40:af:4f:6f:
c3:88:73:94:d0:37:e4:42:08:ba:3b:af:7f:36:01:
94:11:de:a1:40:52:ba:d0:d9:3d:95:d3:1c:f1:f7:
6f:31:1e:7e:1f:15:26:44:49:14:b7:5e:cc:49:74:
ec:9a:f8:a7:9a:c4:a9:9d:08:a8:96:6c:83:68:bc:
14:32:0f:6f:44:f7:05:1b:6e:d4:d2:4d:dc:90:b7:
75:c1:79:72:02:a9:4a:f8:38:ac:97:9c:13:72:ed:
5b:f5:2a:70:54:69:0b:b2:89:71:3c:7f:6e:fc:00:
98:06:c9:12:17:a5:bc:9b:2a:eb:0e:a6:59:67:ad:
d8:bc:cb:b0:ea:6c:5f:10:bb:b7:29:8d:ce:d8:82:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:94:09:5D:5F:4F:FE:AE:5F:F6:9F:EC:D6:DA:C3:F0:F9:3F:60:50
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5f:a3:1c:14:67:0f:1c:89:c7:ef:cd:1b:39:0b:c9:13:6c:
68:21:35:73:79:01:c6:83:95:5e:8f:07:96:e2:59:31:5f:dc:
35:e9:6d:8f:9c:1d:b2:a2:22:8d:e8:ea:b1:f4:fd:8c:57:16:
9c:e6:71:3f:cf:22:ed:c3:ac:4e:8e:ef:f2:16:8c:29:30:5d:
72:fb:8c:dc:b8:b4:b3:11:3b:65:5c:67:d1:55:1f:e4:de:50:
42:d1:fa:a9:6e:2b:9d:55:9d:c1:20:6d:77:dc:a9:1d:6a:2d:
4f:60:c2:f4:de:e9:62:e9:a8:03:c6:a4:bc:fe:ec:a3:eb:60:
0d:72:c1:4d:42:cf:89:3e:9c:59:cc:4b:1e:ff:ba:8d:78:e6:
8b:77:df:9b:58:33:76:97:73:05:6d:4c:df:d4:01:c9:df:9b:
7b:e3:3e:bf:0d:4b:4d:5f:d3:8a:97:52:5b:5a:a4:75:e5:ac:
10:e6:c6:b1:ee:70:8b:f1:ee:1e:0f:9c:3e:86:3e:09:e7:60:
16:5e:a2:79:2c:6d:2a:c1:50:20:7f:9e:b6:eb:b3:9c:c9:d3:
17:0e:47:b6:0c:ab:28:97:62:20:25:dd:60:c9:c9:ac:cf:69:
e2:c1:be:a1:cf:87:66:ae:80:fa:82:fc:20:af:3a:ef:04:e9:
15:89:c0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:28 2025 by rpki-client