Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: G/ivU0xBuIvgdZnF1oEn760k7odoaLswLdYMH3wrGiU=
Subject key identifier: 6F:14:14:15:6A:17:67:27:1D:8E:81:4B:2B:14:D9:58:C3:18:76:2C
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 01964BC666B7E014A7978BF1368E6286FE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 1426
Signing time: Sat 19 Apr 2025 02:00:15 +0000
Manifest this update: Sat 19 Apr 2025 02:00:15 +0000
Manifest next update: Sun 20 Apr 2025 02:00:15 +0000
Files and hashes: 1: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: oIF4XKu0wNDaeXN735iTKLI99HyISLrsWOo67xQ1Fyg=)
2: qtSiJdqBkG0uo9WVYHWv-Gpf4SI.roa (hash: tDTpVD4J8FxzW7VK20T8qWOQjmWt3jizwnkYWluPqRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:66:b7:e0:14:a7:97:8b:f1:36:8e:62:86:fe:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Apr 19 02:00:15 2025 GMT
Not After : Apr 20 02:00:15 2025 GMT
Subject: CN=6f1414156a1767271d8e814b2b14d958c318762c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:e4:7d:c0:99:95:34:fd:ad:0f:59:f4:5b:
09:68:2a:49:dd:d1:91:02:af:31:91:40:5d:ca:57:
0f:fd:68:04:5d:0a:59:2f:d0:59:5a:ee:15:b3:09:
e3:ba:af:dd:b7:b8:1d:52:d2:21:79:76:95:c7:1f:
6d:a1:cf:a9:53:5f:76:f9:7f:8a:12:fd:64:58:fd:
40:51:8e:03:98:de:52:b9:e2:e2:ac:b2:f2:70:1d:
63:fa:6b:ca:c8:19:a5:46:a0:f0:f1:07:82:f4:15:
de:d9:e0:89:0b:2b:8a:e7:88:f8:8a:5e:31:c9:f5:
f7:8a:e6:7a:ca:8a:41:70:49:ad:c7:9c:1f:34:82:
40:f1:31:69:80:14:99:02:91:1d:f3:5c:09:fb:a6:
e7:31:0a:cf:78:cd:6f:e6:1a:e9:25:d2:f5:f5:49:
3c:00:14:03:97:96:ec:59:bf:7e:fb:82:c2:e0:33:
c4:c6:9e:20:1b:04:7a:76:72:40:a3:23:ca:a9:95:
9b:b4:5d:85:1a:ce:85:e9:82:04:b8:c0:74:c6:79:
81:a2:6c:2b:e5:0a:af:5c:c0:58:e8:c4:e5:13:f6:
1b:b0:8d:26:0c:3f:74:61:f0:9e:d8:68:c9:c3:99:
fe:75:2c:f0:16:8f:87:0d:19:1c:b3:c0:e4:8f:3c:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:14:14:15:6A:17:67:27:1D:8E:81:4B:2B:14:D9:58:C3:18:76:2C
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e9:94:2b:6f:33:02:f3:df:1a:5b:49:1d:ce:60:c7:54:3d:
27:4e:29:7c:da:d5:4b:a5:7a:cb:fd:af:29:9b:59:6e:8d:67:
d4:8f:86:de:29:d3:2b:69:04:88:6c:54:63:4b:cd:50:d6:62:
f8:90:63:1c:7b:a9:94:26:ad:f8:cb:7a:51:ef:bb:a3:1c:1b:
c8:8e:19:fc:f7:8a:f5:ac:6c:07:8d:d6:8b:39:60:8b:03:31:
f3:81:f9:97:b6:09:14:48:d8:1b:7b:d0:be:2d:ef:3b:0f:23:
50:95:f2:7d:ce:79:be:6b:e1:fa:6e:79:d6:e3:e8:4d:e8:c1:
5d:fc:8c:77:0e:af:9e:fb:05:0c:92:79:04:f8:a0:96:a5:0c:
b1:4b:8f:26:1f:fc:3c:9d:3e:c2:60:d6:39:b1:c2:fb:39:84:
94:42:4d:8a:cd:09:f5:4d:e1:df:e9:47:98:4b:9c:1a:42:f2:
46:b5:be:f9:3e:a6:3c:8d:05:5f:bc:ff:d1:67:61:96:33:20:
1a:65:34:8b:3f:40:5a:6c:dc:d0:ba:c0:ab:92:97:42:ae:34:
93:a9:33:1a:85:4d:06:51:f7:7b:97:ed:2a:d5:14:7a:c3:51:
2e:ac:05:d0:3a:21:ea:5b:fa:59:fa:bd:92:02:aa:ac:e5:99:
be:8b:d1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:10:53 2025 by rpki-client