Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: MvXvfCJQMr5Km/D/7NvvWs+WyrT1SaY6XRffuYYpjUw=
Subject key identifier: 20:33:7B:C6:F9:40:7B:A1:35:75:EC:F5:58:62:FF:C2:77:67:5D:1B
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 019645569BE07216E104D3BBA81D3144D803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 20:00:26 +0000
Manifest this update: Thu 17 Apr 2025 20:00:26 +0000
Manifest next update: Fri 18 Apr 2025 20:00:26 +0000
Files and hashes: 1: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (hash: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=)
2: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=)
3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: CoP1Ht0n9t/emLoUXSKxgMa/bo/NY6w9tg4JUe49YZA=)
4: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:9b:e0:72:16:e1:04:d3:bb:a8:1d:31:44:d8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Apr 17 20:00:26 2025 GMT
Not After : Apr 18 20:00:26 2025 GMT
Subject: CN=20337bc6f9407ba13575ecf55862ffc277675d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:59:2c:d7:50:b8:fb:84:98:9e:00:1f:e8:7c:
d5:a1:d5:b4:9c:92:22:90:cd:1c:62:33:35:9e:d1:
2f:51:0c:ae:97:44:11:25:62:37:ff:5a:ca:6e:17:
1d:b4:ea:89:38:4b:56:21:9f:b4:31:6b:e5:f8:df:
13:24:5b:5e:d1:3f:77:6e:c9:dd:87:4f:e7:7f:d6:
19:b8:7f:5f:09:5a:b3:e0:e9:f0:df:19:10:8e:9c:
9b:30:cb:c4:5d:00:dc:69:69:1d:2c:55:c9:9f:9f:
d4:23:fc:df:a0:52:4c:13:ed:89:b6:c7:56:21:df:
9a:6a:4a:3e:d0:52:14:a4:e7:58:38:f6:cd:1a:ce:
d3:eb:2b:9c:e5:94:15:10:1f:5b:f3:f5:5b:03:11:
b3:d4:38:1a:85:3c:df:a9:c8:26:07:f7:ff:b0:d6:
c3:1e:e4:ae:db:b2:fd:ac:07:1c:0f:65:32:8a:57:
af:41:3d:c3:ee:e5:65:6d:5a:76:5f:3b:a7:6d:92:
c1:76:16:3e:44:47:20:0d:b3:1a:25:0c:3a:03:d4:
17:3a:38:78:c8:b2:5b:d0:93:9c:9c:ae:b5:63:49:
09:d0:e5:7d:b3:4d:b7:9a:3d:07:a9:18:23:60:39:
c1:55:a2:b1:ac:d7:fe:65:35:15:50:44:47:ee:b1:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:33:7B:C6:F9:40:7B:A1:35:75:EC:F5:58:62:FF:C2:77:67:5D:1B
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:22:86:8d:ac:6f:31:39:82:f7:df:94:cc:5b:98:74:bc:b7:
23:20:84:dc:03:19:1c:04:a8:94:10:46:bd:34:92:0b:3b:85:
3a:34:d9:b4:7e:ac:56:9c:48:91:5f:f4:1b:3a:84:67:65:65:
a7:3b:2c:86:c7:94:91:37:1f:c7:71:8b:0a:13:85:d0:f1:02:
fe:3c:e0:d6:27:f2:28:97:0a:04:24:c7:53:82:7b:97:df:39:
bf:7b:41:33:69:01:c3:04:0f:d6:58:b4:f6:7c:e1:4c:69:d6:
ff:55:98:90:c0:dd:c8:89:7f:ad:90:70:51:f2:74:c2:88:ee:
cb:5d:93:31:cc:fb:f6:94:81:7a:8e:ae:58:94:44:42:cb:4f:
b0:d1:ea:40:ce:3d:ca:cd:99:93:cd:75:48:7c:80:c9:bf:4a:
2f:b0:04:f8:59:67:bc:c1:c5:43:af:d3:e3:0b:17:ad:4c:cb:
a8:28:ed:74:e6:62:9d:9c:15:c8:0b:79:1d:98:a7:a2:9a:a5:
5c:a9:39:f8:fa:6d:33:14:3e:35:a1:e4:bb:81:8f:28:18:50:
c3:0b:bc:da:1a:c6:50:30:5b:b1:52:38:64:02:ef:f3:9a:72:
97:25:bc:cd:d0:a1:94:85:8d:46:30:10:5a:2f:43:25:77:75:
03:7a:a0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:09 2025 by rpki-client