Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: ZGuWTma+9Gq6Vf/EqND0JgPgxyAYCBpbBMd6shY/Cmg=
Subject key identifier: 24:2B:7D:10:BB:37:F6:6F:2C:3A:55:98:E5:4A:99:AD:03:5B:05:C7
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 019644B23A31FE49719DC9F3A302ED57DA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 14FE
Signing time: Thu 17 Apr 2025 17:00:52 +0000
Manifest this update: Thu 17 Apr 2025 17:00:52 +0000
Manifest next update: Fri 18 Apr 2025 17:00:52 +0000
Files and hashes: 1: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (hash: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=)
2: 2DxKgawRIdwPHYKPKO80oLEjXnQ.roa (hash: GkiqXgjmsGCVt8nP5qXPMp6hqSSrH1HiN32NDxCXRyM=)
3: CzOVrXq8s2rQFDCGaFJZ_xM7OZ0.roa (hash: 5XAPorQnylekwHM79ynLgJVh80voKy6A8YYVF6d1gL0=)
4: DpKy84xGq4bZRMW3bg3Qqscpy-g.roa (hash: Pghneqh0rqfe/wIbx3lltKoFinQFr3Xds6By1KC5GTY=)
5: Zf4cfRQ8Yb3zaonMniOY9mHCgZU.roa (hash: 7qovkktB6alfndSsebLaLeESbLcFDoOHnNh2I5l6SkM=)
6: rJBUoTOBCbGpyq2LQ5qyqtlWDVk.roa (hash: OOOBfJlZtCKY/fNu/6lDyCNmP9uVM4ZIRjn3vJc9saw=)
7: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: R2qn17I8+SwG6curnNOFfa0wQSKmjE+dA4lRTyD5xy0=)
8: wz_TvTU1xF0eJ_9EwkVCuufFGFo.roa (hash: Vtdi4r4GuCz7NyZSMqwPceN5sJkZoRY3YKYSc4S4CjI=)
9: yDDPfOYkq9TvDo49z4rJ89YrUS8.roa (hash: h90+S4fhQ3iqdh42EvmGUJBw540N3+LmJjYWM7l7haw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:3a:31:fe:49:71:9d:c9:f3:a3:02:ed:57:da:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Apr 17 17:00:52 2025 GMT
Not After : Apr 18 17:00:52 2025 GMT
Subject: CN=242b7d10bb37f66f2c3a5598e54a99ad035b05c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:c8:0e:8a:20:81:85:30:40:c4:85:2b:1a:
cf:38:6f:83:ec:e7:d1:35:fc:ee:5c:55:4d:88:98:
16:de:11:4e:6f:16:77:e1:e4:dc:dd:07:f6:f5:e9:
e1:8a:a9:88:e5:73:5d:42:a9:11:01:5c:d9:12:4f:
de:65:34:93:ba:37:2e:67:05:5c:bd:15:8c:e2:28:
8e:f1:12:20:5c:b7:b6:44:cd:78:5c:4e:8b:2e:56:
e2:b5:32:81:a9:2c:a2:06:98:1d:f9:86:fc:e9:4f:
4d:3f:83:5f:7c:f5:16:f2:98:43:f6:06:eb:b1:8f:
df:1c:58:76:43:be:9c:4d:d3:7c:ea:d2:97:87:fd:
3e:a3:94:82:a7:d8:f1:4d:52:3d:0b:b8:35:b6:59:
a1:a3:79:23:59:1c:e4:a9:87:e2:83:ac:ab:22:22:
27:f2:a3:7b:ea:0a:45:51:82:f4:bc:c9:97:32:0c:
af:b7:bd:a4:a8:ea:32:cf:38:23:da:c9:bb:8e:86:
09:05:70:ed:bd:55:0d:c4:61:d3:24:a5:61:f4:55:
14:b9:40:72:a6:e2:f5:76:5e:8e:b1:37:b4:36:a3:
3a:c8:4c:71:49:c4:c1:c1:b4:aa:aa:b4:0a:bf:ba:
ba:05:39:46:1d:9f:38:97:87:ee:89:da:4d:b8:35:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:7D:10:BB:37:F6:6F:2C:3A:55:98:E5:4A:99:AD:03:5B:05:C7
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:68:d9:43:d3:83:99:fa:5b:29:8a:43:a4:1b:b9:8f:3a:15:
8e:21:42:0b:7e:a4:6e:c7:71:cf:87:42:da:cf:d1:fa:a0:f5:
04:4c:fc:c0:40:40:eb:1d:72:a3:60:6d:bd:54:6c:bf:fc:44:
a5:0e:b2:81:8c:29:d7:41:7d:a9:99:bd:b6:d2:ec:77:a7:bb:
58:99:05:b8:ab:ba:a9:e0:ec:a1:2c:a6:70:5d:7b:be:ea:cb:
05:d9:ea:fe:55:0f:d6:54:b3:95:6d:59:df:07:21:d2:0d:63:
6d:8c:68:5c:1b:d1:61:60:b9:27:e5:1f:5e:cd:d6:bb:28:68:
31:f2:dd:fd:f0:1a:b1:71:a6:bc:ad:a3:e6:f8:a0:1a:b4:a8:
a0:b9:66:90:ae:90:0a:d1:24:c2:01:b3:5f:3d:12:97:be:7f:
68:0b:7c:95:ac:d1:a4:24:4d:1e:3d:2e:0a:3d:62:4f:d3:fb:
12:0d:b0:16:23:50:63:f1:23:6f:9c:92:72:ba:8f:91:b9:7e:
b3:dc:a3:e3:8a:a2:8f:a9:15:f0:40:c7:96:0e:1e:24:05:a5:
eb:6f:44:07:b8:23:33:81:89:cb:43:8b:0d:7e:20:81:82:0d:
2c:dd:80:a4:00:79:2b:1c:9f:cd:7f:6b:01:63:fa:ce:14:58:
14:9d:a2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:24:58 2025 by rpki-client