Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
File: R60fV24_cbT2wzkfL6ND1Qi2se4.mft (raw, json)
Hash identifier: 7ISuPufE7JDMcEay4qghGBExyI9iTCJHVWouz0ICjOw=
Subject key identifier: CC:2D:AC:A3:03:8A:01:9E:AB:DE:49:91:D7:90:01:DC:C9:7A:48:1D
Authority key identifier: 47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
Certificate issuer: /CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Certificate serial: 01964E2325F3866B726AF4AE655C511AAEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 13:00:48 +0000
Manifest this update: Sat 19 Apr 2025 13:00:48 +0000
Manifest next update: Sun 20 Apr 2025 13:00:48 +0000
Files and hashes: 1: R60fV24_cbT2wzkfL6ND1Qi2se4.crl (hash: RPBAo18K04tynn2d5Qiu8wuDuKupCdCL367wjNCczME=)
2: aO3r11e9FzxFIAvzci6U1ugRCX4.roa (hash: RN1LPTFZ9dixQeq/j0V0Euzw3FqtnyCrfR7culnL03E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:25:f3:86:6b:72:6a:f4:ae:65:5c:51:1a:ae:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Validity
Not Before: Apr 19 13:00:48 2025 GMT
Not After : Apr 20 13:00:48 2025 GMT
Subject: CN=cc2daca3038a019eabde4991d79001dcc97a481d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e4:78:40:fb:ab:fd:f2:f3:e4:bb:4d:e7:a8:
11:fc:1b:c3:1d:20:4e:10:73:4b:79:fd:ff:5f:3a:
a8:e8:31:9d:99:45:56:93:a2:8b:06:f0:a2:26:82:
0f:6a:f3:9f:06:b9:95:a4:7a:c5:ac:d0:8b:e4:28:
60:b5:05:62:6f:70:ec:3d:b9:e8:7f:c2:94:45:bc:
84:f1:8f:5f:c8:29:65:23:0c:89:aa:69:ac:b1:6d:
d1:2d:ce:de:82:63:14:7d:06:8d:e1:89:32:e2:9e:
39:6f:df:c1:cc:b4:fc:ac:50:ac:9c:2b:b3:d9:2e:
e5:de:7a:95:7a:26:ea:07:9e:db:b4:fb:ae:d8:de:
c6:58:f0:31:95:98:44:47:43:49:84:b9:0d:7b:3e:
3d:b6:d9:8a:ff:93:8f:01:f7:1f:89:99:3a:79:92:
92:21:0f:94:75:2c:e4:a6:0a:98:0d:da:96:96:39:
e0:94:57:f2:a1:f8:ec:b4:d1:89:94:1b:e3:e9:36:
48:be:0f:ba:1f:cd:3c:45:49:ab:9c:fb:59:65:d6:
f3:c3:71:7f:1e:97:44:0a:76:40:66:ef:21:14:5c:
51:31:ae:e2:a9:46:f2:fc:58:ce:d6:95:11:63:52:
15:00:c5:62:01:5d:18:9f:a9:70:30:da:06:95:54:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:AC:A3:03:8A:01:9E:AB:DE:49:91:D7:90:01:DC:C9:7A:48:1D
X509v3 Authority Key Identifier:
keyid:47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b7:2b:44:3b:23:65:3d:a3:0f:2b:3a:77:97:2e:91:c9:64:
85:cc:a2:b2:c3:a2:0a:69:be:03:28:0d:f8:39:90:8c:35:f0:
cd:c9:0a:c1:d2:bc:db:bf:f5:03:2a:ab:cb:6f:43:3d:7f:d8:
fc:ee:0c:3a:1d:70:8c:08:b6:f4:df:14:09:29:a1:08:ef:8e:
56:7b:0f:ff:11:d8:28:84:aa:e6:4f:50:e9:b1:f5:a1:2b:90:
07:2f:8e:e8:6a:31:3d:97:42:99:ba:44:d1:d8:75:b1:92:d0:
50:7e:7b:9f:a8:24:22:ba:ed:db:ce:2e:fa:ff:de:f3:ba:6c:
cd:7a:f7:e6:0d:0c:ac:16:12:af:78:a5:44:d3:7d:cc:7c:d2:
7d:21:4f:c2:a4:d6:87:ac:36:26:1a:03:8a:ea:a8:9a:b0:e4:
e4:44:15:33:f2:9a:a7:d9:a5:2b:b4:2d:e4:21:94:f9:22:e8:
07:16:06:fe:3d:8e:8c:33:69:03:a5:df:3c:6a:2c:6d:25:a8:
51:18:4f:c5:33:28:22:c8:0c:b1:99:f2:35:61:41:f9:e0:e1:
73:d6:ff:f4:5e:04:6f:d6:d8:d5:78:df:ed:4a:1a:55:d2:39:
b2:88:97:fc:cb:17:06:6e:93:2a:76:51:a8:8e:b4:17:ae:07:
a3:ec:73:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:17:11 2025 by rpki-client