Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: /pm/RMfWnEN2Jaj0JoqOm94SnuFlUjxkjk2HNPj+t+k=
Subject key identifier: 1A:82:C6:39:48:33:72:70:68:49:77:6B:BD:29:F3:12:DB:AE:4B:23
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 01962C055FB87272FC2127A411533956D728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 14EA
Signing time: Sat 12 Apr 2025 22:01:11 +0000
Manifest this update: Sat 12 Apr 2025 22:01:11 +0000
Manifest next update: Sun 13 Apr 2025 22:01:11 +0000
Files and hashes: 1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=)
2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: 5SodUY4KkhfEbhJDi7aEeZULT9xPxsYMO0clHlD47Xk=)
3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:05:5f:b8:72:72:fc:21:27:a4:11:53:39:56:d7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Apr 12 22:01:11 2025 GMT
Not After : Apr 13 22:01:11 2025 GMT
Subject: CN=1a82c639483372706849776bbd29f312dbae4b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:47:dd:b1:32:33:99:89:43:b3:ba:79:ad:
08:4c:fb:40:e0:1f:1c:a8:4d:b2:3d:73:8b:59:51:
f2:a9:10:1e:69:f4:24:66:30:75:d8:39:e7:fb:5b:
27:e3:30:7e:a6:58:dc:fe:22:4d:a1:4f:cf:b8:46:
14:a8:d6:9c:b7:e3:54:98:b3:fc:d3:fb:03:a7:6b:
75:e9:dd:d5:3e:57:0a:7a:85:c4:2e:d9:84:53:8e:
32:6e:e7:cb:49:d8:5e:4d:aa:5c:24:25:86:fa:15:
4d:b3:8e:89:03:79:1e:e6:5c:cb:1e:70:6d:2f:c4:
36:d9:5e:d1:29:c7:c4:49:d7:d8:db:1c:8f:c0:e1:
bf:36:27:aa:49:5f:42:d8:fa:ff:45:08:eb:7c:55:
af:04:22:86:09:81:99:cc:c1:ad:1d:21:bd:50:ce:
ca:ad:09:33:9c:49:52:37:1c:33:03:bb:35:e5:db:
35:e8:ff:81:3e:61:73:4b:d5:2f:73:8b:b5:2d:23:
ed:0d:04:a8:6a:aa:2f:a1:98:d5:f8:d4:ce:cf:e5:
c0:7b:6e:84:5f:ff:65:b8:fa:20:2f:62:be:41:3f:
4a:93:59:b9:82:25:8f:be:06:69:d3:71:3a:f2:79:
b0:6a:11:b8:fb:f5:38:82:6a:c1:8f:af:7d:3a:5f:
a8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:82:C6:39:48:33:72:70:68:49:77:6B:BD:29:F3:12:DB:AE:4B:23
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:13:05:c3:0b:25:08:57:0c:fc:d7:3d:52:b3:f6:e8:8b:ac:
13:6a:68:6c:0b:15:b9:9a:51:1b:a9:4e:c1:e4:43:73:e5:a9:
5c:21:7b:9d:73:3e:66:12:a8:23:5f:30:e9:57:cb:43:38:41:
fb:9c:18:7a:9e:07:3a:06:46:b9:c0:a4:44:85:52:aa:01:66:
32:bc:d3:0f:03:8c:10:b2:a3:4f:36:33:dc:92:ed:d3:64:6f:
3d:38:c6:f7:b6:a9:24:c0:06:5e:40:af:0c:86:c6:81:3d:17:
b4:4f:4a:d9:f7:06:b4:6e:14:a5:7d:e9:77:c5:c4:22:14:f0:
9e:ee:b1:ef:ad:d1:f8:c2:9a:fc:5c:d1:ab:c5:ba:17:61:18:
ea:34:62:8c:44:fd:b7:08:ab:35:f6:5b:45:ff:76:d5:ae:f7:
af:19:eb:22:39:25:a0:f1:01:e1:21:0d:12:cd:04:54:21:dd:
2d:d4:b3:59:5b:5c:42:e9:e9:d0:b1:f6:05:31:c4:a1:36:b0:
6c:d9:64:02:04:a8:a8:7a:48:bf:13:1b:09:b3:1a:77:87:5d:
27:59:4e:15:fd:d2:84:61:a0:5b:61:d5:2e:c6:02:25:cf:a2:
ec:09:1c:3b:f3:4e:d9:2e:b3:ce:13:3a:68:c0:67:8a:ab:1b:
1c:08:48:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:37:59 2025 by rpki-client