Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File: A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier: ER3v5Gd7WWszT2kFz+0gleKOQn4tinOiJaD1PC1ja5U=
Subject key identifier: 3E:E0:95:7C:1B:9E:04:AC:60:1C:12:CB:8A:7E:D2:3F:4F:0E:BE:08
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 01964331955129DF4CAB2BFCC4E19E26E6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 10:00:44 +0000
Manifest this update: Thu 17 Apr 2025 10:00:44 +0000
Manifest next update: Fri 18 Apr 2025 10:00:44 +0000
Files and hashes: 1: 8uFEs8KT2lHNTf9FsmJqqvY7o28.roa (hash: vboc19xwSNPRyM8I2dQ1/VWhvxJAqCUk+Ws21D+P2qM=)
2: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: gCbtje7xbEXGdKHGXgABGbq1jNjmJAKfQb+xJvaLvVU=)
3: JaJTfkcMlPavkQgIWd6Q5PErN44.roa (hash: xdZi+om1DwYfwvuK4ikXRudvdwfTqYCO5L9ilWGS09U=)
4: jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa (hash: 42cb4s8kzaDp+6oFZFM5NFuRsfHrfiqhUgjsGF12wb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:31:95:51:29:df:4c:ab:2b:fc:c4:e1:9e:26:e6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Apr 17 10:00:44 2025 GMT
Not After : Apr 18 10:00:44 2025 GMT
Subject: CN=3ee0957c1b9e04ac601c12cb8a7ed23f4f0ebe08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:13:5e:1d:5e:f0:6e:07:52:13:89:96:09:
b6:ae:65:8c:22:cc:60:68:11:f0:6d:d6:13:07:6e:
52:b9:0c:15:e2:0f:d0:9f:bd:8d:38:28:68:69:9f:
ce:d5:be:70:60:36:49:3c:72:17:0b:24:cb:9d:fa:
6a:b9:37:f8:fd:de:84:81:9e:99:7a:9d:a2:b9:a8:
8f:7f:49:99:9e:83:24:3d:f3:16:07:55:99:07:58:
2b:85:84:f2:c0:dc:bb:3a:e2:63:dc:bc:fd:1f:00:
a5:d0:61:de:43:36:28:71:ea:14:d3:e2:00:49:83:
d8:9c:cf:02:5f:f9:fd:9f:67:d5:31:a6:63:7b:c6:
44:4e:5e:1a:bc:ec:d6:2d:34:c8:d3:e6:99:e9:c6:
1e:8f:24:e7:36:84:28:7e:f1:02:4f:2d:e5:ee:21:
8a:a5:8b:3c:34:73:9b:3b:2c:59:17:a1:ec:34:50:
28:3c:cc:66:be:31:7c:e7:b1:1a:00:2e:de:29:c9:
7e:8d:85:5f:a2:5b:52:d3:d4:22:64:8c:20:b9:2c:
50:ff:f1:d1:d2:75:8b:d5:9b:16:14:2e:bb:38:9c:
12:4f:9d:a5:92:45:56:10:89:f7:e7:14:af:22:2a:
6a:54:92:46:c4:93:3e:ee:ea:89:46:a1:93:73:7c:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E0:95:7C:1B:9E:04:AC:60:1C:12:CB:8A:7E:D2:3F:4F:0E:BE:08
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e4:dc:cb:97:f7:6d:d9:82:25:d7:e1:cc:8c:ad:c4:50:4f:
18:41:61:ea:64:ea:e4:c1:e1:e6:9b:ad:e4:8d:c9:e4:1e:5f:
98:9a:4d:25:d7:43:85:f2:4a:a3:76:41:42:d6:4e:8d:0b:6e:
79:04:fe:9d:12:d6:96:2c:eb:fb:15:dc:75:d3:47:b4:6a:e2:
20:89:6e:1d:d6:e8:ac:57:96:8f:a8:39:65:8e:2d:18:96:e5:
d6:d6:82:73:2a:84:1b:66:66:29:ee:08:86:cc:a3:ec:9a:3c:
39:fc:73:7c:e8:e0:66:9e:cf:c3:32:f1:3f:21:8d:b1:18:1e:
a2:f4:1a:80:f2:0e:4c:fc:d1:65:72:2a:67:bd:43:9f:bd:3b:
fd:9d:c9:22:d1:68:a5:9c:10:46:84:52:83:25:1c:31:91:4e:
1d:7c:3f:fc:65:5b:3f:3a:f5:cb:a7:30:3d:56:65:0b:7b:c6:
ab:4d:c2:c7:69:69:24:7f:bf:ee:17:f1:68:6b:e1:9b:e9:6f:
18:ef:ec:39:ad:ca:be:75:d5:d8:fa:23:4a:fe:5b:93:bf:fe:
05:6c:5b:15:2d:ac:92:58:31:9d:71:9d:97:a7:82:73:3a:3b:
1b:66:f0:66:77:31:a8:ab:b6:81:50:81:ee:e2:33:0e:cd:f6:
3e:96:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:32:31 2025 by rpki-client