Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: TbPMOG8qpxpS74LboRakFEMVrbBMuKD0Rdux6O8yyzg=
Subject key identifier: 79:47:39:0B:02:12:35:B1:7F:8C:AD:44:64:DD:96:53:76:E8:81:2E
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 01963EE69C56D3D1CC4C02CBBBA278ED8D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 14:00:22 +0000
Manifest this update: Wed 16 Apr 2025 14:00:22 +0000
Manifest next update: Thu 17 Apr 2025 14:00:22 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: em28N8rpQoB4QMhVAVtaSW8rOt9W5qvt+mqqIBwx2TA=)
2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=)
3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:9c:56:d3:d1:cc:4c:02:cb:bb:a2:78:ed:8d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Apr 16 14:00:22 2025 GMT
Not After : Apr 17 14:00:22 2025 GMT
Subject: CN=7947390b021235b17f8cad4464dd965376e8812e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:7c:1b:1f:a1:31:a8:be:a9:33:e9:77:f3:
c3:79:1b:85:b3:56:04:6e:1a:62:71:90:c5:60:2d:
6a:15:39:fc:0f:14:81:5b:47:d7:34:14:41:86:7c:
f8:0a:2e:7c:b5:8b:3d:fb:ad:12:c9:3f:00:e2:1b:
33:4a:65:bd:75:3b:94:ce:fd:be:17:4c:62:bc:5d:
3c:49:1e:9c:80:0b:d6:b1:7c:3d:87:d6:ce:79:d6:
e7:b0:90:8a:3e:1d:f0:95:29:3c:6c:a1:80:c9:3e:
0c:6c:5c:09:9f:ac:f2:17:93:35:11:8e:00:47:27:
4c:ad:b6:3d:4b:fc:62:29:df:02:78:9d:10:bc:71:
78:a9:44:2a:4c:0a:1f:9d:41:5d:c5:2a:62:cb:d1:
a0:09:ff:d8:ca:da:2c:fc:d5:d1:6b:85:a1:0b:5d:
86:59:53:0f:bb:d3:84:94:3d:f1:31:5a:fa:6c:82:
41:da:71:8d:81:51:da:e4:4f:39:95:b1:c0:31:7f:
82:4e:08:b3:ba:c7:42:dd:9f:86:30:40:c0:02:a0:
11:cb:e5:68:d5:11:76:fb:6f:43:27:46:7d:4e:77:
70:33:02:5d:db:82:bc:f1:17:95:89:5d:ed:0e:89:
9c:08:be:a8:54:ed:a6:11:96:4c:30:46:8b:5e:ce:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:47:39:0B:02:12:35:B1:7F:8C:AD:44:64:DD:96:53:76:E8:81:2E
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:97:49:d9:a6:fe:63:b5:cb:8a:11:50:43:51:3f:4d:4c:4f:
15:46:48:c4:33:d7:25:d9:ac:cc:f1:b1:78:9b:08:c8:f2:6b:
f4:f2:ca:4c:52:bb:07:7b:67:81:19:ab:37:1d:01:94:d8:9a:
4f:67:ef:41:94:e9:e1:47:50:ed:eb:df:7e:4f:6e:b4:6c:5c:
46:ce:68:f5:a9:71:77:60:58:4e:b8:7c:49:10:55:18:bc:ad:
9a:97:4f:7e:1c:94:2d:03:34:8d:f1:cd:65:6a:97:5d:46:0e:
a1:7a:ca:08:f1:53:00:99:2a:29:53:d4:25:f2:5b:a7:2e:24:
85:71:c3:cd:f8:e4:a8:4b:11:40:d7:bd:a3:70:ee:80:b4:ee:
cb:2e:56:5f:02:02:e3:7c:59:2e:c7:96:92:db:c8:a9:e9:e6:
b0:55:04:d7:b4:e0:cc:e4:8c:58:23:f7:fd:6e:4a:87:64:36:
bc:8d:81:fa:7a:7b:d6:11:c7:46:33:3a:f1:5a:0e:9c:e5:0a:
22:ad:7c:4e:28:04:d2:e4:7c:8b:57:48:9d:f3:11:7f:4f:dc:
45:ec:8d:92:7f:3e:42:5e:70:57:05:fe:03:bf:74:a8:0d:19:
df:4f:6d:0e:44:28:02:93:6a:df:b3:b8:e1:b5:d8:8d:a1:08:
c1:f8:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:57:05 2025 by rpki-client