Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier: 1O8O4i7QOTNhC8tIBvgs5vX5X609ampXc0y5kZn0suA=
Subject key identifier: C8:ED:A5:3C:A2:0B:FA:0C:81:9A:6A:1D:07:A2:9D:E9:82:3C:72:D5
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 019651C94991B95F8092583B439688AC0227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 06:01:08 +0000
Manifest this update: Sun 20 Apr 2025 06:01:08 +0000
Manifest next update: Mon 21 Apr 2025 06:01:08 +0000
Files and hashes: 1: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: 37tUCV6GrRD4oqv/FgJ5oz6ifznzZHSd9vWwpK4bpQA=)
2: xV2TYyNPjWPupKmb43ad00Tt3n8.roa (hash: +ey9CZvGJrxa71wfksSgu55Jb8r1NMsse9tFxoel7Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:49:91:b9:5f:80:92:58:3b:43:96:88:ac:02:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Apr 20 06:01:08 2025 GMT
Not After : Apr 21 06:01:08 2025 GMT
Subject: CN=c8eda53ca20bfa0c819a6a1d07a29de9823c72d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:f5:ab:1c:cb:15:68:62:17:32:6a:cb:09:
e8:10:65:9a:13:f9:05:72:72:84:2e:87:f2:e6:ad:
ae:5d:35:24:5f:58:7e:70:8e:19:94:f1:eb:03:dc:
ba:8f:da:10:64:bb:b5:82:1d:26:3c:9a:b4:73:15:
82:f6:53:ae:40:18:c8:08:39:e4:d6:4c:24:85:99:
8b:05:05:98:f2:88:8e:4a:f9:5f:59:9c:f0:b4:a5:
b6:11:bd:8d:f5:e3:fc:50:46:f9:df:eb:db:84:0f:
96:3d:d3:5f:1a:41:9a:e3:2a:bd:9d:01:d8:5a:9b:
8c:2c:ad:91:bf:e6:57:23:3b:2c:e7:54:30:35:38:
04:00:89:39:0a:c5:4b:92:32:53:62:9a:f0:41:12:
2b:d5:ed:b3:15:ca:26:f4:61:d7:56:df:cc:d9:eb:
5d:d8:64:10:21:39:01:ca:c4:7d:4d:70:86:61:af:
69:43:9f:10:19:ad:09:d1:b5:bb:6c:23:63:c3:9b:
f5:6b:36:2b:00:03:9e:53:bc:1d:e4:40:41:a6:c4:
78:5a:f5:c5:c2:4b:14:e3:74:0e:80:4b:ce:b3:6c:
a3:93:59:2d:f5:0d:85:b0:31:63:52:ee:19:df:a6:
5e:11:b6:b5:8c:8d:b4:8f:70:6a:55:66:ee:15:bb:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:ED:A5:3C:A2:0B:FA:0C:81:9A:6A:1D:07:A2:9D:E9:82:3C:72:D5
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:a9:4a:da:21:70:70:ae:54:41:0e:f1:76:d4:db:49:19:9d:
a6:53:bb:70:97:f8:d7:3b:33:0b:8b:ce:fa:a8:36:7f:74:d3:
63:e7:6e:d7:02:a3:ba:dd:63:9f:8c:e0:c5:51:9a:01:f8:ea:
f8:cc:a3:a3:c6:c8:de:de:79:a8:fe:40:bb:e1:a8:98:3d:94:
1e:26:3f:fe:2c:03:d0:2b:fc:8b:71:75:61:10:66:12:6b:bd:
55:35:70:0c:25:d9:ba:91:c5:06:eb:49:56:4e:65:dc:bc:27:
a1:33:49:a1:54:d9:a9:d6:30:d6:a2:1d:44:f3:0b:ca:97:5a:
2e:23:33:20:d8:76:5f:f4:0e:9a:0b:e2:63:07:6c:46:96:aa:
ac:fa:f2:a3:cf:53:6f:f7:00:96:33:de:fc:45:09:f2:f3:9f:
9b:e6:96:bb:1f:47:66:4b:65:d3:d2:3f:b2:84:4f:b4:fc:a1:
74:39:29:f6:01:a8:6b:63:2d:88:de:b4:34:ee:45:bf:26:15:
dc:69:a3:81:6f:9f:63:8e:ea:a6:c9:b3:ce:f8:ee:0d:c5:8f:
54:7f:76:e0:99:c5:12:1a:69:d0:61:3a:ba:2d:b7:9d:3a:67:
38:b7:8f:1a:83:76:8b:59:86:b5:b3:a7:6d:9c:bf:2f:60:f2:
66:47:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:50:09 2025 by rpki-client