Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier: MUmopT7cvR9xszdvCHi1iwtsZztl6lI9HsW6cbMwNzY=
Subject key identifier: 77:A6:42:BA:A0:4D:AB:74:AC:9A:A8:21:E0:BF:55:44:DD:88:FC:5E
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 019653B7024918C28E5ACED5BF22A757D27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 15:00:24 +0000
Manifest this update: Sun 20 Apr 2025 15:00:24 +0000
Manifest next update: Mon 21 Apr 2025 15:00:24 +0000
Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: t3O0UcaRq2+xDsAdtgsq8VF+r4NzoCgbvzaCbAeBNEQ=)
2: 4mphuMGYKre7KcVIZklqvnEwe9w.roa (hash: BDdrPj5npMilCe1H11h3z51bgzRRHnfwNgW8/PXQiwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:02:49:18:c2:8e:5a:ce:d5:bf:22:a7:57:d2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Apr 20 15:00:24 2025 GMT
Not After : Apr 21 15:00:24 2025 GMT
Subject: CN=77a642baa04dab74ac9aa821e0bf5544dd88fc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:cd:67:06:ff:11:be:b3:76:eb:55:9c:39:
da:e2:a6:7c:5c:0c:a2:f7:62:df:3d:ca:0c:91:91:
2a:d0:f2:fb:74:22:a8:10:c1:a9:3e:59:12:d2:fe:
13:e9:ad:2d:1e:f2:46:f5:0c:ab:e3:27:38:92:94:
dd:fa:13:ce:e8:07:22:de:21:39:f5:10:7c:e8:0f:
1e:d1:34:07:c7:73:cd:7f:f3:e5:f3:81:92:50:f5:
62:18:82:14:88:13:40:5e:81:fd:f6:0b:b0:05:30:
3a:63:4b:59:30:8c:34:c5:b2:a7:0e:72:7a:42:7d:
72:99:5a:11:95:ee:f8:f0:50:b4:57:93:25:98:fe:
fa:23:5b:12:23:07:ce:ff:45:f2:d7:d8:98:b7:98:
5b:86:cf:1c:9e:b8:59:19:c8:6b:d1:d8:5e:9d:58:
34:20:e6:f6:75:19:71:90:21:0f:64:eb:f0:93:be:
67:0b:eb:31:86:19:30:bb:c2:3f:5a:16:dc:d7:91:
a9:43:4a:2b:ef:4c:78:df:8b:1d:07:9a:78:bc:99:
30:4d:55:b1:d0:00:c5:96:c3:6a:04:ba:a2:4a:6d:
18:3e:73:d4:3c:6c:16:a7:60:1a:c3:c3:c1:cb:0a:
11:45:4a:8d:47:a9:6a:8e:78:d3:ce:91:17:bf:d1:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A6:42:BA:A0:4D:AB:74:AC:9A:A8:21:E0:BF:55:44:DD:88:FC:5E
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:57:0d:df:e8:5e:7c:cd:c5:0a:2c:bc:f1:72:0c:a2:51:9e:
1f:f8:f8:d2:bc:77:e5:e1:ad:fd:f6:93:f3:05:e8:c6:b9:cb:
82:7c:8b:8b:34:60:fb:b3:79:bf:e6:ae:74:a5:b3:e0:f2:23:
c7:b1:6c:48:0e:11:5b:92:b0:1b:38:33:62:ea:16:5e:49:f8:
17:04:e2:67:c2:f7:0c:46:f8:95:05:ca:60:b7:2f:28:c0:a2:
fb:16:0a:c4:da:e5:e4:9d:fc:8e:5f:c9:db:05:2b:b1:a8:cd:
7e:0a:65:4a:a6:1e:3f:d4:8a:2e:92:c1:db:5e:d0:63:23:e3:
f3:26:bd:c2:33:5b:83:0d:f1:9f:2c:96:83:2f:db:d8:73:14:
14:ab:c6:c9:b7:00:57:e6:52:94:79:26:66:46:4c:e8:b8:c4:
72:3e:4d:24:91:51:f0:49:00:48:c2:c5:28:50:95:a0:03:6b:
91:4b:1d:4f:95:8e:28:64:5a:ff:2b:d0:24:72:f9:43:5b:85:
44:ae:02:25:3d:e6:4c:75:b5:a6:a3:b1:d5:c7:62:c1:a1:f7:
57:ff:f4:1b:e3:de:18:06:78:b6:3a:40:45:88:09:41:be:f6:
f5:62:41:54:17:07:3d:9e:f7:cd:46:db:73:d5:0a:a1:3b:b1:
86:76:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:15:12 2025 by rpki-client