
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier: ffLSN/wSKX3+NetPRPW7nfAJzy+puaxEtD6OyljSXQg=
Subject key identifier: E7:56:F2:39:39:27:70:49:7A:05:72:DD:73:5E:B0:2B:AE:DF:CB:52
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial: 0196515B446D236EF5A1FBC63F2FD529F440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 04:00:57 +0000
Manifest this update: Sun 20 Apr 2025 04:00:57 +0000
Manifest next update: Mon 21 Apr 2025 04:00:57 +0000
Files and hashes: 1: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (hash: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=)
2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: c3atYPadhgZw5csblFhMYizBYESIYg8aJ0KxB7uMCFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:44:6d:23:6e:f5:a1:fb:c6:3f:2f:d5:29:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Validity
Not Before: Apr 20 04:00:57 2025 GMT
Not After : Apr 21 04:00:57 2025 GMT
Subject: CN=e756f239392770497a0572dd735eb02baedfcb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:e3:31:23:e4:9f:05:ff:78:23:38:34:b8:
8c:13:c8:cd:38:ba:82:c3:7f:a7:d4:63:c7:8f:8f:
ac:b4:a8:8b:66:9f:a2:02:52:fc:7e:c9:ce:b9:d7:
81:92:a0:5c:70:16:f8:4f:12:0b:c2:4d:84:24:38:
3b:04:57:2e:2b:fc:dd:f6:7d:32:32:32:e3:d8:38:
a3:fa:82:8f:6d:b1:79:28:cc:3b:fa:67:16:b5:ac:
35:3d:90:38:c2:2d:01:d7:01:68:1f:d9:80:99:a3:
13:bc:91:44:28:e1:30:59:07:4d:c3:b0:49:eb:91:
1f:f3:98:50:8f:e7:5f:0a:bc:8a:2a:2a:66:2c:e9:
bf:bc:00:4e:fc:2e:eb:1a:1c:3d:15:38:8e:ef:6f:
f7:d4:c4:45:5b:90:55:f0:86:33:9e:44:3c:65:60:
9e:b9:64:8d:d4:54:07:62:62:a0:92:a3:07:3b:4d:
89:81:ea:a6:d1:b1:1d:61:53:63:c2:fd:c7:57:24:
f5:56:94:9e:12:2a:99:db:9b:04:06:53:ae:fd:51:
c9:0d:b1:cd:6a:c1:12:82:48:65:c8:f7:38:ad:57:
c8:15:da:d0:1d:a9:de:ca:67:81:a4:d6:1f:6f:0c:
aa:da:03:41:c6:14:1b:c7:70:fc:98:c2:b7:14:c8:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:56:F2:39:39:27:70:49:7A:05:72:DD:73:5E:B0:2B:AE:DF:CB:52
X509v3 Authority Key Identifier:
keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4a:ad:37:54:2f:8b:ea:cd:0c:d4:15:e1:78:02:11:b6:ac:
cf:50:00:59:4e:7c:0f:8c:22:0a:c4:53:24:9e:05:84:02:63:
9b:86:19:46:95:1b:1c:df:32:b1:eb:23:ea:08:ad:6a:fd:88:
a4:92:ce:58:48:f4:14:db:76:48:3e:fb:e2:d5:a6:e6:7f:07:
ed:f5:72:45:d6:75:f4:fc:97:29:0b:3a:2f:4e:b8:c4:20:c9:
e0:4d:bf:2b:a8:2c:ea:c7:b4:e7:c7:22:0e:9e:ea:16:12:9b:
88:fa:1a:26:2c:b1:67:ee:6d:f4:f2:35:6a:0f:47:ba:f3:ef:
ea:cd:e4:7e:ba:ad:de:0b:b4:1f:51:98:1b:1a:6d:00:a9:d9:
97:50:d0:f7:ce:6d:ae:8b:b3:df:98:c4:0a:08:41:95:04:43:
d8:6b:a8:00:9a:b7:87:cc:bf:85:04:31:8b:6a:b5:94:ca:2e:
f5:d8:6c:8e:1b:40:0d:4a:a7:4c:6f:02:d9:8f:99:21:f5:9d:
13:39:c1:99:31:f5:78:8e:e6:ad:f4:58:47:d0:9e:42:17:94:
d8:fa:80:2c:70:29:41:f5:52:ab:d7:f4:61:7a:4e:21:15:d8:
a9:c9:d0:fe:41:c5:d8:01:93:0f:db:c8:8b:d2:a2:51:b0:6c:
d5:61:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:43 2025 by rpki-client