Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: 8YuBi8K+3UWgIkwGqSbQkHfeHXM8MWacsb758keEFyk=
Subject key identifier: 63:1B:B7:B1:C9:B0:EB:36:2F:71:E0:53:FB:4E:35:6A:5C:14:25:6C
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 01964D7E8AFDB5DE6D035E73FA639EDC1F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 10:01:00 +0000
Manifest this update: Sat 19 Apr 2025 10:01:00 +0000
Manifest next update: Sun 20 Apr 2025 10:01:00 +0000
Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: 87fbhOkg6upFCNIpRdqpI7q7CK/Up+35JEXPZj0Vlbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:8a:fd:b5:de:6d:03:5e:73:fa:63:9e:dc:1f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Apr 19 10:01:00 2025 GMT
Not After : Apr 20 10:01:00 2025 GMT
Subject: CN=631bb7b1c9b0eb362f71e053fb4e356a5c14256c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:a7:ee:98:94:65:a5:df:8d:5f:f3:42:69:
97:6d:4a:a9:24:cf:f0:d9:17:35:05:95:33:e7:40:
7f:3c:a1:31:bb:97:ee:1e:d5:4a:fc:0f:34:a8:89:
c7:33:3c:34:09:ad:ae:20:fa:2d:c2:03:0a:7c:25:
03:8b:d1:7c:dc:6f:16:83:42:2d:1d:33:3a:a9:ee:
08:53:74:8b:bf:41:8c:2e:c8:a4:e1:67:2f:1b:ff:
71:64:ba:f3:da:d3:f1:f5:b3:6f:b6:db:34:86:55:
aa:75:6d:ce:59:90:8f:74:ff:fa:61:c7:06:db:7c:
3f:d0:06:f4:47:d6:f2:0c:34:ea:c6:ba:c4:6b:35:
9f:d1:99:c1:6e:ca:34:e7:34:6e:ce:28:ea:22:2a:
05:b4:da:ef:1d:ca:81:1e:59:93:5a:34:6e:45:db:
cf:a9:48:da:51:a5:c8:af:5f:68:5c:74:b4:fe:1a:
4a:56:64:cd:9c:6d:50:36:94:67:3d:93:26:ac:e2:
cb:0b:6f:cd:77:4b:3f:04:4d:d4:3e:6e:e4:d2:4d:
62:05:22:c4:66:5e:0a:d1:16:e9:4c:36:c0:50:ed:
60:f6:bc:26:2f:23:00:b1:25:99:0b:b0:31:0a:23:
02:bf:da:ba:b8:fe:ae:a0:00:20:79:c0:7f:9c:de:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1B:B7:B1:C9:B0:EB:36:2F:71:E0:53:FB:4E:35:6A:5C:14:25:6C
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fe:b7:62:a5:14:82:8d:26:5c:25:2c:1c:16:14:75:44:67:
4b:43:2f:76:86:f7:48:b4:91:33:79:96:2c:0c:a6:e2:d2:9e:
27:62:e6:a9:4f:e8:bd:33:a4:c3:c9:82:1f:2c:c1:ac:16:e4:
f9:30:7d:18:98:18:ba:68:44:a6:03:0a:43:18:95:92:fe:97:
dc:8a:a1:a4:b7:ed:52:b3:df:82:55:c8:3c:1a:c9:54:e6:33:
de:fd:8c:82:1f:bf:30:de:9f:91:19:5d:2e:cd:69:68:64:14:
d4:c8:34:a7:1b:48:e3:98:50:f9:6a:fb:7e:e3:73:49:21:84:
ce:2a:38:f2:c8:d1:e8:9e:13:d6:86:01:b1:ef:54:76:a9:dc:
64:63:bb:04:e4:23:d7:ad:11:d8:49:8f:e7:23:b1:96:1d:b7:
ba:1e:05:35:2d:c7:0a:97:6e:53:b2:88:75:20:24:2b:d6:ab:
87:a7:d9:cb:fe:9a:dd:10:ab:1c:45:1e:cb:0b:4b:ae:39:f9:
5d:68:6f:22:ba:eb:9b:8c:33:ac:50:0c:5e:9b:86:f6:b9:c5:
01:10:a7:9f:dc:3e:0c:4f:2e:d6:9a:f5:2e:3c:b0:ce:d0:1e:
bb:73:46:82:73:a9:9a:74:54:29:56:15:1e:3e:6f:18:e2:b3:
9f:d7:84:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:23:00 2025 by rpki-client