Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
File: t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft (raw, json)
Hash identifier: CMtyGSmj2xTV6Zigq19kdnousPzKqCu+R5XYjrtHWLg=
Subject key identifier: E6:BF:8B:E6:12:97:FF:A7:10:DF:E0:92:3D:E8:69:E7:CB:0E:35:B7
Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
Certificate issuer: /CN=b780b3b9e096221629fe47e102ac522da03979c4
Certificate serial: 01965500703244085C7AF1683510DFDFFC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 21:00:14 +0000
Manifest this update: Sun 20 Apr 2025 21:00:14 +0000
Manifest next update: Mon 21 Apr 2025 21:00:14 +0000
Files and hashes: 1: BHkKvb2qZLeD_4QIPrmVYJe4E6w.roa (hash: 4HUs5FjtfJoQCq5RfZkLp2netiRG+jQlol4wXGJfij4=)
2: t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl (hash: vn4H3GsrxLvZ1GYtsPkFAymtm9vnaPK8IIwlUflVwrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:70:32:44:08:5c:7a:f1:68:35:10:df:df:fc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4
Validity
Not Before: Apr 20 21:00:14 2025 GMT
Not After : Apr 21 21:00:14 2025 GMT
Subject: CN=e6bf8be61297ffa710dfe0923de869e7cb0e35b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:a3:fd:bd:47:69:36:1c:2b:62:7b:db:76:
54:95:82:08:c0:7f:ca:49:10:91:a5:5d:4c:c4:db:
b7:6e:9e:fc:ab:6a:4c:9d:e8:73:64:c0:a6:75:63:
e4:09:f3:29:ed:7b:9b:61:8a:63:f1:d5:1c:b8:ae:
65:3f:04:e8:45:99:ec:59:2e:d3:4c:57:c5:7c:2e:
68:9f:d7:b6:2c:5f:6d:24:78:65:18:bb:92:fb:3c:
0c:b7:0e:4f:22:4d:49:88:31:f1:6e:6c:15:4b:c0:
af:88:5c:44:67:03:c7:90:be:c7:87:cc:e6:8f:75:
c4:b8:dd:c3:69:a6:3c:49:a4:e4:e9:91:93:7d:38:
0d:23:fa:f6:11:9e:7b:f7:88:09:01:65:03:94:8f:
be:61:59:18:95:ca:fe:69:94:18:4c:51:6d:58:75:
98:95:7e:0f:1d:63:85:53:05:d4:ea:9e:dd:c1:3e:
74:5a:05:3f:28:60:24:1a:34:c5:d0:ea:b0:7f:fd:
b9:55:6b:73:c5:eb:c0:08:a7:33:06:cf:f9:53:8c:
2b:ab:93:9b:f1:82:cb:77:5b:e1:e4:ba:92:5f:33:
77:e1:ba:75:c2:3f:8d:fe:ad:f6:49:2e:6f:14:3e:
43:44:c8:98:7c:1d:8e:f0:ee:1e:8a:57:d1:65:7b:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BF:8B:E6:12:97:FF:A7:10:DF:E0:92:3D:E8:69:E7:CB:0E:35:B7
X509v3 Authority Key Identifier:
keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e4:35:28:3f:dc:e5:e5:0a:e4:bc:c0:1a:a1:be:5a:ae:99:
dd:a6:f5:2a:c2:d4:80:ba:c3:84:70:a1:2c:93:63:ad:07:96:
60:9d:0d:1e:93:d5:3d:e1:f9:d0:31:1a:2c:01:73:52:a0:67:
c7:b4:c3:e9:ff:de:53:86:e4:30:ce:de:1c:b8:5d:7b:24:38:
27:c3:64:e9:89:b8:30:6b:f0:ea:f2:c2:7c:fa:aa:68:a3:5b:
f8:4e:6b:e5:5f:e5:f0:90:ce:39:65:93:9b:63:31:59:09:33:
d8:c5:a5:08:63:92:52:7b:f6:b8:46:eb:47:ef:d4:a0:9a:86:
1b:95:e0:be:61:93:e0:6c:2a:51:95:44:84:a3:9e:f6:a0:97:
0a:19:b9:12:c4:35:61:bd:11:8d:27:52:09:10:eb:fc:af:b6:
f7:85:31:4d:40:cb:84:8f:c2:29:9e:cb:54:ee:43:a1:da:e5:
fb:9d:c5:c3:7e:3a:49:74:80:97:8d:1c:e9:1a:a2:39:00:a6:
7d:da:a0:db:d8:67:77:bd:a5:e4:02:11:fe:0e:58:dc:bc:61:
2f:e7:76:d6:77:18:2f:8d:63:95:88:e1:e1:e9:a2:00:3f:00:
db:e6:7d:ff:a3:50:27:3a:1a:08:4e:b4:a9:a1:cf:e0:97:c0:
47:fe:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:46 2025 by rpki-client