Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: wp6lIEvM0nCoY1Ka9oPeyzhIB5OaCYIjl7LvjZEd5So=
Subject key identifier: 8B:84:B5:72:95:2C:81:8F:B7:96:06:4F:21:CC:09:04:CE:FA:13:54
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 0196556ECDAA9CFB1B77CEFBBFBBF3259DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 23:00:46 +0000
Manifest this update: Sun 20 Apr 2025 23:00:46 +0000
Manifest next update: Mon 21 Apr 2025 23:00:46 +0000
Files and hashes: 1: 6uqfHy5orm23cTKFvyLzjaOscrk.roa (hash: eSkR1Rx3FREDyMUFDl/Eczx/rYW2EV6fDcTDwEKXsM0=)
2: QHm-ELioCU7VmYr3xnJI2hFroko.roa (hash: NmW3C8NKCGbqhRm0Xt94BQ/c4oqnG0YmYAOJMru4dYw=)
3: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: 0Q4Lf/z5/r5+97Q9VVZbSKybTRf8DU/VWmt1F1mWeX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:cd:aa:9c:fb:1b:77:ce:fb:bf:bb:f3:25:9d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Apr 20 23:00:46 2025 GMT
Not After : Apr 21 23:00:46 2025 GMT
Subject: CN=8b84b572952c818fb796064f21cc0904cefa1354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:3f:84:05:11:01:a1:63:a6:67:9b:c5:0e:
6c:5d:10:ce:ec:9b:b4:8e:04:ab:e1:53:34:70:b0:
24:fb:6c:0c:bd:b4:fc:0a:c1:e0:ee:18:92:38:be:
38:cb:f0:d3:f2:f4:ab:5e:0d:de:93:59:45:28:e0:
dd:94:f5:0a:5a:6d:1c:30:3e:dd:5a:52:85:6b:da:
5a:14:7a:da:fe:15:c8:40:8b:ee:0c:4c:43:45:17:
e2:bf:38:79:99:be:22:85:b3:81:99:c0:37:d2:3d:
00:e3:21:4d:8f:8f:5e:2f:66:c9:8d:79:65:42:ae:
05:69:94:19:b8:de:b4:76:9f:16:cb:c2:6a:96:98:
fb:9a:c1:6d:ec:f3:5b:14:6b:c0:c9:7f:a0:3c:b0:
98:21:0f:fd:c0:28:0c:00:ca:bf:71:8a:bd:28:5a:
18:96:1f:87:08:94:af:31:70:56:8a:3a:4a:96:73:
44:a3:ae:07:2d:dd:ef:1d:07:de:78:c4:1e:09:52:
4f:7f:36:c1:ff:60:c3:5f:33:00:0c:48:45:69:ab:
22:a4:e6:ad:37:48:1c:e8:ff:65:c9:be:e5:ac:0a:
63:d6:a6:ad:5d:cf:21:fa:1f:e9:85:7c:bd:d5:37:
cd:3d:a2:e9:0d:04:48:99:5c:73:75:51:a5:a7:2a:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:84:B5:72:95:2C:81:8F:B7:96:06:4F:21:CC:09:04:CE:FA:13:54
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:73:ca:90:72:8d:0a:18:ea:95:1c:d0:2b:79:5e:95:c2:81:
ee:25:6b:37:39:13:d1:98:53:d8:cd:2d:ba:79:52:69:61:38:
b6:69:7d:8f:df:4c:c4:51:b7:8f:61:a9:f3:0f:30:6a:e4:5e:
cc:ff:1b:1b:24:3d:29:d6:5a:5d:b3:08:47:fa:26:d5:5c:f9:
5f:3b:f3:18:9f:07:25:a1:95:07:1b:3b:73:08:11:5e:75:9d:
96:0e:c1:72:5e:6a:c1:c2:04:0f:7d:7a:85:01:c5:d3:1a:6d:
42:93:af:e2:34:6c:03:0c:19:8f:53:0f:52:0a:9f:9a:5b:de:
5e:66:45:37:0d:11:e7:53:67:55:97:94:b3:52:0b:cd:fe:9f:
5d:1c:71:f4:fa:aa:12:ee:80:a4:d6:1c:2b:9c:71:2e:42:87:
4b:eb:c8:f7:be:bb:4f:7c:3f:ec:2c:d2:fa:b2:4b:37:29:f2:
51:09:fa:6d:48:fa:ec:7d:cd:00:da:57:2f:d6:db:95:bf:08:
dd:1f:72:00:89:4b:d9:22:92:9f:7f:12:cc:8c:72:02:4d:fe:
78:2d:13:f6:ff:b6:d1:7f:b4:04:eb:2d:20:31:fd:84:2d:58:
4d:c9:f2:01:f4:ea:c6:a9:db:94:68:2b:74:26:cb:35:78:42:
83:1c:e5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:26 2025 by rpki-client