Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: t6ugB7kivO41Y3gxeFa/plFpYAgFbg0+E4doyFCpluA=
Subject key identifier: AA:21:49:8D:8E:DA:64:EA:0E:7F:F5:78:F6:C7:1B:C9:2E:C2:96:D9
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 01964F6CA25BEB1631F5ADB94FC1D9B635C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 19:00:41 +0000
Manifest this update: Sat 19 Apr 2025 19:00:41 +0000
Manifest next update: Sun 20 Apr 2025 19:00:41 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: xYLJuZCRvVbTRKRcmy6SlPP+1lLQL/YK2rIUWOkrFKU=)
2: Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa (hash: sx9n+qGnhP0I6sp10kmNLeGSUg0Fv6GPJl7WmFjWTnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:a2:5b:eb:16:31:f5:ad:b9:4f:c1:d9:b6:35:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Apr 19 19:00:41 2025 GMT
Not After : Apr 20 19:00:41 2025 GMT
Subject: CN=aa21498d8eda64ea0e7ff578f6c71bc92ec296d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5e:8a:5b:c5:c8:60:89:ec:2b:59:c7:86:8c:
8b:9b:dc:50:c2:3b:40:a9:90:14:2d:0f:f5:13:84:
c0:3c:3e:43:8f:6e:7b:45:9c:a3:5d:2d:13:22:9a:
60:eb:66:63:2e:25:81:11:de:31:bc:b6:a5:a3:75:
6f:fd:8b:4e:fa:ec:60:b1:94:51:60:83:04:59:65:
a6:7b:51:7d:f2:47:c1:6b:f2:76:a1:9a:9e:13:f3:
59:e0:77:46:03:04:76:2c:ce:22:ed:15:ee:8e:fd:
35:a7:2b:90:a9:3d:7f:6f:c1:d5:1a:b7:98:51:5b:
49:b3:f3:dd:ec:35:d0:56:9e:33:19:96:8a:8e:cf:
06:a1:b1:32:01:e2:2f:c6:7c:8b:f0:d9:5c:13:40:
ed:cf:38:ad:ff:a6:f0:c4:02:b5:67:fa:0a:ba:ac:
73:76:59:e8:09:19:e4:47:76:ad:d4:7f:24:19:90:
44:a7:9d:e5:4d:1f:00:97:11:a2:a6:e0:3c:34:e0:
4e:99:16:30:36:3c:f4:f5:dc:f5:9a:f2:e7:cc:1b:
77:c2:fc:56:a4:74:20:c5:0b:ce:12:1a:5a:57:5c:
95:55:76:89:54:28:cc:11:07:39:de:13:ce:3c:c5:
69:37:35:fa:be:60:65:3a:29:c1:11:d1:33:65:00:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:21:49:8D:8E:DA:64:EA:0E:7F:F5:78:F6:C7:1B:C9:2E:C2:96:D9
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f3:33:57:71:65:bb:f5:58:13:c3:a9:82:3e:d8:6e:9a:ad:
c7:45:b8:3e:b8:ab:b2:d4:f0:a2:e6:43:a7:6f:eb:a2:eb:10:
86:d5:cc:05:23:1e:8a:60:b2:cf:a7:9b:72:fc:5a:0e:8b:80:
28:95:a2:b4:7c:f2:92:ac:bf:b7:7d:c0:f8:b3:44:43:02:8a:
97:4c:0b:23:f9:1a:f1:ee:ee:4f:54:16:31:02:16:1a:1f:51:
f1:40:4b:5e:cd:de:40:68:e3:66:b2:2c:d2:01:66:02:cb:e5:
24:11:02:5a:46:96:00:99:52:26:f5:65:43:b4:c9:55:ba:8e:
8e:05:2a:fb:28:03:2a:22:1c:ee:30:56:62:61:e9:5f:d0:b8:
2b:c8:4d:97:ba:95:f7:a9:93:b7:8c:4e:79:75:08:ee:72:4e:
ae:a0:5d:c0:16:f4:71:a4:c2:69:af:87:15:01:16:b9:4b:ee:
48:bf:83:ec:7f:e8:1c:a9:d5:98:5f:56:c9:ed:0f:ae:31:ad:
ea:70:30:e9:db:8c:6e:5f:e9:36:66:fa:2e:8b:fe:03:bb:82:
07:24:00:1f:4f:3e:00:ab:df:79:ef:b2:b7:90:9f:11:64:77:
37:83:90:80:f9:4b:34:17:c3:a6:e3:14:fa:99:77:28:da:93:
1b:7b:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:44 2025 by rpki-client