Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
File: 9FT4T3gIX46gOklonL43LnSsFTw.mft (raw, json)
Hash identifier: X82vgpmTBc3X/I2uggbRUFeP0LcIJ33myz61+XIf3iI=
Subject key identifier: 5A:07:F4:BA:15:4A:A7:0E:81:B4:D2:91:F8:D6:52:3A:6F:91:80:55
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 019603402FD14EC3801B1E96B33400407ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
Manifest number: 14D3
Signing time: Sat 05 Apr 2025 00:01:00 +0000
Manifest this update: Sat 05 Apr 2025 00:01:00 +0000
Manifest next update: Sun 06 Apr 2025 00:01:00 +0000
Files and hashes: 1: 9FT4T3gIX46gOklonL43LnSsFTw.crl (hash: Vi0jPXDJLy3F5kZQUh8OAdZl4Nwd2FZr2fQBV0IpMT8=)
2: BGu53Mnt6YnfcS4G3l8YVZ-mfTw.roa (hash: QzO5j9RPktNq5NXFjAY7mK7/e0HDOPdGV4+293fHloM=)
3: br5LvPAh3qC25uv5le-_vMirU9E.roa (hash: d5eKzHAQ2jh203ot8SX9ieqegHwAZyoAukOsm+PkxYo=)
4: keFbyWRx9CXFGktePoeob--QEYA.roa (hash: iRz71Y07r23FnbminnQhY3v7rzlViMoRNVr4WwEmWj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:40:2f:d1:4e:c3:80:1b:1e:96:b3:34:00:40:7a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: Apr 5 00:01:00 2025 GMT
Not After : Apr 6 00:01:00 2025 GMT
Subject: CN=5a07f4ba154aa70e81b4d291f8d6523a6f918055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:1d:ce:64:9d:d9:e4:8f:42:61:2e:e0:05:
5d:a6:6c:52:ef:52:39:af:47:38:e0:9e:34:71:ae:
9e:6c:f6:5b:01:22:ee:75:34:f7:6b:27:ca:93:b1:
d5:31:a7:5e:6a:54:a2:a1:2f:f0:92:ea:44:9b:93:
7d:25:88:9f:a9:91:c9:b3:ed:54:b6:93:80:ab:9c:
ab:da:af:2a:99:c4:ee:97:8d:ae:72:63:26:cb:ca:
68:00:bd:f8:08:d1:95:3f:f3:bd:67:f1:99:19:0f:
19:e3:b2:88:6b:63:68:84:7f:d0:73:10:9e:4f:84:
7e:a6:1d:d9:85:23:70:e4:d9:71:6a:24:ef:ad:90:
58:80:10:37:07:03:93:1e:50:64:1c:e9:33:2f:df:
4e:08:0e:22:c3:ab:f1:c8:71:8f:bf:bb:98:27:9b:
17:67:65:51:dc:c1:c5:89:14:6c:91:8a:15:fc:76:
6e:7b:b9:e5:b3:3d:7f:36:53:3d:d0:86:e0:bd:aa:
29:9a:71:85:74:b0:cb:32:dd:a2:cd:9f:29:f5:b9:
59:aa:35:47:73:c2:a8:dd:ae:90:ea:c4:a6:29:f2:
9d:fe:9e:31:c2:c7:ce:27:95:3f:b5:3c:5e:59:0e:
5a:92:41:13:34:27:86:17:6f:f9:e8:09:de:f8:a0:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:07:F4:BA:15:4A:A7:0E:81:B4:D2:91:F8:D6:52:3A:6F:91:80:55
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:aa:32:0b:58:fc:83:bd:23:71:b7:ab:fb:c0:60:f0:5b:eb:
13:bb:da:33:47:a5:09:e9:27:c1:40:99:72:b2:65:ad:7f:7b:
32:62:b9:58:88:23:eb:39:d8:73:32:06:6c:73:33:0e:9a:17:
93:e2:54:fb:db:41:f7:01:04:bf:96:ee:f0:7b:fc:69:98:97:
ea:cf:5e:cd:af:55:62:d4:da:df:a6:9e:cd:4f:95:ab:b1:11:
42:fa:57:13:29:15:dc:0a:9d:e2:c4:03:78:6c:90:99:17:59:
3e:4c:5e:48:4e:54:04:5d:33:e9:f0:30:ff:06:50:c6:21:9d:
f2:56:a6:c0:0f:ba:0d:9b:de:fb:55:54:52:01:c1:a3:30:0c:
a1:94:29:b8:1b:20:d1:18:50:ec:7a:b4:59:2e:66:79:53:9e:
16:eb:34:3d:f6:26:4a:f1:d4:e9:f5:00:11:e8:4c:aa:a1:de:
98:90:c8:30:cc:b4:32:91:b3:04:ed:79:7a:e1:b9:20:e6:b0:
cb:2c:53:fb:cf:e2:a7:17:de:e8:f6:67:e7:06:92:dd:a7:25:
7b:91:b1:24:48:8b:8b:37:0a:8a:88:83:99:d6:41:e4:76:3d:
af:07:74:7b:7d:fd:81:a7:9c:96:ed:a6:69:08:13:6e:83:a8:
aa:ff:0f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:59 2025 by rpki-client