Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: PstHYC3ttsqTH0Gbey3m363FmH0Da2vRQie45llRd7I=
Subject key identifier: 7B:92:02:42:47:91:62:00:5C:60:A7:1F:A5:EA:C4:02:09:B2:38:2E
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 019652371898F019AE7D7DA6826917F6D9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 08:01:04 +0000
Manifest this update: Sun 20 Apr 2025 08:01:04 +0000
Manifest next update: Mon 21 Apr 2025 08:01:04 +0000
Files and hashes: 1: KfdFKMsjdHv-q7t8wKVB68imJFI.roa (hash: /pY/O4QXO7BvEAN+9S1nVpoPg09znAHFBvFlWdPOJZg=)
2: bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa (hash: Sf8LAE4WGl0MHG0bbn/YLP58QNfCYpZtLL1+SAh0T/A=)
3: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: TQw/mfqdTOgNOCCVt69pah0Wpnmf983Hfi1Ce3POb2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:18:98:f0:19:ae:7d:7d:a6:82:69:17:f6:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Apr 20 08:01:04 2025 GMT
Not After : Apr 21 08:01:04 2025 GMT
Subject: CN=7b920242479162005c60a71fa5eac40209b2382e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:ad:cf:3a:be:18:ef:3c:ae:35:99:5a:a4:
28:79:f8:d4:45:25:32:88:93:49:98:6b:07:f4:f1:
4f:97:3f:08:53:5a:c3:51:ac:c0:1a:82:cc:39:b1:
b0:6e:0d:17:12:6f:54:ed:50:d9:65:5f:4f:92:b8:
7c:40:14:03:2b:a7:6d:1c:21:bc:ae:53:b8:98:9f:
77:e4:9b:55:e0:0f:be:a5:7c:b9:d3:b8:a9:d5:b8:
ac:1e:b1:a2:2d:c2:4b:43:1b:ba:0c:29:c1:c8:81:
7d:9a:4c:80:6a:22:e8:e6:e9:65:33:1f:bc:77:e1:
70:ab:ca:ba:84:53:31:a7:74:17:e2:98:5e:e3:53:
f5:c2:d8:53:1d:a2:33:a3:c2:3b:da:e3:1a:64:2c:
7b:49:08:d7:d5:84:5c:56:dd:a0:37:f7:e7:c2:35:
a6:bc:ff:f6:e5:4a:ff:6a:60:73:df:57:ea:2c:e6:
ad:06:bf:d0:cb:bb:84:7a:b7:27:2f:52:7e:81:fb:
f9:13:ae:c7:6f:6b:11:46:94:99:f5:b0:95:94:78:
44:46:cf:ef:6b:11:ac:4b:bf:a9:10:a7:87:af:c0:
b3:62:86:e2:39:72:ea:a3:03:dd:e7:b0:e8:37:2c:
59:69:c3:2b:90:4d:20:bb:f8:f7:d3:24:12:8c:89:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:92:02:42:47:91:62:00:5C:60:A7:1F:A5:EA:C4:02:09:B2:38:2E
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0d:b1:bc:c3:27:fc:42:30:29:a9:2a:1e:b9:11:f3:05:be:
ec:e1:a9:89:f0:d9:78:38:f2:ad:ba:6c:2e:85:68:67:7c:aa:
88:ed:dd:01:e7:30:1d:8f:5a:57:cb:38:70:62:e3:a6:82:7e:
3b:fd:18:6b:77:e4:04:02:75:65:10:82:aa:a3:5c:90:00:ba:
5e:f6:57:a5:1b:cc:eb:d5:4a:01:25:bc:31:9a:72:13:44:ee:
52:65:b9:67:df:9f:f3:3e:09:c5:b9:30:d6:55:db:15:51:63:
58:4e:f6:c4:a0:6b:5c:0b:9f:15:52:81:b0:2b:10:4a:cf:08:
d7:9e:71:3c:8e:46:87:0f:a6:62:4b:1b:1a:01:8a:58:66:58:
b7:0b:0f:5c:9e:7c:e4:68:ce:d5:97:bf:52:38:2c:0f:2b:e9:
f9:6b:02:50:a1:60:6f:e5:b3:df:92:99:fb:1e:a5:67:9f:1f:
6d:5c:b8:c8:7e:03:66:cd:50:e5:5b:c6:cb:f3:00:31:cf:88:
8a:7d:2b:de:ac:03:85:34:b8:99:4d:79:81:36:2e:40:37:e2:
f1:2f:ce:55:97:59:b3:10:c6:96:27:42:6f:e7:bf:ae:b0:f7:
44:57:7c:4d:ce:94:aa:6a:1c:83:3b:58:b6:75:df:a0:48:0c:
a9:2d:3e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:30 2025 by rpki-client