Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File: Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier: j2l38lLcVLRnGG+Dkht+G+3RdHYTm+vzbiqAtmEwelM=
Subject key identifier: CA:45:7F:59:EA:27:93:AD:2D:28:4F:45:49:07:D5:0E:D2:F4:1A:6F
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer: /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial: 01964F356D263D929217E3D04D4F5615C727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 18:00:23 +0000
Manifest this update: Sat 19 Apr 2025 18:00:23 +0000
Manifest next update: Sun 20 Apr 2025 18:00:23 +0000
Files and hashes: 1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: hXDbz+9oOVCzx6jDWoWOyINabA6ugTTF6JMAFfb28pg=)
2: m-mgeij2s-izZmoG2EJOGobZRbs.roa (hash: 50Vl722SlJE3RG+BG14L6AWHGFv4OwGxsav/vScZL0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:6d:26:3d:92:92:17:e3:d0:4d:4f:56:15:c7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Validity
Not Before: Apr 19 18:00:23 2025 GMT
Not After : Apr 20 18:00:23 2025 GMT
Subject: CN=ca457f59ea2793ad2d284f454907d50ed2f41a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:b7:ed:36:64:c3:83:a0:95:b3:27:80:d5:
7f:6c:47:15:a8:7c:75:da:43:b4:53:a0:af:13:0d:
82:05:1d:4c:2b:6f:e1:cc:05:25:3c:bc:c1:77:52:
69:26:86:a6:3a:e4:fa:fd:98:b8:61:46:ee:9b:b4:
d8:e5:d3:5f:0c:dd:ba:1c:3c:25:ad:35:cb:2f:1e:
b2:55:e3:d2:cf:22:fa:72:e4:61:11:3f:1e:75:08:
d0:43:fc:08:7a:5a:16:c5:5b:10:54:de:1e:75:0b:
c1:05:7f:1c:0d:b2:60:2e:b9:1a:19:bc:d5:15:ec:
87:7b:b1:2a:6d:95:e1:60:07:1a:ac:c4:62:69:32:
75:5b:0e:a0:2d:e1:49:3b:5d:0d:a2:0a:9a:aa:ee:
a2:1b:a4:d2:5b:90:d4:ff:76:fb:80:e4:32:38:52:
b9:99:b7:81:7b:a2:88:71:3d:48:5e:77:81:79:7d:
49:12:4f:5a:93:6b:4c:6b:f8:ee:f2:f4:30:5e:0a:
15:7d:2c:95:31:da:f1:24:a5:bf:6e:28:5e:ca:9d:
a4:fb:d5:1c:de:cc:23:1f:49:41:7b:d0:ee:93:36:
21:6a:a7:14:b5:25:49:d3:0a:e0:19:b7:df:b1:80:
d8:28:5a:99:b5:c1:9d:99:f0:99:30:ff:82:29:8c:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:45:7F:59:EA:27:93:AD:2D:28:4F:45:49:07:D5:0E:D2:F4:1A:6F
X509v3 Authority Key Identifier:
keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9d:f4:97:13:28:e8:1b:ce:ed:d5:06:5d:48:f9:ff:a7:e6:
d3:d5:47:06:41:cb:b3:84:83:e7:5f:e9:1e:f2:57:8c:1f:5e:
c6:6f:9c:a4:4a:db:23:18:d1:10:8d:5a:6c:dd:24:e5:85:26:
5c:0f:38:76:eb:71:6e:81:66:10:43:c9:90:54:06:84:21:c3:
b6:84:8d:63:77:95:88:f7:03:8f:28:74:8e:d1:41:8a:d2:04:
38:47:d8:dc:68:86:9a:a7:ac:fc:32:0a:71:3a:e7:b5:ac:04:
fd:7a:a6:67:6f:d3:32:4e:36:01:7b:37:56:0c:75:e1:c9:08:
4e:6a:50:67:74:34:5a:e1:df:3e:81:b3:63:90:c1:c6:43:54:
79:66:85:fb:01:58:e2:5b:30:67:86:ee:8f:3d:14:8f:81:e9:
43:29:54:01:5a:58:bc:f8:e6:b8:2e:0e:3a:a3:63:e1:23:93:
33:61:e0:aa:18:3c:5e:1c:46:b2:41:9a:62:a7:b6:0e:d0:53:
c5:0e:9f:93:a7:c9:07:57:1e:03:1e:99:17:f8:cc:33:7f:0e:
43:dc:20:e8:c9:8e:0c:85:71:0d:41:38:47:aa:95:78:90:13:
9a:ab:fc:94:48:fc:65:d2:d0:2e:8c:4e:f7:81:78:a6:f0:2d:
ab:36:b6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:24 2025 by rpki-client