Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: 2QjHQ8xwRe8LFjGac7SJvxSAvN4raRWUEsbMtzyVtKE=
Subject key identifier: E7:FC:EC:D3:F9:FC:34:0A:63:11:F2:AF:21:66:B5:34:6E:40:AE:87
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 0196428CBB895C4F053016A498F186D910B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 14FD
Signing time: Thu 17 Apr 2025 07:00:41 +0000
Manifest this update: Thu 17 Apr 2025 07:00:41 +0000
Manifest next update: Fri 18 Apr 2025 07:00:41 +0000
Files and hashes: 1: Z5Q97jg1XfMj96-QjMHrjbS99lQ.roa (hash: J635Kaow5JoE+4yM5t9dlNwrZajE6mv+pjhBj0rKq7U=)
2: b-1rdmKo86yUONL7Dfq2xDDM_2s.roa (hash: w/c18hk0EwYDA8e5KKNs4s/8e74mjbPB/j6X78kDFl0=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: //szSm+z/Tl8qzyW+ZMSsXjeA2k1TLV27O8bhQ0OoN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:8c:bb:89:5c:4f:05:30:16:a4:98:f1:86:d9:10:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Apr 17 07:00:41 2025 GMT
Not After : Apr 18 07:00:41 2025 GMT
Subject: CN=e7fcecd3f9fc340a6311f2af2166b5346e40ae87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:3c:c2:36:66:a2:ee:82:8d:c1:56:95:aa:
a6:7f:9d:6b:c2:16:ad:b4:15:9d:61:07:74:c8:92:
fa:af:2f:0e:c4:d9:3e:1d:ff:9a:27:68:b7:54:ba:
4e:9b:6a:23:75:87:19:b4:57:d3:a4:52:77:fd:f6:
0d:11:1a:9b:9a:fa:be:88:2f:b4:3c:6b:0d:35:53:
e7:0b:1e:a0:99:4b:72:d2:9a:18:cb:21:6d:3a:cb:
49:55:8a:e6:c0:4f:b8:5c:2a:10:5d:07:df:7c:8a:
6d:73:0f:7c:0c:c0:62:7d:36:7e:12:e4:0d:19:f4:
20:bc:a9:66:ee:dd:cd:f7:7c:e6:ed:8e:4e:9e:e2:
84:b6:2e:3e:9b:d5:d4:d4:09:8e:16:df:25:d9:10:
29:10:1d:fd:fa:7d:68:79:01:93:b5:67:cd:9b:1b:
52:4b:78:e6:2f:89:75:f2:de:4a:59:a6:b8:fd:31:
6b:0c:47:b0:db:f2:c4:a2:03:7d:5b:2e:09:7f:d4:
76:f0:ce:93:42:0a:a9:bb:fc:61:55:5d:bc:f4:45:
86:9e:30:ca:23:41:7a:22:60:d6:0f:d4:14:aa:d9:
2f:92:15:56:07:bd:c1:e8:2d:e5:4e:57:f2:fb:d2:
85:44:5d:59:62:34:9b:35:52:29:63:8d:ef:34:10:
04:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FC:EC:D3:F9:FC:34:0A:63:11:F2:AF:21:66:B5:34:6E:40:AE:87
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f2:f3:05:8f:ca:23:62:8c:8b:a8:d4:08:b5:50:fc:52:1f:
cc:2d:e6:a6:9e:7e:52:d7:c5:f5:d5:d3:75:20:27:ec:6e:cc:
5a:a3:c1:b1:66:a9:89:e9:b4:90:bd:58:9d:3b:b5:6c:e6:84:
8d:d0:64:9e:7c:3a:57:4c:c0:eb:d7:e6:0f:f5:ac:c3:99:3b:
71:91:0d:90:44:84:7e:21:16:58:37:e3:42:86:f5:e4:53:76:
d9:b8:5e:43:96:cf:ea:bb:5f:93:51:06:01:26:da:e9:80:56:
09:44:16:9a:04:94:1e:3e:9c:18:58:2f:40:37:c6:35:f5:4c:
ea:bb:ff:59:7a:f2:22:ab:c9:96:77:d7:6c:99:cd:0e:a1:a5:
7f:99:35:09:29:9c:7d:8a:5e:1c:28:06:8f:3c:aa:28:d7:45:
1f:e3:4a:06:8b:0b:87:29:db:10:c2:b0:91:6b:3c:83:10:18:
d1:85:32:70:63:7a:15:b5:ee:8c:58:4c:87:43:6f:ca:a8:81:
29:d3:cd:ae:b6:6d:f0:6e:e6:fc:99:ae:71:06:b7:eb:2f:e4:
2b:37:16:42:d9:30:e3:50:ac:8a:96:c8:6d:d4:56:4f:ff:75:
25:a5:f2:41:16:d9:19:32:30:75:c0:22:4a:7e:5a:cf:8f:2a:
2a:f3:31:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:28:20 2025 by rpki-client