Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: 0fiDzRYWmdEYbhm2N5FItmPtbUtsaenMw/B2djoYzGM=
Subject key identifier: D1:A2:D8:43:42:F6:F8:D1:5E:7E:58:9C:97:89:25:23:C5:35:EE:83
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 01964331AADE2A8139D51925491EDEBD9275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 10:00:50 +0000
Manifest this update: Thu 17 Apr 2025 10:00:50 +0000
Manifest next update: Fri 18 Apr 2025 10:00:50 +0000
Files and hashes: 1: AHyOG1MnctFTYdTzOeujyYGDJDQ.roa (hash: iaAt0/bbvCRZ2f2g8keArsuPB1vBUzluOk1uRDDqIZ4=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: Sf8cYmPkDkp3Mm9qxfxwK0k6ZDWAjtYMP/XRoAEMerU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:31:aa:de:2a:81:39:d5:19:25:49:1e:de:bd:92:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Apr 17 10:00:50 2025 GMT
Not After : Apr 18 10:00:50 2025 GMT
Subject: CN=d1a2d84342f6f8d15e7e589c97892523c535ee83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:e9:df:91:e3:70:b8:14:81:36:81:fd:46:
3b:7e:1e:1a:c3:c4:2e:65:95:bb:ca:94:6c:b9:2d:
3c:fb:48:bf:14:8b:f3:69:24:52:76:db:1a:26:da:
0a:99:d1:ea:04:05:fa:e1:6e:c7:c9:75:ab:b8:37:
57:f2:c9:3d:d2:aa:66:d9:1b:54:23:c5:ac:37:cf:
51:61:27:46:c4:55:97:2f:2c:77:9f:17:ec:d3:1d:
a9:bb:13:09:93:75:cb:ab:be:04:15:2c:bf:83:41:
45:1d:27:91:53:6f:be:64:57:b1:90:4e:a0:31:8f:
34:2f:e6:d7:50:a3:b1:e7:7a:48:91:5a:bd:e2:53:
6c:68:cd:15:37:72:39:ab:e1:00:37:c2:fc:07:db:
cb:ea:10:3c:e9:9b:ff:84:04:d8:65:cb:d6:21:89:
16:81:7c:15:23:ab:32:6c:cc:48:50:e8:da:36:64:
8a:4f:02:fd:3e:f8:16:d4:25:3f:66:c7:60:aa:86:
10:4e:73:18:81:08:e6:aa:2a:b4:77:8a:53:91:f5:
f2:dc:2d:64:4d:a6:e1:9b:ca:0f:14:f0:7c:f0:72:
b6:4a:02:3e:7f:ca:52:0a:27:03:bb:ca:3a:d1:9a:
f0:2f:cd:8d:08:4d:c8:f1:95:fe:c9:79:01:8f:76:
76:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:D8:43:42:F6:F8:D1:5E:7E:58:9C:97:89:25:23:C5:35:EE:83
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6c:61:96:39:9c:ba:eb:2f:7c:33:32:bb:39:e6:ee:ef:b1:
ce:19:4c:91:61:b3:f9:19:7a:7b:81:64:20:e2:42:75:49:3e:
8f:5d:4d:cd:b0:c3:4c:ad:77:0b:c3:1a:1b:75:68:71:6f:78:
b4:a3:a3:9d:59:be:28:10:80:c3:2b:81:2e:36:82:45:1a:be:
32:7e:d2:43:54:00:b6:76:54:ef:86:37:02:f8:21:72:ab:92:
ae:b3:8e:d6:b3:d8:92:b9:d4:37:55:e5:8b:bc:ee:99:97:06:
6f:b7:43:4f:45:bb:d1:5a:b4:da:f0:2a:63:29:08:f6:48:a7:
6f:f1:fe:8d:42:e9:a4:91:60:e7:64:44:c8:b7:68:8f:b5:49:
f4:0a:89:2c:d7:82:1a:1b:7f:f0:28:11:31:98:1a:a7:de:df:
19:77:2b:0d:91:ce:7c:a5:70:6d:b5:29:29:3f:66:0f:1c:b6:
7d:a1:49:ae:ae:00:57:b4:0c:22:8b:35:31:b0:a8:de:23:44:
db:f2:34:84:ac:9e:b5:ff:87:9e:ca:e7:ce:4e:ba:72:05:f4:
25:10:f9:c3:b8:9a:ca:9a:25:84:a5:ab:f9:0d:85:f4:7e:4c:
9d:e9:5d:0f:30:e4:14:c9:ce:19:61:d6:95:17:bf:ca:3f:1e:
04:2e:5e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:55:48 2025 by rpki-client