
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier: GqTNYfeIp5T9WNjh2rl6m0xPCX1Wfxv93P60fIjuu0c=
Subject key identifier: 09:44:7F:3F:5D:22:D0:99:AD:96:60:52:92:05:5D:BA:AE:A1:F1:FD
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial: 0196531209600D0E168F293288C875DD23A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 12:00:12 +0000
Manifest this update: Sun 20 Apr 2025 12:00:12 +0000
Manifest next update: Mon 21 Apr 2025 12:00:12 +0000
Files and hashes: 1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=)
2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: wJ/qdiveCXmID0oPkX0biiNkCxcZRoS/aFjxJQS9XFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:09:60:0d:0e:16:8f:29:32:88:c8:75:dd:23:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Validity
Not Before: Apr 20 12:00:12 2025 GMT
Not After : Apr 21 12:00:12 2025 GMT
Subject: CN=09447f3f5d22d099ad96605292055dbaaea1f1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:7f:76:68:3a:c1:6f:01:f9:15:2f:c5:dd:
9d:de:6f:99:55:84:78:bc:47:79:d4:b5:94:b7:95:
1c:e6:76:d5:b7:46:4f:84:33:b3:2b:4c:2d:20:66:
18:18:c5:47:b6:91:1f:41:27:44:04:3d:4b:3a:be:
12:4f:74:a3:66:77:fe:7a:69:87:fc:1b:21:dc:0f:
44:ef:83:ea:8d:82:12:2b:2b:96:e5:7c:2b:c9:73:
df:7b:c7:46:e6:34:b3:91:7d:b1:02:c0:ea:dd:0e:
4f:e8:f6:12:ad:73:69:4a:53:ed:d0:3f:f4:1b:e5:
96:00:c5:72:ad:ba:13:e5:db:a9:16:f8:c7:41:51:
16:57:ae:e3:7f:3f:eb:2a:79:c6:e1:8c:fd:0b:b5:
ee:af:6a:b0:36:8d:eb:bb:48:7f:8d:e2:d4:b4:bb:
bd:a6:53:4b:8a:55:fc:27:d3:43:b2:83:e1:70:c0:
73:d0:4e:55:fd:7e:6c:d2:bc:c3:cc:2e:50:8d:b4:
a9:fe:a6:82:32:bc:fb:42:48:ce:eb:7c:bc:c8:ce:
c5:38:14:b9:38:4e:75:ff:e9:01:82:e1:f9:f3:84:
f2:34:93:df:82:27:a5:cc:5d:83:d8:73:80:86:f3:
c4:cd:98:77:6f:7f:2d:78:e1:0a:35:93:22:39:a1:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:44:7F:3F:5D:22:D0:99:AD:96:60:52:92:05:5D:BA:AE:A1:F1:FD
X509v3 Authority Key Identifier:
keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0b:50:1a:1b:a1:45:91:74:72:12:2c:fe:d0:72:e5:04:f2:
c0:c6:cd:4c:f1:2b:e7:c6:82:c8:35:09:fa:ff:1e:8f:72:3b:
8a:f2:3e:f6:25:98:8a:06:2e:b6:28:fc:a0:45:87:a8:ec:34:
e9:fe:3b:8a:bb:8f:49:12:18:36:0d:1a:e7:33:19:00:e0:38:
35:a9:2d:49:d8:4f:c2:9f:24:e9:dd:bf:bb:1d:dc:99:bd:2e:
eb:39:8e:61:a9:40:d7:54:b0:ba:ed:1a:15:62:ba:83:4a:47:
f8:a4:95:2f:e8:0e:5d:ac:9f:a3:3f:3c:a8:2f:f4:99:1c:2b:
33:a2:0a:ed:0f:57:55:f2:00:60:68:57:6d:10:ff:c7:ab:9f:
92:50:3c:2a:3a:d7:c1:80:36:6b:f8:86:c3:18:42:56:d6:a2:
ff:d4:e2:40:3a:f6:0b:04:42:15:0c:a8:bc:62:41:9d:ff:50:
52:3e:3e:97:68:18:aa:75:30:b5:e1:ed:88:41:dd:23:0f:e2:
73:5f:04:3a:b8:77:0f:b6:e6:0a:d0:93:27:32:95:4b:23:17:
7b:02:13:cb:52:d4:58:b4:f6:81:0d:aa:5b:14:39:bc:ae:c3:
3c:f2:9b:b7:56:75:70:3b:9b:47:99:0e:17:8b:2b:ab:fe:97:
45:d5:71:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:54:39 2025 by rpki-client