Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: ILshUY8ouKZdlnUPo190r0AGnC/V4vYKS2CzIFlwfBw=
Subject key identifier: 50:B5:15:6C:DF:E8:DD:60:56:F5:E3:0D:24:D0:F3:29:F3:44:98:D9
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 01967FEB203C173F577D01CCA59812B8478B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 14A4
Signing time: Tue 29 Apr 2025 05:00:37 +0000
Manifest this update: Tue 29 Apr 2025 05:00:37 +0000
Manifest next update: Wed 30 Apr 2025 05:00:37 +0000
Files and hashes: 1: 7Q18JYmAuxaMa6IHufbofG2Nif4.roa (hash: SgEEylWwu8UHfA3f6YmbRxIxeIe/WWwb7mO+pnXONBI=)
2: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: oDkiE3kfChJkJGdhrcV2P7EVRanygjNKBnaGEgsrP0k=)
3: zzW0oiISqz8GtZ1LDC69YbNiON4.roa (hash: qDXsu9oGWoasH8gnG9BaDFXmdIAxeKxrhPwrD6gYHG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:20:3c:17:3f:57:7d:01:cc:a5:98:12:b8:47:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Apr 29 05:00:37 2025 GMT
Not After : Apr 30 05:00:37 2025 GMT
Subject: CN=50b5156cdfe8dd6056f5e30d24d0f329f34498d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:29:16:bb:04:38:09:94:61:4e:46:9e:3d:
b4:cc:0f:be:22:00:3e:da:76:2a:69:f0:99:7f:81:
d4:36:a9:54:8a:fd:0c:cc:2d:5b:d5:5c:b7:36:bd:
85:83:a2:03:2e:81:f8:75:f8:ae:f0:e1:2b:27:b6:
5a:25:ed:2c:5d:3e:47:6d:9b:83:91:80:28:ee:db:
ba:16:f4:80:bb:44:6b:03:e2:ef:dc:ed:09:ec:26:
ef:6f:2c:0a:06:58:68:0f:a8:71:85:bd:c6:78:ee:
aa:52:cc:40:13:4e:d6:15:7f:8c:bc:20:70:c4:19:
31:6a:5b:0c:d9:2f:f5:b0:9a:82:26:f3:0c:4d:42:
11:e1:53:70:f3:e0:ab:00:4d:bc:3c:32:22:2f:40:
df:4d:92:ff:09:0e:a5:20:38:04:d4:c2:a3:d1:ad:
0e:42:70:ac:22:5e:e8:d9:71:01:28:63:04:6b:ef:
3a:aa:f2:88:d1:6f:23:23:3a:f3:4c:56:31:17:65:
8b:8c:7b:74:30:b0:e5:26:57:71:c4:5b:f5:59:5d:
af:31:10:c4:c9:e9:bb:1c:dc:c1:01:2f:3c:3c:5d:
cd:62:71:2f:86:cc:35:01:7e:f7:2c:7f:bd:e7:d3:
79:5e:26:f1:61:10:36:3c:6c:0c:ae:2b:73:f1:0a:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B5:15:6C:DF:E8:DD:60:56:F5:E3:0D:24:D0:F3:29:F3:44:98:D9
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b7:83:c5:d1:e8:44:3f:bb:69:53:5d:9d:b9:23:27:fb:ee:
48:26:ea:92:a5:24:da:af:b9:4c:f1:45:fa:dc:75:ce:e8:e0:
47:00:32:ea:b4:09:92:c9:0b:c9:eb:57:e8:5d:85:27:79:14:
9a:39:78:bb:ca:3a:f5:5d:97:40:d2:8c:d3:3a:08:48:52:4e:
05:52:09:99:43:16:84:40:90:d4:31:1a:bf:da:69:63:d4:54:
42:b5:a3:45:e9:c7:ba:fd:47:ad:91:86:b4:2a:8b:04:72:98:
64:8d:67:8e:69:d8:f8:73:7c:08:88:f4:bf:88:91:44:a9:f8:
ef:81:f9:7c:77:c4:60:6e:47:ec:79:b4:81:0d:fe:08:6e:98:
47:7f:d3:b8:2f:2e:f1:3a:2b:0a:e4:08:d2:6c:05:da:1a:ab:
b3:08:c6:c3:4a:31:0c:d0:29:70:13:f7:76:42:8c:da:d9:4c:
fb:e8:77:19:c6:9d:1a:f4:84:39:5d:2f:b1:0e:c4:f6:41:24:
a5:93:94:ba:dc:b9:0d:af:01:d4:f4:e0:af:b3:47:24:f6:f4:
d1:48:a5:6e:34:2b:97:0d:bd:f7:b5:17:0e:6a:ca:c7:e6:98:
cf:57:d1:4c:2e:d8:c7:2e:9e:ad:63:98:ab:82:2d:04:5b:8f:
72:9b:37:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:37 2025 by rpki-client