Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: Ek7EykxIc9DbvY5oSBw3kqhh7bMfm1qrEFxjyZSjPt8=
Subject key identifier: 25:0D:F2:4D:0D:95:88:4F:CA:F3:14:21:F5:E7:E5:14:8C:45:0F:65
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019688EDEDD1657BE65EC12C2D86B825E886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 151E
Signing time: Wed 30 Apr 2025 23:00:16 +0000
Manifest this update: Wed 30 Apr 2025 23:00:16 +0000
Manifest next update: Thu 01 May 2025 23:00:16 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: vOGda8kQEIUYGVoyNNkv6r+RmGcF4IU2AXs2il4jjQg=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ed:ed:d1:65:7b:e6:5e:c1:2c:2d:86:b8:25:e8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Apr 30 23:00:16 2025 GMT
Not After : May 1 23:00:16 2025 GMT
Subject: CN=250df24d0d95884fcaf31421f5e7e5148c450f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:69:25:74:ec:ca:41:ff:f4:93:b4:be:f0:
64:22:b0:aa:2f:5c:dc:57:05:6f:31:d5:d0:e9:e2:
c7:57:dd:d6:03:a1:8f:50:a9:83:9d:ad:34:15:b7:
1b:d8:1c:2c:82:45:01:2c:88:4a:5b:64:e7:dd:ae:
7c:ec:18:61:cf:7d:b7:9a:a9:e0:b8:31:64:c1:30:
8c:c9:1d:c8:2c:99:d0:32:00:7e:e9:96:f3:e6:c5:
a4:e1:cc:eb:18:f6:80:ce:36:32:63:3f:eb:fa:5b:
5b:9e:fb:27:2c:f0:88:05:bf:14:54:56:b0:24:56:
91:e2:ce:5e:80:68:07:3e:cb:b8:c0:a2:c0:c0:c7:
be:f3:3b:d4:35:14:6d:73:c9:d0:77:0c:25:5c:1c:
84:59:6e:e8:14:ce:9a:3d:6e:71:28:48:5c:0f:32:
d6:48:fc:4b:62:29:de:2e:d4:75:a6:10:82:30:3b:
ab:01:19:90:88:02:7a:d2:46:f8:62:1f:be:54:ee:
e1:31:28:01:92:c7:f2:cd:f5:64:9b:b1:07:22:97:
ea:b8:db:34:98:39:a8:27:54:1d:8a:dc:5e:f0:2e:
40:8d:f6:e9:9a:7d:88:a6:fa:9b:c0:ce:35:51:47:
2d:3a:06:bd:c1:44:b3:d4:ff:20:f2:d3:d9:a3:17:
2c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0D:F2:4D:0D:95:88:4F:CA:F3:14:21:F5:E7:E5:14:8C:45:0F:65
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d5:9c:97:fe:37:a4:37:95:b2:73:a2:85:fe:0b:67:92:27:
88:24:c9:61:4f:c0:51:5f:f3:f6:33:c9:18:0b:e0:35:42:10:
d1:68:d4:1a:d5:f9:c0:34:e7:42:7a:31:02:08:a8:0d:3e:d1:
da:51:5e:cc:f1:92:3e:32:ff:30:39:2e:f7:e5:e6:a0:df:a6:
47:85:a9:1d:e7:1c:0a:6d:2d:cb:54:c6:54:17:ea:7d:18:bb:
b5:8b:4c:8a:39:04:07:24:db:96:7a:db:5c:13:15:38:69:9b:
de:4b:e7:16:fb:3e:61:f7:f3:46:53:68:43:68:98:9d:7f:9c:
07:dd:6f:94:a2:9d:78:51:65:4d:24:0b:90:c4:01:6d:1a:e0:
ce:97:a8:a0:1a:cf:74:cc:da:1c:c2:20:28:5d:ca:6d:dc:54:
9e:b6:37:fa:e1:33:6f:12:2f:84:a1:16:46:79:b9:19:50:c3:
87:ed:7c:da:5d:90:2e:96:f1:c8:44:9f:b3:2e:e9:ca:e1:47:
c4:5f:1f:71:6d:06:e8:d6:24:00:af:33:50:fd:46:00:9f:5c:
5a:c9:6b:bc:b3:57:a5:43:4c:00:5c:6e:b0:73:d1:3f:0b:46:
a2:0f:c4:36:e5:5c:74:f2:23:47:4f:e2:e5:b5:98:73:85:27:
cf:70:11:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:24:08 2025 by rpki-client