Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier: bEoIURMwZIlVzvk73BpXrdvMPZBbzqMslwh6rb9QobM=
Subject key identifier: 4C:3A:13:2F:A3:FF:14:F0:29:8A:58:11:1A:69:C8:EF:F0:BC:FD:AD
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019679B217EEBF3A799943AEFCF0A7497AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number: 1549
Signing time: Mon 28 Apr 2025 00:00:36 +0000
Manifest this update: Mon 28 Apr 2025 00:00:36 +0000
Manifest next update: Tue 29 Apr 2025 00:00:36 +0000
Files and hashes: 1: 3vEPBG1oI2P7D_OfeL-L-zO3dlY.roa (hash: tN3ytiGRqjapeYsvwHwSYsXkP2Hw2Lot2BTQS7jncsI=)
2: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: /H5WLjrglL/fVazq1/FG1uW+mvvBV/0lLf0zCSCe+Es=)
3: bcWfR8rwiXZJKXw7csxA9XlCgwg.roa (hash: rqhucY+7yJVRYn7rz1vfYMEXbMDU85aTNKSQTGBSLrk=)
4: jN3YKyZr7fLBbaM-ys_51VKLM4I.roa (hash: /Z7rTH+6bXmxYBkfBLPrrW+aXm6fTfnVD3Lj/2mMT08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:17:ee:bf:3a:79:99:43:ae:fc:f0:a7:49:7a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Apr 28 00:00:36 2025 GMT
Not After : Apr 29 00:00:36 2025 GMT
Subject: CN=4c3a132fa3ff14f0298a58111a69c8eff0bcfdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:35:47:e6:9b:2b:dc:1f:35:26:cf:4f:c2:
df:30:7e:23:ee:2a:ec:20:f6:b7:d0:b7:bb:f1:f8:
00:49:75:75:0a:91:4e:c3:d9:0d:07:c3:fa:e1:cf:
6b:a2:97:97:fc:bb:30:da:7e:47:c7:71:13:ec:91:
39:7d:1c:04:85:bc:8e:e4:db:4d:39:2f:1b:e6:97:
30:6d:3b:f2:91:c8:12:a3:d4:bc:d5:36:eb:78:a7:
3a:fa:14:34:d5:4c:b0:a9:38:00:90:f2:98:09:03:
1b:f0:86:89:3f:85:8d:29:6c:52:a5:ea:4d:36:c7:
41:bb:a0:00:c3:58:dd:39:63:d7:8c:8a:5b:be:7b:
23:2c:ec:26:a5:3e:31:db:4e:9b:95:5b:e7:ad:ff:
00:45:3e:ba:e5:59:29:8b:81:30:dc:c4:11:ad:91:
65:bc:09:26:21:64:aa:c8:e0:7d:dd:a3:e7:57:4c:
9b:ec:46:30:31:c8:99:26:1b:d3:5f:d3:87:40:e2:
3e:01:2f:58:20:6f:de:c3:74:99:81:ad:9a:1e:53:
7e:7e:99:70:e4:7e:35:99:e3:e8:84:4f:52:08:0d:
57:75:88:30:a7:1d:e0:2a:01:95:ff:94:f7:19:bb:
10:33:7a:1b:5a:93:a5:a2:f1:4e:04:c2:4e:c4:ed:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3A:13:2F:A3:FF:14:F0:29:8A:58:11:1A:69:C8:EF:F0:BC:FD:AD
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:09:c5:9f:69:a7:d9:7b:9c:54:f7:34:b8:86:31:d5:29:c7:
bd:5f:15:97:e1:0b:70:f8:9d:f7:7c:0c:a6:9e:c1:9c:bd:5b:
1a:7c:34:49:fb:ad:f7:45:45:33:c0:93:66:7a:19:65:81:8d:
b3:fb:50:13:aa:94:28:73:99:7f:92:07:e9:88:df:16:73:17:
bf:49:2b:46:21:63:65:4e:6e:b2:d7:0c:db:1f:88:5b:af:be:
b1:82:08:d6:6c:5a:39:3d:b0:b6:06:3c:a5:ee:f1:7c:cd:68:
7a:aa:98:ae:a0:40:53:a6:b9:d3:f0:94:d7:47:51:bf:d3:b4:
8a:29:e0:c8:df:f2:91:2b:ea:ef:ff:27:51:55:0d:20:10:17:
43:bd:f9:8f:e6:41:f5:5b:05:4b:e8:4f:fa:af:ae:21:1e:2e:
ce:76:2f:a7:70:cb:4d:00:aa:80:03:d6:0c:77:cf:b3:a5:8c:
1b:fa:5f:49:55:39:b5:af:fc:4a:87:4b:57:eb:d2:7a:f5:b2:
5d:b9:68:08:48:f8:a6:fa:16:db:c0:d0:82:63:95:bf:c0:5f:
ed:85:cc:c1:0a:ac:3d:10:fe:36:2b:20:a3:1c:0c:89:61:f1:
b6:f2:81:5b:a1:7a:60:ca:50:c5:1f:40:02:80:8f:ea:42:59:
17:92:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:27:43 2025 by rpki-client