Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: YAfQx7kscYhU9wrk++M/vEerlqHp3GBUPs0G6FB41gA=
Subject key identifier: 63:F1:0D:8F:D3:33:EA:4E:6D:45:50:09:A6:DE:B4:67:2D:DD:E3:F8
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 01967DFCB6A39B83408E29D529B6CAB570CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 20:00:35 +0000
Manifest this update: Mon 28 Apr 2025 20:00:35 +0000
Manifest next update: Tue 29 Apr 2025 20:00:35 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: AdQ1nOb0h13lQ0R1WqDRpq1trx8pN5ZtDf9pyqi9u6w=)
2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:b6:a3:9b:83:40:8e:29:d5:29:b6:ca:b5:70:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Apr 28 20:00:35 2025 GMT
Not After : Apr 29 20:00:35 2025 GMT
Subject: CN=63f10d8fd333ea4e6d455009a6deb4672ddde3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:54:1b:0d:d3:de:a1:39:25:e8:6a:16:35:
72:79:ab:e4:9e:9a:3b:3a:38:a5:89:e8:cc:7f:a0:
ff:4b:6e:5f:40:b6:9d:bd:b4:a6:0f:1c:0f:29:7c:
62:a3:8e:29:8d:c5:d4:a5:9b:b1:d6:13:96:d9:70:
9e:29:59:41:74:b0:bd:81:d6:33:a0:30:aa:b0:8d:
e9:a5:e1:5d:7e:83:eb:9f:d7:42:07:fb:d1:56:d3:
32:03:1a:a3:ba:6c:9c:35:ee:fe:ab:3b:8b:2c:84:
92:73:28:8f:3c:e2:b2:c4:7b:4d:9b:aa:2f:c6:f9:
d0:4d:aa:d2:3c:c3:cb:1f:44:a5:4a:f0:f4:12:e5:
96:ce:70:f9:39:48:5f:f2:23:27:3c:67:91:d4:6b:
14:8d:01:0c:62:cc:12:22:6d:c8:b8:9e:bf:cf:ba:
38:c7:01:0d:99:77:8a:4c:3a:f5:5f:34:52:18:03:
70:b7:54:ae:29:aa:ec:16:a7:a3:19:b6:5f:cd:bf:
be:0e:5f:3e:49:72:f3:e0:46:f6:49:e3:8f:37:85:
f6:2a:5d:04:33:61:de:cf:ed:d8:c0:d5:a3:eb:89:
8e:c0:cd:a5:07:d5:f3:89:96:cd:c3:f4:3a:dc:ef:
dc:71:a1:ff:3f:43:b1:d8:9f:c2:89:53:ff:4b:a1:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F1:0D:8F:D3:33:EA:4E:6D:45:50:09:A6:DE:B4:67:2D:DD:E3:F8
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b1:5d:39:7f:37:96:f4:9e:f0:59:3c:91:28:d5:40:4c:56:
3e:d8:98:01:5c:9c:be:4f:82:42:d4:73:14:ef:59:9f:e6:62:
81:59:65:bb:48:68:59:8e:80:d5:ed:d4:2e:3c:1a:d1:47:4d:
12:bb:d7:64:80:c7:53:05:84:9e:d8:91:97:25:a8:28:ee:b5:
e5:3a:53:b5:2e:6b:39:73:c5:0f:9a:a7:e1:39:11:0e:fe:5f:
cd:12:d4:c8:c1:9f:57:44:92:19:51:32:3b:29:1b:24:6f:7a:
9b:df:63:e6:b1:e2:36:9c:17:c8:c1:a6:f4:6c:b7:2c:08:bf:
fb:79:f0:fe:f2:6f:83:1d:0f:79:37:4c:11:f3:dd:2a:a2:94:
45:f5:7e:e0:ef:34:15:2c:a2:36:cd:2e:95:e1:7f:55:d0:b9:
9b:45:98:7d:d3:9a:e0:3b:8d:23:6c:45:6c:f7:bf:c6:68:30:
67:76:71:98:16:b8:08:0d:78:23:c8:50:9e:0e:d3:3b:5c:1e:
0f:66:4d:84:3f:41:65:d7:3d:54:49:7c:2a:92:f8:f8:09:87:
f7:40:ef:5f:4f:0b:22:b0:e0:a0:b5:19:fa:cd:d7:f6:ea:33:
87:5a:ce:55:1f:f3:a7:c0:df:6e:c5:6c:81:d6:5c:5b:52:12:
e2:bc:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:40:54 2025 by rpki-client