Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: l3jF+mdo7GKeW57t5a4m1YiN+LLS7XaU8TWPbreQnJc=
Subject key identifier: C0:2D:6F:10:41:6C:B0:30:97:CA:0B:85:03:6F:67:B0:98:EB:E0:EC
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 0196C7CD5D56AE59F4D5281780AFE3544C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 14CD
Signing time: Tue 13 May 2025 04:00:46 +0000
Manifest this update: Tue 13 May 2025 04:00:46 +0000
Manifest next update: Wed 14 May 2025 04:00:46 +0000
Files and hashes: 1: 0fxrFgaOEJg9dbqq-7NyccGKfo8.roa (hash: PianfnGVaMrVPowuDRPfsiFVI9vqBZ2hff1ALtVypRc=)
2: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: hxQa9UW5pggR5mrx5fuFwtn1s6ZoqyRus+NJ7kL0CAU=)
3: wlvSN6qng0SspfaRqRgU0QaR_is.roa (hash: dvmYB11eIHXfV35gEc7/J0+3NCXH6IER/8ZhOiLqTT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:5d:56:ae:59:f4:d5:28:17:80:af:e3:54:4c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: May 13 04:00:46 2025 GMT
Not After : May 14 04:00:46 2025 GMT
Subject: CN=c02d6f10416cb03097ca0b85036f67b098ebe0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:c8:04:e8:90:d3:e2:37:0a:61:83:84:44:
ff:e7:e6:3b:a3:a4:3e:d4:77:93:ce:b1:72:05:a7:
3f:c2:1a:f5:0c:77:e9:29:ef:50:cb:6b:c7:78:5f:
65:c8:a5:23:66:df:a5:d9:2e:05:ca:7f:8b:5e:7c:
19:6f:6a:8c:71:5f:40:61:27:70:bf:a4:37:72:a3:
92:71:d9:c8:fa:74:43:b1:5c:78:76:de:76:a8:70:
c7:85:4d:9d:27:65:0d:b8:fc:a2:6b:07:19:62:cb:
6d:5f:de:86:18:7c:65:d3:d6:72:77:f6:21:33:85:
30:ee:a1:38:8e:4c:85:e1:60:50:e8:52:5d:4c:d0:
d1:de:a6:72:c3:52:05:6f:3a:3d:0d:e9:ab:c7:5e:
7f:da:c8:4e:64:e0:cb:92:e9:a5:ae:ed:49:b2:83:
24:6f:66:34:a1:12:76:b3:68:1a:82:27:8a:a3:a2:
1a:e7:42:f9:e7:63:31:34:0f:5f:25:f4:dd:33:cb:
3d:72:70:9e:94:ad:3f:41:6b:72:34:1a:9a:16:c6:
19:19:d7:25:68:d3:27:a7:dd:d3:8b:63:f4:31:46:
2a:0d:1c:7d:d6:a5:33:fe:ad:d1:d7:e2:55:b6:ee:
28:ea:41:83:6b:57:49:59:6d:59:02:39:fb:74:66:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2D:6F:10:41:6C:B0:30:97:CA:0B:85:03:6F:67:B0:98:EB:E0:EC
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:92:a3:97:8f:eb:5d:c9:d0:bf:d6:a4:91:b1:39:f3:0f:ea:
37:8f:ef:1a:67:1f:a4:b0:44:6d:01:e3:56:87:74:cb:93:6e:
7f:a2:6f:02:a5:30:fa:23:b9:79:aa:1d:fb:59:47:1d:5d:30:
32:32:9f:01:61:0b:5e:73:d9:72:35:bc:33:e7:de:de:1a:96:
fb:c6:0f:f9:35:92:10:40:a2:f8:c4:bb:29:95:86:c0:92:36:
af:df:0a:bb:97:60:05:56:92:66:23:b9:16:ee:98:2a:5d:b6:
a0:9a:8f:9c:10:9d:a1:cf:25:b6:1c:ae:1e:1b:d5:67:c5:02:
8f:34:b1:ff:27:00:76:df:79:9d:65:22:03:c3:f4:74:d9:8f:
86:71:f6:5d:bb:93:d9:e5:ed:0c:de:9a:47:0b:56:f1:4f:08:
8a:ce:32:c8:bf:f1:7e:41:81:5e:45:ce:84:4e:26:18:16:76:
2e:fd:31:7d:c3:28:38:af:f2:a9:86:73:bf:fe:b7:cb:ed:c9:
a8:3b:74:b7:65:a9:65:e7:b0:5a:14:67:c1:1f:e0:64:f0:6c:
81:e8:b3:b0:d4:ae:74:8a:b0:97:77:6e:fb:cf:99:de:6c:42:
49:c2:b7:79:07:77:0f:a7:34:37:c7:72:e3:cb:c3:3c:a8:06:
74:68:ef:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:47:35 2025 by rpki-client