Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: WutTe21DFt57Hq6RWi8skPIgJReFjYJa55QiOINtReg=
Subject key identifier: FE:91:F0:02:5F:6A:D7:05:94:59:0A:17:2F:C1:BC:74:FF:83:3F:1D
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 0196BDB71872B09EEF7AEC0514DB3ADC59F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 05:00:15 +0000
Manifest this update: Sun 11 May 2025 05:00:15 +0000
Manifest next update: Mon 12 May 2025 05:00:15 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: X8ck3bifTKIcjwR3w8dUQOeZmvGvtqEwCR6MEFHJhCc=)
2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:18:72:b0:9e:ef:7a:ec:05:14:db:3a:dc:59:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: May 11 05:00:15 2025 GMT
Not After : May 12 05:00:15 2025 GMT
Subject: CN=fe91f0025f6ad70594590a172fc1bc74ff833f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:4f:e1:61:1f:2a:d8:1d:18:36:7e:18:56:
fd:fc:8e:80:c9:dd:b0:f2:e1:a4:9d:8f:dd:9a:af:
3c:eb:35:1d:99:f4:ee:64:2d:66:03:0a:b7:97:62:
e5:ad:7c:99:b2:c2:cf:dc:30:a6:cf:ed:28:64:d6:
b3:b7:b2:6b:7f:cc:7e:0e:a2:b4:ad:54:e7:7f:59:
a9:97:2c:d7:dc:d8:9d:50:01:39:63:02:83:6b:1e:
60:38:87:f1:b4:5a:73:d9:a9:31:4a:57:7e:b6:40:
5a:f4:31:cc:a0:b6:78:6d:bf:b3:f0:a3:87:ae:cf:
c4:5f:bf:f8:6c:90:be:a5:2c:f0:5a:82:9f:d9:cf:
3c:4a:42:f4:4a:65:fb:8b:0b:27:8a:20:b8:0b:b8:
ce:da:e4:74:ea:d0:25:a1:3a:2d:ed:5d:3b:d6:36:
ad:21:c2:92:62:ca:8c:4c:d1:a3:22:2d:38:ed:e4:
2c:37:59:34:20:32:72:5f:2a:a5:18:94:d5:04:46:
64:57:c1:78:cd:e3:c5:7d:99:1d:8b:3a:c9:e2:d7:
bb:65:f3:93:f5:5e:bd:e6:57:fe:a9:c7:e2:5b:7c:
ed:9a:b8:1e:24:b3:81:8f:f6:0a:e3:c9:56:60:d8:
74:25:30:4a:19:72:1f:06:3e:71:3d:7c:50:94:97:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:91:F0:02:5F:6A:D7:05:94:59:0A:17:2F:C1:BC:74:FF:83:3F:1D
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:48:6f:8a:7b:ee:15:ef:e5:94:6b:3a:63:90:02:14:07:e2:
41:85:40:e7:0f:ff:4b:18:3a:7a:98:d1:b9:d3:a3:96:7c:e1:
e7:d9:ac:70:56:d3:ad:d1:6a:3e:ce:aa:31:6a:62:19:f4:f7:
48:12:d1:f8:1e:eb:ba:3d:f9:5f:74:ab:2a:9b:c4:7f:b7:cd:
06:d2:46:cf:61:17:2c:a4:4e:a5:57:00:86:19:47:b7:a3:f4:
d5:f8:b5:f7:2f:61:ab:36:da:56:7a:8b:8d:15:f3:96:55:11:
ab:c7:e7:54:b3:8b:3c:63:7a:59:cc:e3:32:5d:ac:cc:1d:e8:
e3:4e:40:a6:de:74:24:4b:73:34:55:3b:6c:77:4a:d0:14:26:
5e:36:f8:5d:e4:76:5a:8b:3a:85:22:cd:d7:a7:6b:9c:59:56:
bb:b3:5b:d6:68:89:bc:04:20:63:eb:78:16:14:b1:2c:27:52:
98:db:3d:e9:80:13:5d:3d:d1:92:d4:db:68:b3:8f:5e:bb:23:
0e:f6:b8:e9:a0:06:d4:ef:8a:7a:e6:a7:f9:87:0b:be:53:3c:
d0:8b:d9:e5:fa:1b:cc:44:08:b5:54:8a:51:9b:37:c0:9c:af:
76:84:ad:7f:47:a8:4e:a1:ce:42:0e:5b:bb:96:16:4e:70:0b:
12:ef:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:35:37 2025 by rpki-client