Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier: HuA0acZymPIM0T7ro8yz0BO+4VtD47FZvN4CbO7RRoM=
Subject key identifier: 3E:8F:FF:C4:83:83:D9:EB:44:66:98:DF:AD:9F:B0:34:AA:03:61:E2
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 0196C75F5E79451FB1B37FD16F765C7970B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 02:00:38 +0000
Manifest this update: Tue 13 May 2025 02:00:38 +0000
Manifest next update: Wed 14 May 2025 02:00:38 +0000
Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: OtS/HPeMJCOpInreluAbxnLbeFBJEOcp6qDJAg5GRWc=)
2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:5f:5e:79:45:1f:b1:b3:7f:d1:6f:76:5c:79:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: May 13 02:00:38 2025 GMT
Not After : May 14 02:00:38 2025 GMT
Subject: CN=3e8fffc48383d9eb446698dfad9fb034aa0361e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:81:ae:6c:2c:d9:60:97:64:c5:47:a5:32:5b:
e1:64:37:b1:96:c6:52:93:6e:b9:9d:17:e3:9e:9c:
28:47:96:3a:62:6c:ac:8b:3f:78:d8:1d:a9:3d:22:
08:b2:95:a4:0b:cf:1e:23:51:02:15:9d:a9:81:ae:
a3:02:3c:8f:6d:3d:71:98:c2:a8:0a:7f:01:8f:8f:
a5:db:03:b2:69:7f:19:b4:c3:2d:7d:9c:53:f6:2e:
e6:0c:ff:dc:9d:24:92:69:42:c2:86:4c:de:52:32:
07:87:4a:48:c1:2c:b8:ef:84:a8:07:eb:23:ad:1d:
15:a9:11:43:87:77:c5:ef:6b:d6:02:95:89:fe:a2:
6d:25:23:c7:c9:72:46:1b:05:76:03:07:96:67:ba:
39:58:50:8d:9f:29:e7:41:c7:4a:49:22:cf:2f:f4:
1a:cf:83:11:3a:70:15:f6:1c:a2:ed:cb:7b:77:b0:
0b:ac:48:cd:c3:e7:a6:2b:bb:49:ca:71:a7:f6:a0:
52:96:80:37:d9:ca:4b:03:bc:f4:51:80:c1:59:77:
e4:9e:39:02:a9:6e:cb:2c:99:72:88:eb:bc:67:af:
0f:dc:0f:c8:c0:75:a3:90:9e:60:88:fb:3f:e4:91:
b4:7f:48:78:c4:68:c7:fa:f8:a4:9a:77:cb:50:a7:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8F:FF:C4:83:83:D9:EB:44:66:98:DF:AD:9F:B0:34:AA:03:61:E2
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fe:75:64:29:5a:94:dd:b6:f7:92:e2:0f:62:0f:73:68:1e:
2e:2b:08:66:81:21:1d:ff:aa:d3:dc:ec:5a:a3:ee:2c:d9:2d:
3f:96:9b:31:dd:d8:f9:7e:22:6b:56:ac:aa:1f:f5:64:84:d2:
97:07:71:ca:a2:65:17:29:d1:11:fa:5b:cc:d4:07:8c:41:74:
12:cf:e9:96:a4:09:4e:7e:85:13:0b:35:ab:2b:86:88:1e:18:
d5:7b:ac:58:6a:61:64:85:42:dd:53:33:d2:4f:1d:cd:79:9f:
20:fa:f5:7a:db:f1:ca:c7:a0:c4:32:bc:0f:d3:ef:b3:9c:8d:
6a:38:8b:3f:63:ab:3c:f6:e2:cd:22:87:53:81:bf:d5:7a:73:
fb:41:93:5d:57:30:c9:17:25:77:e1:2d:e5:67:14:da:d5:d3:
0a:ce:49:f5:c7:4b:e6:31:15:5e:ab:14:41:85:31:67:5c:29:
f8:2e:4d:17:05:29:67:99:7a:4e:7e:be:44:44:1c:40:d5:8d:
19:b3:bb:33:8f:a8:9f:ae:ec:a8:0d:82:b4:18:37:13:97:76:
9f:d6:56:b1:0e:77:9e:7b:55:8b:ba:3e:3e:78:61:05:62:1f:
c9:2d:21:f2:86:fa:0a:a9:8c:f8:41:9c:6b:43:a2:8f:4b:75:
e8:dc:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:33:36 2025 by rpki-client