Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
File: dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json)
Hash identifier: RS+qkKZTj3EeaDvm2quCGqPQq0Q2h0HZSbmnKa7EV6A=
Subject key identifier: E4:26:8D:C2:8A:FD:00:CA:B4:AF:68:26:08:12:EB:BB:32:FF:A8:BA
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial: 0196CA602DE916E0BF1A5A6A58BE3E290072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
Manifest number: 0B28
Signing time: Tue 13 May 2025 16:00:22 +0000
Manifest this update: Tue 13 May 2025 16:00:22 +0000
Manifest next update: Wed 14 May 2025 16:00:22 +0000
Files and hashes: 1: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: rNk6phissLtKJMP3jWmHYvtqlbtmWF7F2vOoABzuAxI=)
2: vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa (hash: RoD9r1uYXNwcvEQVZCci6nqFAbGm9X9wv8JUg9I5naM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:2d:e9:16:e0:bf:1a:5a:6a:58:be:3e:29:00:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
Validity
Not Before: May 13 16:00:22 2025 GMT
Not After : May 14 16:00:22 2025 GMT
Subject: CN=e4268dc28afd00cab4af68260812ebbb32ffa8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:31:a1:3f:ea:61:fd:63:12:49:ca:a3:98:
93:94:96:21:0b:14:36:07:3e:ed:34:92:ff:ab:ab:
10:04:23:31:13:fe:c9:f3:90:95:6f:b5:aa:6c:7a:
ba:f9:89:71:89:3c:88:fe:23:ef:fd:20:4d:95:6e:
aa:7e:36:57:c3:5f:69:c4:0c:a9:4e:dc:91:70:23:
a7:d8:47:71:1f:54:58:86:58:00:3a:46:79:3b:02:
e2:32:66:f6:92:9d:f7:68:53:55:55:79:72:19:6b:
bc:f8:34:8f:e6:df:6d:5f:cf:01:3c:83:ea:ac:3c:
fd:cf:2d:77:54:46:b2:85:e1:0e:b7:6c:8b:f2:a2:
94:2c:6a:85:ee:91:a5:76:56:91:23:ba:27:60:3b:
53:0b:a1:a6:05:aa:5f:ca:d3:c3:a6:f6:74:9e:1e:
d9:de:c9:9e:fe:b1:8d:9e:d4:e5:9b:cf:a7:2f:13:
7a:8e:32:00:fa:55:7e:91:44:ef:61:bf:1d:09:e2:
99:a4:ca:53:1f:80:1d:2c:70:b6:a9:1c:03:a2:60:
cb:17:b9:3f:75:cd:a1:37:fb:3a:ce:22:68:9f:67:
e7:bd:07:81:f0:5d:c5:cf:0f:5e:c7:b5:a9:ed:4c:
a4:1d:d2:21:b1:f2:33:42:86:59:06:aa:09:09:15:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:26:8D:C2:8A:FD:00:CA:B4:AF:68:26:08:12:EB:BB:32:FF:A8:BA
X509v3 Authority Key Identifier:
keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3c:ea:6c:3f:3f:39:c3:67:17:89:90:f6:de:1c:90:f6:7c:
05:e6:7c:6d:45:80:37:c6:24:07:7c:17:a5:93:eb:5a:7f:d0:
b4:ba:23:20:d4:9d:f5:da:2b:27:40:30:2b:16:ff:75:10:58:
bf:05:13:58:e3:ae:1a:85:9b:19:a2:b8:9e:0e:d3:11:30:6a:
49:17:13:7a:11:41:dc:7f:44:55:b9:1a:3d:ab:68:c4:f0:3c:
68:2d:cf:a5:ec:40:53:ac:32:77:60:66:1a:24:3f:03:97:53:
fd:a9:a2:23:4b:e6:04:2f:6d:43:25:f1:3d:f3:b7:8a:42:ce:
8e:1f:22:4a:f7:f7:f7:f9:26:6b:9a:03:6b:34:1c:bc:9d:06:
17:e2:43:2f:36:c4:f7:ff:3e:4c:8c:d2:82:6b:85:65:2f:ad:
9f:a3:81:f7:b0:4c:26:55:12:06:08:ec:25:29:ab:1f:ba:21:
60:78:75:aa:c4:50:38:fa:1a:32:3a:ad:71:63:21:45:94:55:
f2:73:2a:11:e6:19:bb:4c:f4:a9:51:16:c2:c4:45:40:75:43:
9d:44:76:67:51:09:18:9c:3a:ec:40:f5:c4:bd:dc:e1:b8:ea:
2e:aa:79:cc:fd:e6:58:9e:2c:2b:ae:f9:40:25:8e:ef:4e:d2:
87:ed:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:41:29 2025 by rpki-client