Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: saDvwj7sqBeU8LvDSk4Tt8Nz01GsJaQXyd1L6XR2Xg8=
Subject key identifier: 3D:4E:89:DA:75:AD:2A:37:B8:E4:E7:D6:9C:D2:EF:F2:C7:0B:5B:92
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 0196C04B3AF6FE03B4781DDAC83828918726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 0F55
Signing time: Sun 11 May 2025 17:01:17 +0000
Manifest this update: Sun 11 May 2025 17:01:17 +0000
Manifest next update: Mon 12 May 2025 17:01:17 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: GtSSqJJy6vRd3Sy6r8U5KEyS5T/KJBSx5QHgyOfnc+c=)
2: YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa (hash: 8GJk/xJD9TDW949jEwNVPLQ5jxG7+jInYSsAj0hFBHo=)
3: hL7gjsE__TvimmJVNhYnW8HxcTk.roa (hash: fSQmS4KDtYP+UxUBfXGw0aeIOC4KTOr+x3hlF+s6H3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:3a:f6:fe:03:b4:78:1d:da:c8:38:28:91:87:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: May 11 17:01:17 2025 GMT
Not After : May 12 17:01:17 2025 GMT
Subject: CN=3d4e89da75ad2a37b8e4e7d69cd2eff2c70b5b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:ca:41:8f:d5:c6:d3:71:bd:91:60:d8:99:
e1:dd:97:bc:04:e9:fb:bd:d2:1a:49:fb:bf:97:23:
6a:b2:30:c2:86:dc:2a:e0:2c:2b:b4:a2:64:d2:29:
e6:9d:0a:a5:76:29:7b:3d:c3:02:b7:d1:b0:68:c5:
30:de:64:c1:a4:42:ab:ca:79:0a:1a:df:67:80:31:
c9:f6:86:ab:36:8d:b5:0c:28:66:30:68:69:61:19:
a3:ba:e0:01:ce:07:fc:39:2d:90:fe:07:ba:5d:7b:
42:73:5f:51:74:54:a2:86:b6:7c:f6:ab:4f:11:46:
ef:78:cf:98:00:0f:a3:22:49:f3:3d:59:6b:e7:7a:
53:3b:3a:34:b4:df:c0:d2:b1:15:4b:9e:62:eb:44:
af:62:3e:19:ca:90:36:aa:09:d2:d9:88:9d:a7:c5:
ad:69:ed:2d:12:03:cc:18:03:6f:23:d5:b9:ae:a9:
3d:8d:43:0c:4f:0f:e3:02:72:96:fc:77:4b:bd:77:
08:a7:d9:90:97:9d:4f:aa:84:38:86:c7:8b:4e:24:
53:c9:35:e9:43:ef:de:c9:05:5f:29:d7:76:4e:a2:
42:57:08:a8:0d:48:25:df:39:d3:28:d3:cb:c6:1b:
5e:37:a6:31:6e:aa:de:8f:d3:55:5d:86:81:0f:5e:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4E:89:DA:75:AD:2A:37:B8:E4:E7:D6:9C:D2:EF:F2:C7:0B:5B:92
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d6:06:9f:4a:8a:dc:e5:a7:36:b0:83:ad:6d:18:b0:bf:05:
0d:42:ff:53:09:71:5e:ef:24:44:8c:d3:3d:c0:83:20:dc:ce:
84:86:92:2b:05:0b:74:ae:b0:c0:bf:c6:00:f5:cb:ff:39:33:
ce:d0:aa:05:f0:46:24:8c:6a:41:fb:a7:8a:91:d4:fb:b7:d2:
23:b8:02:06:8b:3e:78:cb:55:d3:3b:0b:a7:01:7c:f1:03:cf:
cf:c1:6f:33:b0:b0:5c:88:be:35:44:c2:b7:7b:0e:1f:f8:6c:
c9:c3:a0:92:8a:10:4f:cb:db:3b:6b:bf:39:20:12:40:50:41:
a5:44:ab:ea:9c:ce:a1:57:d6:60:8c:79:29:05:1b:af:9b:d6:
d9:10:4b:a6:03:c8:c3:4b:d5:17:8d:ba:35:6c:b3:34:56:ea:
cb:97:13:8e:d0:de:db:fb:3c:02:7f:33:46:f8:d8:34:80:99:
36:a1:de:2a:06:e5:ec:65:0d:3a:bb:0b:34:a0:4a:23:92:4b:
c7:74:30:20:59:ff:55:3f:f2:8b:b7:0d:ea:4c:47:73:34:d1:
ee:81:bb:71:90:c0:01:18:51:13:f9:0a:20:0c:8b:c7:f0:e3:
02:a7:c5:2b:8f:d3:2c:fb:10:5b:c0:e6:da:6d:c6:63:c0:04:
f4:cf:5a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:03:59 2025 by rpki-client