Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier: BickCwxHBzgiQiqIFdjx5wXZYwfa1en27E/3dehx4b8=
Subject key identifier: 7F:7E:C6:7E:14:33:E0:01:75:48:23:9A:E3:6B:56:ED:BC:DD:DC:C4
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial: 0196BFDCD7D10BDB8597243BD8B963C77EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number: 5D
Signing time: Sun 11 May 2025 15:00:43 +0000
Manifest this update: Sun 11 May 2025 15:00:43 +0000
Manifest next update: Mon 12 May 2025 15:00:43 +0000
Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: wH2cGzm0IpZJOOKDLCr6Axszg7TOPTcrbhBVB1wbiKQ=)
2: jcTO1fBkVXsp4y6wlcBbebFM8iw.roa (hash: NkT9ooqiKYOuDT79Rkr1WXdOvqeB/1D8TcQH5fNDnzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:d7:d1:0b:db:85:97:24:3b:d8:b9:63:c7:7e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Validity
Not Before: May 11 15:00:43 2025 GMT
Not After : May 12 15:00:43 2025 GMT
Subject: CN=7f7ec67e1433e0017548239ae36b56edbcdddcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:84:18:35:91:d7:39:38:21:d8:c3:32:2a:
30:b2:e4:35:3d:ea:e8:fd:d1:0b:30:0b:cd:ab:95:
57:64:38:ed:70:ea:d9:78:5c:5e:09:21:ef:5f:0c:
3f:df:41:f4:fb:67:83:2e:28:e5:b5:bb:0c:08:e8:
68:65:33:70:ff:56:e6:c8:9e:a1:89:a3:f9:78:44:
b8:f0:4d:32:b0:a1:ce:13:32:19:da:e1:66:02:04:
f2:97:a8:ae:44:2a:e8:62:9b:fb:ab:49:57:49:8a:
dc:0f:6c:5d:e6:33:16:fe:2f:19:7e:1b:4d:d5:93:
80:60:fa:ea:36:1f:6f:40:4f:e9:76:71:a9:c7:f6:
f9:1c:d6:76:1d:a5:17:fd:45:c2:34:98:6a:c2:42:
f3:b4:0f:ab:7e:f1:b1:a1:ef:4e:e2:1f:65:c9:cb:
5c:91:f8:cd:9a:15:72:ef:0f:4f:b5:e5:bd:d5:ec:
d8:e4:9b:24:35:9b:7f:fe:73:fa:ef:41:de:b1:c1:
71:81:fa:a2:5e:c4:cb:21:dd:5d:c0:e8:a5:c3:b7:
02:b5:3c:d3:97:c3:dc:b3:c2:6e:2a:84:b0:ef:b5:
2b:7d:9f:bf:33:dc:6b:8e:ba:67:da:75:af:48:a9:
df:af:97:e3:94:f6:a0:8c:d4:91:1f:bd:68:cb:eb:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7E:C6:7E:14:33:E0:01:75:48:23:9A:E3:6B:56:ED:BC:DD:DC:C4
X509v3 Authority Key Identifier:
keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:05:9e:55:67:aa:59:cc:41:00:c5:f4:52:d3:dd:36:dc:52:
ed:95:90:25:c2:6e:39:11:ae:10:7c:9c:34:9b:3d:bf:73:2b:
87:9e:94:53:72:81:58:6f:35:56:69:26:97:81:19:7b:49:ba:
a6:f7:b3:1f:06:7d:a2:8d:b7:5f:ca:54:10:f4:f0:a2:2d:5e:
9c:03:40:f1:cb:47:6b:b5:6c:94:fc:6a:b3:b5:69:3c:67:59:
4b:db:3c:65:34:3c:f0:fe:81:70:c5:90:82:b2:02:88:4d:a5:
11:da:89:95:d3:d7:37:7d:8c:02:bf:4e:b3:ff:c1:77:5a:b4:
7f:aa:ef:02:16:ea:81:d1:ca:02:be:1b:ba:d8:4c:2d:93:78:
3d:b1:b4:7e:19:2f:fa:96:27:5b:66:97:8a:e8:c4:b9:93:68:
1b:0d:d2:48:a9:cc:d5:95:8c:4c:a9:01:b8:c5:e5:56:a2:12:
4b:89:81:b6:61:e1:dd:37:c2:ca:1a:1c:90:b5:b6:16:d8:dd:
ca:f2:b3:0e:e3:ee:43:a6:79:d8:1c:ca:03:07:89:eb:22:50:
17:ac:1c:0b:12:52:47:f0:0c:e1:01:98:71:aa:2f:07:0b:d0:
d2:30:90:bc:88:77:0b:62:fe:b0:b3:c4:0b:97:b6:42:44:07:
67:e1:88:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:46:51 2025 by rpki-client