Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
File: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft (raw, json)
Hash identifier: sDZytTlRtM6lIdWGij0N/p/aP/nDSeaEkvf+y5BL/XI=
Subject key identifier: 9A:45:9F:55:90:FE:7D:31:A6:18:AE:D2:B4:DD:E8:36:69:C9:16:3F
Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
Certificate issuer: /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Certificate serial: 0196CC85CBBEDECEA80E16BFE72D3303C71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
Manifest number: 0DA3
Signing time: Wed 14 May 2025 02:00:42 +0000
Manifest this update: Wed 14 May 2025 02:00:42 +0000
Manifest next update: Thu 15 May 2025 02:00:42 +0000
Files and hashes: 1: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl (hash: j6KYPENgp/veQYVfvrqnVZHVzx1AviQi3ycQV4L5A+8=)
2: OmRgq5feW-kx9jvx4AAFdyevf30.roa (hash: AB8XLVSpCXGmgkqlgUf55sAgLfrFZhXp5WrR9S6Xa20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:cb:be:de:ce:a8:0e:16:bf:e7:2d:33:03:c7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Validity
Not Before: May 14 02:00:42 2025 GMT
Not After : May 15 02:00:42 2025 GMT
Subject: CN=9a459f5590fe7d31a618aed2b4dde83669c9163f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:d0:d7:ad:5a:cd:fb:ac:58:e2:f1:47:a2:
67:14:9c:53:b0:9f:ed:39:26:6b:42:60:a4:59:d5:
da:44:7b:2c:eb:1b:c6:1d:d7:19:d6:ba:81:4b:b3:
fb:81:35:3d:a6:63:90:49:16:33:28:d3:8b:42:2b:
08:b7:5b:a1:82:95:c5:50:c0:da:3f:a4:97:23:e5:
66:4e:3e:85:07:b5:7e:b5:5d:b0:81:e9:5a:17:16:
dd:d3:c0:e8:a9:ae:1f:b2:05:15:da:20:e3:24:68:
2a:06:65:01:da:1e:0b:9c:25:50:23:0c:a8:27:4d:
ff:54:a4:1c:4e:c2:d9:d6:89:c5:73:df:39:c3:c9:
ad:ca:7c:7e:53:20:77:1e:25:32:9b:1e:af:f2:54:
76:fa:08:89:7a:77:1a:48:48:7a:57:14:28:83:77:
56:70:95:72:32:9a:d0:8e:68:f7:6b:54:25:aa:9a:
af:a5:3a:9a:56:2b:a7:ee:14:c1:ce:94:4c:21:29:
6d:b4:89:13:51:44:5b:31:82:10:29:ed:29:f8:c7:
ce:95:ae:ba:7e:1a:03:59:5b:20:dc:e8:62:11:2b:
47:93:c7:fb:1c:8b:ab:7c:7d:76:de:71:d9:97:20:
38:9a:e6:29:a1:d4:16:9d:d9:91:fa:de:76:8e:7c:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:45:9F:55:90:FE:7D:31:A6:18:AE:D2:B4:DD:E8:36:69:C9:16:3F
X509v3 Authority Key Identifier:
keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f0:aa:f8:96:74:d2:62:34:2a:e0:47:f3:e4:a5:f8:eb:05:
06:68:78:9b:d0:fc:99:83:fc:a3:5c:d0:db:56:9c:26:90:23:
7b:da:bf:a1:5c:b1:23:13:92:40:e4:ff:a7:40:d6:c2:91:8c:
03:48:a5:ff:c1:03:5b:ab:c0:be:83:39:2e:af:e8:1f:21:8a:
47:fe:32:4a:22:97:44:33:da:19:eb:03:8e:61:36:7c:29:4b:
dd:a2:2e:7b:03:f1:bb:f7:ed:af:8b:80:83:e2:56:a4:08:82:
c7:c2:f2:fd:aa:8b:16:93:34:2e:13:d5:93:eb:f6:8b:ed:3d:
c6:dd:8c:ad:5d:1c:35:54:66:5c:a9:23:d2:93:1b:32:b6:2a:
62:2e:b1:9a:f9:b7:b7:e9:d2:a3:af:6a:3a:d4:01:71:69:3b:
b3:40:97:60:12:f7:a1:27:a2:7e:88:52:5b:bb:5d:14:ed:01:
ee:78:d4:b1:0f:e1:06:14:06:f7:ef:ac:33:a5:22:d3:d7:2c:
11:71:54:b8:3d:c0:aa:26:9d:9d:24:c6:70:4f:66:8c:fe:9a:
13:51:1a:22:df:22:42:6e:b5:b6:44:cf:74:a6:da:0f:60:1e:
58:f3:a1:a3:b9:52:8e:0c:9a:2f:1f:ea:11:1e:d5:11:1c:f9:
6c:6c:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:03:59 2025 by rpki-client