Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: 5kWBPmsKFWKjBqLB1ZiPayQYYI66sC+bGJAn0HzJt0U=
Subject key identifier: C1:ED:48:05:58:0A:EF:FB:82:10:A6:18:93:AC:50:E7:11:3A:C2:2E
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 01969D509CB44DEB65430866EA9AB5A1EC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 0639
Signing time: Sun 04 May 2025 22:00:27 +0000
Manifest this update: Sun 04 May 2025 22:00:27 +0000
Manifest next update: Mon 05 May 2025 22:00:27 +0000
Files and hashes: 1: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: j5DCxE4+RnazE+kIie2iFQyEL34W9ti2QDqUd4Qegq8=)
2: dHoLxhcoAEUuRvCDtuAMppchNpk.roa (hash: u7XKc4RK1KVYd/fCuO1odA9687+dNJirNjEcVK4j3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:50:9c:b4:4d:eb:65:43:08:66:ea:9a:b5:a1:ec:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: May 4 22:00:27 2025 GMT
Not After : May 5 22:00:27 2025 GMT
Subject: CN=c1ed4805580aeffb8210a61893ac50e7113ac22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:21:2a:14:ac:3d:a3:25:61:18:26:b6:85:a4:
1d:63:de:aa:eb:6a:a3:99:42:eb:19:25:9c:f1:a6:
9b:0a:1f:a9:c9:d9:41:04:e5:b8:bb:e6:4e:85:37:
ba:21:dd:ff:ea:0d:67:73:e4:f5:e9:d2:29:3c:34:
35:c6:d5:9f:ed:33:8b:ff:96:3b:2b:da:2e:83:0e:
b9:cd:6d:3d:69:7e:3c:a5:ce:24:fb:a5:24:0b:af:
75:6d:36:aa:42:ef:a1:11:24:7a:19:09:3e:f4:1d:
be:93:17:d5:1c:cf:46:d1:ac:15:d8:3a:53:29:ce:
1f:67:be:bd:40:60:85:50:e3:14:3e:c5:a4:71:ec:
1e:e7:fd:ce:c1:23:c6:44:99:f0:78:3d:a9:cc:8f:
2b:0a:74:65:b8:9f:83:a5:b7:ae:6f:95:ff:3b:4b:
be:64:93:ad:0a:44:61:5f:c2:c9:5b:39:1e:9f:83:
47:d8:5d:c3:e4:e9:30:ac:4f:7f:3d:ce:28:0c:26:
76:0b:71:1d:c7:fb:57:07:c6:a0:a2:71:48:63:a7:
68:d4:ea:c8:cf:d1:a3:c6:15:6f:88:84:57:43:d9:
ee:3d:fb:c4:e0:ed:5a:49:40:15:20:bf:c2:a5:b7:
6e:b8:f1:a3:df:05:80:18:02:c0:75:f5:ef:9d:77:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:ED:48:05:58:0A:EF:FB:82:10:A6:18:93:AC:50:E7:11:3A:C2:2E
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b1:90:d6:14:cd:58:e9:7e:3c:6d:97:fc:59:47:27:3d:45:
57:d8:e2:ac:b7:53:4c:09:4a:7d:c5:23:ba:86:d2:4c:b2:c7:
1e:65:8e:92:9b:2f:3a:c9:29:6b:59:f1:d1:79:a3:c7:75:b9:
14:e2:35:da:22:85:95:30:95:bd:60:93:2e:bc:c2:b4:18:4c:
fc:8c:44:c8:7f:8a:b8:1d:63:f8:5e:86:88:47:93:d8:5e:3b:
60:40:87:a5:78:06:7d:1f:4a:8a:46:d9:63:9b:85:16:6b:79:
6f:2f:d6:d4:12:6f:69:f4:fc:f9:9b:c0:cb:b2:5b:07:03:19:
b3:83:19:dd:ee:36:3e:50:d0:04:15:17:fc:3f:a6:c8:89:1e:
fe:ad:76:a2:b4:3d:bc:f5:54:02:1b:71:b9:1d:33:af:6d:27:
a9:d7:68:53:a1:76:ae:30:c9:0f:bb:bc:12:1c:55:0f:bc:a5:
e4:5c:90:57:e5:ff:96:1c:ec:8c:e5:13:c7:c1:c6:d2:75:9c:
db:92:69:1a:14:e8:86:04:a9:7b:cb:d0:4d:3d:17:8b:ac:0d:
7a:a1:d8:3f:6b:6b:fb:73:ca:c4:bc:09:42:b9:6d:e0:1d:f9:
36:30:b4:b8:d0:68:a0:ec:eb:a1:d7:d8:69:c0:2f:dd:4d:47:
be:03:ba:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:15:21 2025 by rpki-client