Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: xBam0tIW+b8toilfFp9bquI4eMVuX1Xp88o0spyXvsI=
Subject key identifier: BC:CD:FC:2D:F8:36:27:40:E5:06:43:1D:C8:FD:6E:CE:1B:20:DF:A4
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 0196BF37DB79FB969422232CF98A3B6C9648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 05C0
Signing time: Sun 11 May 2025 12:00:30 +0000
Manifest this update: Sun 11 May 2025 12:00:30 +0000
Manifest next update: Mon 12 May 2025 12:00:30 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: o1aZuKGZ8pLCXEnImOyCR2Nju9AOhl3u/nEON2qRsxo=)
2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:db:79:fb:96:94:22:23:2c:f9:8a:3b:6c:96:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: May 11 12:00:30 2025 GMT
Not After : May 12 12:00:30 2025 GMT
Subject: CN=bccdfc2df8362740e506431dc8fd6ece1b20dfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:6c:dd:75:08:62:66:20:04:4b:43:0e:c9:
d5:7b:cd:be:a4:c1:43:05:1b:d7:72:94:9a:1f:29:
af:a8:2b:15:3a:6e:b3:40:cc:9e:db:60:92:42:4b:
2a:87:70:c0:a9:93:68:db:26:3e:63:e0:69:70:50:
34:fe:ea:f5:8c:81:94:48:50:03:17:20:8f:e6:19:
68:dd:6c:21:ce:6e:4c:dc:aa:a6:dc:ad:37:9b:0c:
7c:78:78:4f:42:ad:c7:bc:a7:d0:77:55:25:03:83:
92:5e:14:a6:6c:2c:6d:f8:40:e3:83:fd:e4:21:8c:
f7:9e:29:9a:c3:4b:9c:99:e9:b6:a7:22:d2:21:e7:
24:9a:4c:b4:23:df:c8:86:e6:77:68:6d:e9:d5:59:
b1:33:53:09:4e:2f:8d:cd:ee:cd:f8:2c:b9:b0:6f:
6c:71:e9:fa:b2:10:e0:04:16:c6:f8:cb:77:10:e2:
20:98:22:c0:b2:7c:44:52:d9:bd:fc:b8:4f:d0:d3:
d8:17:f6:92:48:97:c2:33:e2:7b:fd:ac:ef:62:2e:
48:3d:94:d3:34:7f:62:22:9b:65:00:87:c3:d3:f7:
18:dc:a9:5b:c8:c4:ab:21:40:51:45:24:76:68:e0:
58:6d:e8:8f:c1:eb:41:8d:26:cd:8e:f1:79:05:c2:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CD:FC:2D:F8:36:27:40:E5:06:43:1D:C8:FD:6E:CE:1B:20:DF:A4
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f7:03:fd:77:62:37:50:43:30:43:78:8c:a2:d4:b0:e5:a4:
d6:ea:e7:31:32:30:46:0a:96:fe:fa:b2:39:32:c4:9f:b2:2b:
c0:18:ff:12:43:a1:6c:c4:5e:35:34:c0:ae:87:04:92:e3:d2:
d4:2d:52:7e:1d:04:66:5c:24:7e:ab:2a:5e:7b:14:02:18:34:
a4:76:b6:bb:45:fb:e3:07:71:d0:c0:37:44:93:a0:d2:99:72:
a4:63:47:e6:be:c1:ab:d0:9a:a8:fa:94:49:11:12:53:68:e2:
a2:cc:c4:44:6c:42:b7:91:ba:b0:58:c8:3b:24:12:2a:5e:74:
a5:10:67:7d:81:fa:cd:67:7e:fa:65:4c:cf:04:34:1b:75:4a:
33:fa:21:2c:99:96:62:28:d5:fa:5e:dc:4f:85:a6:26:c7:69:
e8:93:56:5c:2c:b3:92:93:57:c0:a9:39:ab:f3:70:68:bf:f0:
f5:39:03:c7:6d:a5:41:2e:a8:66:e0:42:23:ca:59:4f:b6:02:
20:3d:3d:f6:a6:01:f3:03:fa:fd:07:1f:be:88:c8:31:4f:fe:
b7:03:b6:51:71:2d:74:b6:cc:ae:e2:4f:c4:e0:00:d6:5c:37:
57:ba:79:f0:ae:a2:ce:e9:f5:08:86:57:e1:8c:25:d5:98:81:
e8:ff:ac:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:24:52 2025 by rpki-client