Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File: 06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier: V/wO4MB5xWaVUk1uBtUhLZylJH27ClC1QkfsoA9h/HY=
Subject key identifier: EC:3E:D4:CB:0D:87:B7:D6:07:C1:46:F4:9D:D1:67:FC:D8:D1:91:46
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer: /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial: 0196CA972BF99A1C775A051E52CB43E999A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number: 0329
Signing time: Tue 13 May 2025 17:00:26 +0000
Manifest this update: Tue 13 May 2025 17:00:26 +0000
Manifest next update: Wed 14 May 2025 17:00:26 +0000
Files and hashes: 1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: 3cBmggWjx/hR63qfsDpTti9jobwgFkBVAMOVpiLRENg=)
2: oT2LDF85PY5HdbBLwhoxl8tjz8s.roa (hash: 1EymL80SjeM7RupyG8pGED+B/g9jGLElUsA1V765L5Y=)
3: vGKjbeI63RzXbx2moMgZ88gkL0o.roa (hash: 78K41RNch9PgQsEO5vrAtY0Bw9PWHwlD6lBB0OVTon8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:2b:f9:9a:1c:77:5a:05:1e:52:cb:43:e9:99:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Validity
Not Before: May 13 17:00:26 2025 GMT
Not After : May 14 17:00:26 2025 GMT
Subject: CN=ec3ed4cb0d87b7d607c146f49dd167fcd8d19146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:28:37:57:cd:69:c1:fc:31:9e:86:87:28:
c4:7b:62:28:5f:83:81:47:ae:f1:cf:78:f7:18:e2:
27:68:a1:26:db:aa:fe:48:9b:3d:9f:d0:57:67:05:
15:83:e3:42:6f:e5:92:6a:46:9e:73:07:29:b7:95:
1f:00:e9:26:3e:6e:58:d4:b0:44:fd:96:60:c7:f0:
89:4b:ac:23:e0:53:c0:82:97:fa:6d:4b:e5:8d:1e:
2d:29:cd:d7:37:2d:af:29:93:bd:0a:09:e4:c9:cf:
58:4f:d2:b3:c1:01:8d:2b:9a:59:85:a4:cb:3c:de:
a7:ec:43:a9:ca:c4:45:8b:5a:03:77:c0:3a:df:1d:
1e:78:8a:6f:c9:6e:42:f8:fa:29:00:10:56:b8:ed:
3c:00:72:ed:46:ca:be:03:65:8e:79:54:8b:d8:57:
d6:55:b4:01:11:c5:b1:f9:f9:3a:2b:01:4e:12:99:
e4:0c:50:22:cc:7f:d3:0c:95:c9:3e:cf:d5:a2:cc:
52:40:a3:5e:7f:4a:b3:17:90:df:b4:c0:89:c4:02:
45:9b:21:0e:06:c2:56:ce:e7:b2:c5:6d:c5:38:cf:
ba:a0:d4:2d:33:ca:b2:6b:dd:94:45:55:ee:94:84:
9b:d5:28:49:2f:53:b5:18:0a:40:43:fe:9c:c2:1e:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3E:D4:CB:0D:87:B7:D6:07:C1:46:F4:9D:D1:67:FC:D8:D1:91:46
X509v3 Authority Key Identifier:
keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:d0:eb:4f:c0:b2:6d:d2:63:78:8a:2d:62:f8:65:82:a8:84:
00:8a:1d:cf:da:09:80:96:5c:1f:8d:82:cf:cc:e7:e6:f6:e8:
aa:a2:3f:4b:35:2b:e0:cb:a0:88:f0:71:0f:b5:a4:e9:6d:05:
17:d0:2f:83:26:89:9f:28:9a:73:66:28:fd:35:05:04:0b:3d:
d7:f2:42:bd:ae:3c:7d:7c:bb:2a:57:e9:0b:88:e9:95:e4:9c:
d1:5c:61:0e:3e:33:6a:50:6b:87:7f:54:7c:ab:90:c9:69:6b:
38:94:84:52:5b:4a:79:8e:32:70:81:b7:a7:17:e3:8e:79:ce:
ef:7a:26:d4:bd:6d:1b:ff:27:7c:46:d3:92:98:c4:02:c4:c6:
a4:6b:b1:16:4b:5f:0d:ce:60:24:7c:fe:37:1b:73:1c:b1:bf:
c8:a6:db:dc:33:e2:42:4f:60:d3:eb:4d:d1:fe:fa:12:59:70:
3a:7f:e6:c8:c9:9b:9d:59:45:e0:70:6c:81:40:20:b3:6d:0d:
07:a1:b2:a4:4b:0e:a1:ad:30:38:a1:28:05:83:79:bf:69:15:
08:5a:e8:4a:3f:4c:f5:3c:ce:19:b2:46:42:66:96:25:39:f1:
2f:e2:d9:5c:c6:8c:32:cc:f1:20:56:40:0a:1e:26:b6:33:20:
91:a6:ff:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:47:19 2025 by rpki-client