Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File: DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier: pGp/odThFKgJEsWU2/kcDhDS4GDMPOZLyUSTi+T3ZtM=
Subject key identifier: 02:61:A4:1F:74:1B:8C:C1:12:09:15:C0:FD:9D:32:08:12:EA:33:0C
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial: 0196A3C13010FFE23FA57D48C056EAAF53BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number: 123D
Signing time: Tue 06 May 2025 04:01:09 +0000
Manifest this update: Tue 06 May 2025 04:01:09 +0000
Manifest next update: Wed 07 May 2025 04:01:09 +0000
Files and hashes: 1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: enuCrjXw3CGfGX/bFoN7QWaNCV7cADPMmA/HR+cMK2Y=)
2: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (hash: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=)
3: hHJHjw71kMqAy3nNekCDF8-fv6E.roa (hash: fFUGKJTKX7mKwkHmDQYrtXQn9GbWgqgB8AHbXkjZidU=)
4: r4VU_uNqDC_tYxTm1Z-aicTmAoU.roa (hash: GEBOWS5Nmk+ZdCwQMB5B+9yuw+vJ1/5swydSImIPrxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c1:30:10:ff:e2:3f:a5:7d:48:c0:56:ea:af:53:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Validity
Not Before: May 6 04:01:09 2025 GMT
Not After : May 7 04:01:09 2025 GMT
Subject: CN=0261a41f741b8cc1120915c0fd9d320812ea330c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:33:5e:02:ca:cd:1f:41:91:dd:54:0b:bc:
a8:3d:12:3b:cd:fd:5b:92:d7:77:46:70:ad:63:38:
ec:2f:94:27:66:00:b8:6f:f0:51:ed:5b:d8:34:33:
1d:c3:19:92:51:08:5e:dc:fa:7c:02:bf:68:94:d8:
c8:22:bd:2f:28:f8:28:64:7f:14:8e:53:05:41:14:
6d:47:4f:c1:d0:94:4e:13:c2:e4:76:90:4c:44:4e:
bf:8b:e4:5a:f2:59:ed:75:43:df:e1:1f:a0:6f:82:
42:50:ff:17:fc:09:3c:db:f4:2b:18:ae:28:09:90:
ca:ac:61:23:16:e2:89:f1:4f:9a:c5:58:66:f8:fb:
b0:32:4a:31:ab:73:60:dc:f1:af:c5:ac:a0:b9:08:
c1:fb:39:87:1e:59:b5:a2:91:ad:89:1e:de:ab:b3:
59:de:d5:43:74:45:bb:94:73:91:36:9e:c3:65:01:
69:fd:7b:99:26:48:8f:aa:70:1f:cb:18:93:cc:53:
2e:76:d3:2b:f4:80:b3:0a:b7:e9:a6:4b:45:75:e7:
12:58:a0:43:0a:6d:9a:cd:c1:20:26:00:fd:89:20:
cb:8e:3e:b7:f5:dc:2a:f9:34:0e:31:4f:3d:87:5b:
f9:a0:cf:e8:67:be:48:05:6e:92:07:23:11:ff:b2:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:61:A4:1F:74:1B:8C:C1:12:09:15:C0:FD:9D:32:08:12:EA:33:0C
X509v3 Authority Key Identifier:
keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:73:27:10:08:78:e0:de:77:6b:90:d1:53:4d:98:dc:bb:2b:
9f:5d:49:60:08:6e:d5:a4:e9:39:f6:31:3f:57:e8:67:d1:47:
7a:f0:16:ff:91:2d:58:80:ce:74:d0:27:79:57:91:36:22:b3:
e1:67:a1:6e:20:f1:3c:2d:07:bc:54:16:40:24:48:a7:f0:4d:
23:8b:ae:ee:86:fb:6d:aa:54:1b:40:4b:43:42:c4:d5:a3:b2:
46:9f:b5:38:e4:6d:9f:d3:8d:69:65:9c:68:52:51:ec:1a:04:
1c:2c:d3:c3:97:98:64:6a:62:19:15:21:fe:37:82:59:36:e6:
a2:0c:48:f5:8e:81:cd:f3:64:e1:e5:f8:a0:3d:4c:ee:0a:c7:
14:c0:17:19:eb:5e:0a:a4:4e:5c:4b:35:0b:42:26:b5:8f:10:
17:f2:25:48:45:87:13:fa:c8:c2:2d:10:b8:9a:b5:9a:1f:a4:
12:ee:d8:43:b2:c7:6d:43:a2:1f:41:96:83:ec:d8:34:8b:7e:
ce:d0:fd:a6:c5:5e:d0:57:95:71:65:7f:45:01:67:06:75:4d:
29:da:cd:2e:84:48:af:7a:c4:eb:93:7c:05:d6:83:9f:13:22:
f4:bf:6c:5a:c8:dd:be:1d:42:07:29:11:68:b2:2f:2d:4c:78:
da:99:e6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:58:04 2025 by rpki-client