Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File: d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier: OqpkgLSRJC9vZ1+iRSLOnkmtNRoiDS1k/rpu5srXs9U=
Subject key identifier: 3F:40:7F:64:29:CE:15:94:C8:6D:11:E7:29:43:B2:0C:97:46:43:0E
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial: 019654CA0C0FC53BB632F3A79743C96A851B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number: 0BE3
Signing time: Sun 20 Apr 2025 20:00:49 +0000
Manifest this update: Sun 20 Apr 2025 20:00:49 +0000
Manifest next update: Mon 21 Apr 2025 20:00:49 +0000
Files and hashes: 1: 3fVp55RM8WJ-CAkYXQzPen4QsPU.roa (hash: GhSbT3tbIT6J4s8weD/xKmKS+sqFk4JjUnduge7t9L0=)
2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: Euh9Dz+oaDzHjXcY+YfmUv0fHsYTsqnLUjn7ZywvMds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:ca:0c:0f:c5:3b:b6:32:f3:a7:97:43:c9:6a:85:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Validity
Not Before: Apr 20 20:00:49 2025 GMT
Not After : Apr 21 20:00:49 2025 GMT
Subject: CN=3f407f6429ce1594c86d11e72943b20c9746430e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:2c:8e:b4:58:df:e7:89:01:66:9c:a6:ba:
17:67:75:6a:fb:08:20:b0:60:74:97:f6:c2:1d:d8:
ea:8e:00:85:0c:fb:4f:2e:2b:fc:de:89:02:85:66:
dd:c4:39:3d:ca:c5:d7:84:87:7f:34:9f:9a:c4:f4:
49:cd:9f:45:96:f1:f6:48:f2:09:5c:fb:27:ad:72:
14:66:58:b8:d8:59:a6:e6:61:35:ce:12:62:03:cc:
7b:31:e4:ea:d4:c3:70:40:ab:78:9c:ed:88:fe:32:
35:dd:b6:06:b6:1f:83:69:e4:a9:f7:18:16:84:43:
de:4d:09:ac:af:81:58:83:a2:07:dd:48:45:72:3f:
81:34:4f:3a:80:81:15:64:fb:9f:d1:c1:1e:3d:01:
f0:74:fa:5a:f8:ac:06:34:da:b0:2e:58:87:50:1c:
e1:28:5f:63:bf:d7:12:18:43:41:09:f9:5b:e6:77:
1f:bc:af:91:b1:16:e1:89:55:9a:7c:87:4a:df:5d:
85:82:d2:62:31:9c:bd:18:1a:90:00:ac:18:8f:41:
2b:e5:18:d1:1a:a9:b2:bc:b1:90:d7:9d:a6:84:02:
f8:3c:75:8b:f7:e8:32:60:f4:3c:59:68:9a:e4:40:
84:08:e1:ce:24:0e:90:c9:9d:a5:96:d5:b0:22:cb:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:40:7F:64:29:CE:15:94:C8:6D:11:E7:29:43:B2:0C:97:46:43:0E
X509v3 Authority Key Identifier:
keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8e:22:d9:c1:a3:ba:c6:f0:7d:b4:f7:d1:77:b5:29:64:63:
39:7f:52:58:c4:f8:a3:3b:1f:d8:e4:42:be:4d:fd:97:7f:1c:
13:bf:e5:99:1c:e8:8a:1d:46:43:b4:26:ac:3c:b1:4d:c4:43:
f2:31:cb:75:9c:3b:1a:51:59:26:c6:bf:f3:32:73:13:28:86:
5b:ec:2b:42:a8:c7:de:cb:25:31:7a:b2:93:52:39:9a:c8:01:
bc:83:68:b6:e6:6d:1d:ae:67:12:74:d8:67:0e:a8:13:3d:79:
1e:83:35:06:1b:2d:7d:6b:9c:d5:ee:b2:0a:cc:a0:e3:e1:5e:
65:6a:9f:c1:a5:55:2c:8a:39:bb:4f:a9:d8:22:0e:1a:ab:b6:
af:de:7b:9b:d2:2a:fc:bb:8d:6b:fe:56:7a:00:23:39:8e:1d:
89:0d:b4:ea:22:3b:8a:18:18:61:9c:1f:47:9b:1d:1d:71:da:
4e:9c:2d:d0:64:cb:f4:e5:d2:41:05:ad:72:f2:ba:09:71:75:
b7:63:05:52:a5:5a:f0:55:b2:61:58:cc:c7:24:da:57:86:78:
cd:94:3d:74:6c:b5:1f:19:3c:05:93:ad:75:f8:58:81:fd:1d:
74:7a:e1:94:55:d3:3a:cd:aa:33:59:72:1d:06:09:e3:6e:1f:
ba:6f:55:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:50:59 2025 by rpki-client