Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json)
Hash identifier: kzF4c9Xhk6mZvcnWeecucJ8kEzmsQNIgXRK9AODbstE=
Subject key identifier: 33:DB:48:67:10:62:7D:FA:31:FE:7D:A3:99:7D:FC:93:4D:B3:B2:69
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 01965CBA11C30D0CCD6DC2A1A6D8ABD5EF40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
Manifest number: 0D1C
Signing time: Tue 22 Apr 2025 09:00:20 +0000
Manifest this update: Tue 22 Apr 2025 09:00:20 +0000
Manifest next update: Wed 23 Apr 2025 09:00:20 +0000
Files and hashes: 1: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: Z7CNEuxHv6ReiyNSEtMkYSGVBSCcsNKIw3bVctUcOVc=)
2: oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa (hash: lh9QUHwP4a4QOFQ3TSIIf/mF/GalRL/fqqfPZQYfIfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:11:c3:0d:0c:cd:6d:c2:a1:a6:d8:ab:d5:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: Apr 22 09:00:20 2025 GMT
Not After : Apr 23 09:00:20 2025 GMT
Subject: CN=33db486710627dfa31fe7da3997dfc934db3b269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:36:e1:2b:db:cb:08:b2:c4:98:ee:c5:8c:
5e:20:c1:44:db:1f:bf:b2:38:4c:bc:0d:d4:90:57:
74:04:01:4d:3d:fe:58:6f:8f:bf:49:92:75:dd:22:
7a:c2:8e:a4:32:e5:f1:ab:fa:28:be:ff:8a:cb:94:
20:7f:3d:46:c7:cc:d5:03:9d:a6:b0:bb:4a:4c:d2:
39:82:2a:56:be:8a:85:1b:c4:75:46:c1:27:5c:5d:
07:f1:19:aa:0f:6f:f8:4e:69:78:84:14:a6:fb:3b:
15:27:28:37:a2:af:5d:6d:18:38:a0:8e:af:a9:0e:
10:e5:d1:04:d8:1d:bb:b6:09:db:6b:1c:81:c7:ed:
8b:2f:0e:58:e9:a5:9e:74:57:8f:d3:97:9a:f3:02:
94:95:5a:80:77:d3:1c:b6:0d:ee:3b:19:49:97:b9:
36:18:1a:1d:3a:1f:72:b5:22:dc:68:68:cf:a3:f4:
6f:01:68:69:59:fe:9b:14:40:c1:b1:c3:67:3e:77:
30:8c:52:fd:76:5f:25:63:f1:6e:5b:b0:8b:e8:11:
68:4f:13:2f:16:64:6c:57:c7:c3:8c:cf:1f:80:9a:
3f:1c:b9:40:28:0d:f8:5c:65:16:d1:a6:11:b6:3f:
7c:d6:6f:cd:57:bb:74:46:1a:d5:99:f8:b5:03:c3:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DB:48:67:10:62:7D:FA:31:FE:7D:A3:99:7D:FC:93:4D:B3:B2:69
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9f:9e:92:67:04:bf:d2:6c:16:20:ed:46:95:73:95:7c:c4:
9c:bf:09:95:5b:84:da:07:4e:8a:6b:3d:b0:4d:b6:9e:e2:ec:
9c:24:9f:47:61:4b:43:6d:53:df:7f:00:2e:be:29:85:a3:1e:
bd:e8:38:8d:91:fe:3a:8f:ac:e6:50:28:f4:93:f3:35:ed:8e:
34:95:cb:25:ec:1a:2b:1f:c1:89:c0:4b:e1:4a:60:fd:e5:b6:
ac:5c:ce:da:63:93:1c:77:04:b2:08:32:e3:54:4f:e2:35:ba:
ef:7d:a6:74:a2:eb:50:23:91:af:33:ba:6f:31:51:da:3a:89:
01:86:b1:d6:76:92:68:0c:41:0c:f1:5a:68:f7:b5:b7:d6:85:
0b:f7:24:d1:66:49:20:46:1d:27:54:78:a3:c7:b5:86:65:50:
0e:6e:3c:b2:db:bf:d8:62:a0:68:f4:f5:40:86:bb:e9:0b:1d:
6c:62:c3:f6:ca:25:8d:b3:1b:a4:a9:62:f3:83:51:cb:2b:7b:
31:b6:be:a2:45:08:10:d5:90:d9:32:da:1b:cd:51:c1:10:47:
c6:5f:2c:49:d0:bf:9a:e7:cd:94:95:c0:c8:da:99:97:d6:98:
db:8b:ad:4c:1c:1a:71:b5:07:ac:89:53:e1:9e:29:60:17:c4:
c3:47:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:19:17 2025 by rpki-client