Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File: D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier: vnVMmJfVCjHi6pCj4sI1BhVPK/80qzBmJC57C6QgMws=
Subject key identifier: EE:06:01:06:67:44:02:43:20:3D:42:81:A3:00:D6:64:A2:45:1E:CB
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial: 01965914D1034AF10A19E4DD9CD1340EAB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number: 0755
Signing time: Mon 21 Apr 2025 16:00:58 +0000
Manifest this update: Mon 21 Apr 2025 16:00:58 +0000
Manifest next update: Tue 22 Apr 2025 16:00:58 +0000
Files and hashes: 1: 6C2Szm3cfjp9bAf9_VEG9JmuRyM.roa (hash: m6tO4ROtbLwqmMtYoGkRxelczMRQ44EOZBvyjQVDxjY=)
2: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: GOw7Ya708lkWU4StuVRxRuNcoWhzRvogPMKqEBtCeVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:d1:03:4a:f1:0a:19:e4:dd:9c:d1:34:0e:ab:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Validity
Not Before: Apr 21 16:00:58 2025 GMT
Not After : Apr 22 16:00:58 2025 GMT
Subject: CN=ee06010667440243203d4281a300d664a2451ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4f:93:0d:45:0e:ac:54:10:6c:3d:e3:ef:00:
f2:a3:0d:0a:8f:35:0b:11:ec:13:3d:1c:cd:06:33:
7b:13:be:82:05:01:28:fd:1e:dc:64:36:e2:91:a9:
76:40:da:6c:eb:6b:fa:20:79:d8:70:a2:45:90:a7:
b3:1a:88:c2:03:a2:34:e2:7c:24:a1:08:34:83:49:
9b:2d:ce:af:f5:e5:5a:1e:d5:82:f9:86:ff:e6:61:
dd:c8:25:46:a6:85:de:05:47:bd:64:50:d1:ef:1c:
80:d0:2c:4b:10:04:21:db:b3:1f:5e:f5:0d:6e:99:
ba:6d:07:01:02:0d:11:8a:77:36:65:4f:4c:3f:93:
78:cc:af:dd:e0:1f:0b:d2:18:43:d7:74:2a:02:24:
4f:ec:e3:59:76:43:7e:8f:9e:d4:a6:3a:c0:52:1f:
b8:84:97:7f:58:b0:6c:bc:9d:d8:c6:72:e4:52:35:
6e:e4:e5:22:d3:bc:20:12:19:85:a8:59:bf:9b:39:
aa:b3:30:8a:58:b9:39:c3:ad:40:35:d7:02:83:52:
e1:c8:7c:0c:7f:23:44:b4:1b:a3:d7:f2:e7:b0:ce:
aa:f2:8e:13:31:eb:df:b5:26:07:55:37:66:eb:27:
2e:c1:c3:c3:56:5e:41:d8:cc:26:12:cb:6c:8b:08:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:06:01:06:67:44:02:43:20:3D:42:81:A3:00:D6:64:A2:45:1E:CB
X509v3 Authority Key Identifier:
keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:a4:ae:be:bd:cc:0c:0c:31:2d:4c:ed:7e:fd:cc:20:66:aa:
6f:fb:e8:36:6d:28:d1:cd:55:5a:a6:ad:c6:0d:6a:b1:a2:12:
97:5f:82:4f:1b:cb:94:40:bd:20:c4:ed:16:95:74:df:2b:e1:
74:3a:80:9a:59:68:98:15:4a:49:9d:66:5e:f5:5e:61:a1:1b:
e3:fb:1e:84:5b:5c:d7:69:44:64:9d:17:cf:51:c6:05:0e:e1:
e5:32:0a:7e:c2:10:07:fd:fc:2c:c3:71:b0:7e:ce:d8:4b:50:
d5:0c:dd:48:5d:f7:b3:ef:7d:93:f6:fc:8d:73:f9:29:14:a7:
b5:97:88:df:d3:b0:61:f7:0f:82:c9:87:75:e6:2a:14:dc:24:
40:92:70:ff:b5:48:06:c2:9d:4d:e9:67:f1:49:7d:71:eb:82:
f1:1f:9c:e3:ef:99:d2:9e:ea:38:ea:49:39:83:1e:cb:88:17:
60:ab:ef:bd:cf:93:82:c6:72:98:75:fe:60:9c:39:f5:8e:aa:
05:f5:5f:98:bb:27:40:90:bd:a1:a6:40:59:8a:61:e6:67:6c:
9d:0f:d8:27:72:3b:fb:f5:f3:3a:0e:04:1e:9f:1e:e9:c8:b6:
c8:06:f9:fc:a7:8e:4f:a6:7e:7c:ee:60:e9:6e:94:8e:80:79:
61:f5:85:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:03:42 2025 by rpki-client