Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
File: d6Hu06zg_C-KoADeaHpJvv0nkdg.mft (raw, json)
Hash identifier: hpoccsQ4iw6d8P7DpwWso6ZVuAd9wmD60D2NkndPhHA=
Subject key identifier: 0C:5E:55:1F:34:2F:31:A2:34:A7:8F:CF:4B:D5:F5:A6:5E:B0:81:14
Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
Certificate issuer: /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Certificate serial: 019653EE1CFF8E025C7C7E46B355826561EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
Manifest number: 0DEC
Signing time: Sun 20 Apr 2025 16:00:35 +0000
Manifest this update: Sun 20 Apr 2025 16:00:35 +0000
Manifest next update: Mon 21 Apr 2025 16:00:35 +0000
Files and hashes: 1: 1tIKgu9zIxn-X__dh7X40Ez2yro.roa (hash: I7j76og90Bzenb6NN5y/FV3ZxjjrPcp5unqi/MuouAM=)
2: d6Hu06zg_C-KoADeaHpJvv0nkdg.crl (hash: duj8M1IeLeqeLcY3m0PhO6ByBmTYVmmggOs1eFav++Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:1c:ff:8e:02:5c:7c:7e:46:b3:55:82:65:61:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Validity
Not Before: Apr 20 16:00:35 2025 GMT
Not After : Apr 21 16:00:35 2025 GMT
Subject: CN=0c5e551f342f31a234a78fcf4bd5f5a65eb08114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:c7:94:c0:6d:65:78:cc:a1:48:1a:bf:fc:
82:8c:9a:66:d2:67:b1:ed:44:6f:2c:d7:0e:01:da:
3f:0b:6d:62:49:66:04:e4:79:60:fb:bc:37:a2:07:
c4:97:dd:14:61:7a:32:76:5b:2e:f6:cc:60:56:68:
ff:c4:51:07:d1:33:d5:45:99:2b:6c:61:3c:35:1e:
34:5d:b2:2a:fe:1e:fc:e6:59:8f:84:b4:5f:94:f8:
90:1b:ff:ba:70:e0:41:d6:80:61:7a:e3:31:de:0c:
be:fb:85:bb:5f:ed:63:77:a0:9e:4d:bb:ff:cd:c1:
e0:f4:be:d1:60:8e:c8:9d:ec:d8:11:af:ee:98:f5:
96:86:3a:98:44:ee:3d:ff:61:9f:e3:20:5b:48:d0:
ed:21:7a:86:2f:20:a2:f9:73:55:c0:8a:51:e4:e9:
bb:a8:a7:30:bf:16:a9:a6:c3:1b:41:5e:1e:3a:fd:
98:3b:6a:85:b0:c3:11:aa:15:fa:9e:13:87:47:b1:
fc:8a:51:2c:24:fa:4e:f1:2f:ef:67:cd:3c:64:15:
13:32:63:b1:6c:50:fa:27:2e:5c:4a:b4:e6:2a:19:
a9:69:1c:65:f7:3b:92:89:70:24:72:e9:ee:ec:56:
4d:f1:94:2a:3b:7d:30:09:5b:7f:ce:79:73:e0:20:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5E:55:1F:34:2F:31:A2:34:A7:8F:CF:4B:D5:F5:A6:5E:B0:81:14
X509v3 Authority Key Identifier:
keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:71:2a:c9:de:67:5d:9c:3e:08:e6:dc:86:c5:79:27:84:22:
7b:ee:ee:ac:e2:07:0f:94:5e:e3:d2:87:12:be:39:1b:b7:b7:
c3:02:ff:fc:e6:05:c2:0f:6f:4c:50:aa:25:4a:3b:e7:d1:e6:
9d:f2:19:9a:b2:0c:5a:bc:f5:85:97:27:c2:21:7c:3a:6b:4a:
99:44:1c:c2:80:ff:d1:0f:d4:76:7f:33:1c:14:ad:43:3c:06:
3d:f5:2b:ab:62:43:5e:6c:33:49:44:ed:9f:fe:ba:74:4b:90:
0a:a3:3f:0d:e5:31:dc:c1:f4:94:ca:2d:12:03:2a:3a:3f:75:
f5:34:82:e8:1f:f4:34:67:77:50:23:a7:26:f7:1d:c8:63:c4:
66:d6:75:a4:07:10:7d:a7:3b:c8:2a:bc:e5:8d:85:22:95:be:
6b:77:74:ab:95:4e:85:df:05:5b:3f:f0:4a:bb:0f:c9:14:c4:
2a:82:2a:41:b8:ea:68:42:6c:0e:30:91:ac:b7:92:94:db:9a:
c4:81:45:e9:f8:22:1e:7a:26:66:1f:c9:a0:53:95:f4:ae:95:
72:3b:70:71:1c:a6:28:c3:15:18:f1:09:ab:5b:f3:cb:14:90:
7a:86:8c:a2:7b:7b:5e:b8:68:4d:a5:7e:9b:6f:46:6b:72:19:
02:b2:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:59 2025 by rpki-client