Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: L8oblWDsAGIInZpzUvKM1QHEyvWaFj5WIoI/g0Cm23Q=
Subject key identifier: AC:04:65:97:F7:B4:20:B5:4F:B3:0F:92:0A:E4:96:D2:B2:9B:13:93
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 019656136CBD110042B405D628CFCD8F972F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 1355
Signing time: Mon 21 Apr 2025 02:00:35 +0000
Manifest this update: Mon 21 Apr 2025 02:00:35 +0000
Manifest next update: Tue 22 Apr 2025 02:00:35 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: r3MAVzCtT0GeikR674tvGaEp/YVDiCHRH5yTbo/WWsw=)
2: qHrO8lQhK3GafyUc6jw1PxQPaXs.roa (hash: tPnDIOggIIc+29booONquHAPxQns3cD0Gn6JnfE+V54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:6c:bd:11:00:42:b4:05:d6:28:cf:cd:8f:97:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Apr 21 02:00:35 2025 GMT
Not After : Apr 22 02:00:35 2025 GMT
Subject: CN=ac046597f7b420b54fb30f920ae496d2b29b1393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:e2:9a:cb:e6:62:34:dd:ea:68:3e:ed:4a:
8a:67:49:ff:2e:7a:c7:a1:9a:32:6d:99:ae:cc:7a:
ec:e1:79:43:26:66:6f:ba:3c:74:fd:8c:5d:b0:95:
01:b9:16:65:4e:7c:65:98:68:61:da:8d:bb:ae:4d:
d1:5e:c7:cf:4e:5d:ec:3e:71:84:e0:47:37:c8:87:
70:80:f7:6f:2e:bf:7f:d0:4f:ed:93:9b:0b:6b:bf:
3c:33:d0:62:88:0b:5f:fc:e2:54:6c:c6:e3:b6:9c:
bc:6f:68:16:fd:40:03:61:a3:ad:f4:19:cd:91:82:
0b:24:97:e1:6b:fd:dc:d8:36:89:0e:9f:27:05:ea:
5e:dd:2d:71:a4:df:5a:0b:eb:e5:e9:ff:39:f0:4c:
e0:75:df:e9:5a:a5:9e:42:96:b5:69:de:78:2d:ab:
a5:32:c5:9f:2c:38:fa:4b:62:51:2a:e5:20:19:4a:
f9:f4:fe:7c:b4:96:54:2c:b0:08:69:3c:b4:d8:92:
eb:89:20:4f:8b:31:24:52:30:19:8f:7c:18:5f:bf:
d2:d3:04:3d:48:95:e0:e5:ac:c2:77:14:39:74:b2:
e9:9f:0d:3f:97:8e:03:31:50:81:35:06:46:10:72:
e1:93:1e:18:67:71:08:47:ef:54:fe:77:f4:2e:95:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:04:65:97:F7:B4:20:B5:4F:B3:0F:92:0A:E4:96:D2:B2:9B:13:93
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a0:76:9e:35:12:e3:47:77:99:c5:8b:57:c0:8e:87:65:72:
6b:ed:11:9f:37:6a:f3:ab:a5:7e:0e:c3:8b:ad:10:94:32:6c:
a4:c1:7e:6c:90:3f:3b:66:d2:01:17:bf:0d:46:aa:aa:1e:31:
ea:b2:4e:6f:79:7d:6d:80:e5:a9:e1:f8:e1:74:a6:82:25:6a:
61:2c:6d:15:f9:d1:5e:0f:80:45:dd:ce:fb:74:42:7b:0f:dc:
a2:19:98:d0:46:67:14:58:1c:6f:d8:c4:9e:3f:68:4f:c5:33:
79:00:be:9d:84:e3:a7:a6:8c:48:68:e4:35:0d:39:3e:ca:85:
39:68:99:b8:a3:55:83:73:85:88:11:bd:80:b7:48:87:db:dc:
a5:45:7a:b2:93:c2:78:fa:e3:11:3a:4a:21:92:da:a4:16:80:
ee:e8:8c:ab:36:ad:9d:ad:fb:86:ee:4d:a1:5b:49:13:26:4d:
34:5d:72:9c:83:63:c3:73:87:3a:df:98:e0:f9:8c:4d:c7:d8:
4f:c9:32:65:f7:7a:b9:1a:66:b4:2a:38:12:40:00:70:1d:9a:
33:5c:ff:25:1a:aa:73:f1:d6:fe:42:0f:54:f9:3c:ae:65:ed:
a8:f8:a6:cb:f4:a6:74:73:19:57:7c:56:68:69:08:f6:36:89:
2f:e9:d7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:13 2025 by rpki-client