Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
File: dxLiD1ELIrghfN8NIRSWsbnB7bg.mft (raw, json)
Hash identifier: ICfXWOpKz2qk+C7X7SKYLcStqnokEEg0TARs6NrnkK0=
Subject key identifier: 1B:E7:60:80:E9:08:2F:FD:AA:3A:B9:3B:2F:22:AE:1C:90:2E:FB:69
Authority key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
Certificate issuer: /CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Certificate serial: 01965B39C66533658A5AEDC803269D04FCD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 02:00:35 +0000
Manifest this update: Tue 22 Apr 2025 02:00:35 +0000
Manifest next update: Wed 23 Apr 2025 02:00:35 +0000
Files and hashes: 1: 0bjBu50yRFSQQCpaSDnz4Da59n0.roa (hash: EpIJkfUrUz0ncMqveTDKjCXPCU3oKNIvzwGQlVcXpbY=)
2: dxLiD1ELIrghfN8NIRSWsbnB7bg.crl (hash: 8IQkbHheMrRMridlWJnAxKfZ6rNnW06FAgS/FP5X+t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:c6:65:33:65:8a:5a:ed:c8:03:26:9d:04:fc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Validity
Not Before: Apr 22 02:00:35 2025 GMT
Not After : Apr 23 02:00:35 2025 GMT
Subject: CN=1be76080e9082ffdaa3ab93b2f22ae1c902efb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:30:dd:7f:84:6d:70:2b:d6:d2:8f:6c:7b:
8d:6c:93:1e:bf:95:80:b1:e9:26:11:ca:05:0d:60:
f8:ab:ea:59:44:97:a7:4a:c3:16:cc:4f:07:3d:aa:
7f:2a:02:bd:0e:80:1f:8b:de:a5:ef:14:f1:ce:c1:
81:ac:08:60:1c:fe:40:ae:fa:f0:ca:c7:d6:81:93:
1c:0f:b4:1f:21:eb:a3:70:a6:a2:aa:85:1c:ab:6e:
6c:0f:18:de:c4:53:e9:01:98:7c:a3:d5:df:63:00:
8f:44:da:bf:80:b7:fd:98:30:9c:6c:17:9c:b7:da:
d2:07:0e:e4:2b:05:0b:16:1e:fe:b3:53:3d:fd:52:
88:1f:65:ec:30:52:a3:0a:48:0d:5f:9d:65:31:66:
79:ce:44:e8:ed:3d:5d:93:07:89:dc:d1:4c:f8:de:
6e:b2:9d:b2:e5:6e:a0:f0:76:b9:69:c0:31:55:d1:
1c:8d:fb:da:95:24:67:50:61:1a:52:ba:10:f6:d1:
01:43:84:9c:77:c3:c9:c8:37:59:80:d1:6a:81:85:
d5:07:5b:d7:66:3e:2a:82:19:5e:1a:e4:96:c8:b4:
99:07:1f:84:ec:74:85:00:b6:5c:dc:75:5f:50:a1:
f6:67:1f:14:7a:2b:e2:c3:86:b3:e3:8d:08:c1:b8:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E7:60:80:E9:08:2F:FD:AA:3A:B9:3B:2F:22:AE:1C:90:2E:FB:69
X509v3 Authority Key Identifier:
keyid:77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:18:f0:93:81:5d:33:a1:b4:f3:e1:3c:ee:ce:1b:68:d5:a9:
ca:37:3b:ea:62:03:ca:f5:24:14:60:21:6d:6b:92:7f:34:8d:
37:eb:83:94:65:a3:dd:6f:2d:db:a6:76:d3:0a:d6:02:1e:40:
ae:12:43:2b:3e:3b:64:2e:f6:d3:4b:0b:db:38:f8:d8:a3:9f:
ed:92:e0:40:00:32:21:30:5a:d5:1b:06:56:b0:38:8f:eb:eb:
ca:24:5e:6f:2f:bd:a2:8b:cb:9e:47:8c:c1:37:19:87:17:34:
cb:be:e4:72:b4:ac:5a:06:70:c2:48:d1:67:98:d4:dd:42:95:
ce:4b:a5:e9:34:c4:23:24:ed:93:ac:49:86:2c:21:66:13:81:
30:c6:4f:fd:45:9c:1f:f1:05:b6:c4:6a:05:01:78:74:d5:3e:
d0:19:7b:0f:17:a8:cb:1a:8b:ff:0f:17:f6:1e:f6:5f:f0:b3:
cb:06:28:82:4c:ff:7e:b9:07:56:61:4b:d9:39:9e:80:97:8e:
e3:93:df:8c:8a:56:29:6a:54:66:b1:36:70:f8:3f:6c:5e:8c:
5f:ff:47:07:c3:57:8b:d4:34:8a:cb:c6:aa:e9:8c:91:a0:61:
af:09:40:0a:3d:03:9f:ff:f5:88:2e:0e:31:cb:1c:92:72:1f:
c1:9a:2b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:23:24 2025 by rpki-client