Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
File: Hd51apttFAAMPhUNW31glbdhP-Q.mft (raw, json)
Hash identifier: 6sJP0i8hEzoheTXd7QbP0Tz6lQCujb0P60e6P+9/bIY=
Subject key identifier: DA:0D:55:28:7E:39:82:AE:68:70:9A:EF:37:F1:1B:8F:39:B4:32:80
Authority key identifier: 1D:DE:75:6A:9B:6D:14:00:0C:3E:15:0D:5B:7D:60:95:B7:61:3F:E4
Certificate issuer: /CN=1dde756a9b6d14000c3e150d5b7d6095b7613fe4
Certificate serial: 01965793AC1A028AA665F7258C79CDDBE813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 09:00:17 +0000
Manifest this update: Mon 21 Apr 2025 09:00:17 +0000
Manifest next update: Tue 22 Apr 2025 09:00:17 +0000
Files and hashes: 1: Hd51apttFAAMPhUNW31glbdhP-Q.crl (hash: /aqWodRu6bfgtjERKZR/A75nAfpBJrNQvtwDMq6UwJc=)
2: dcbMwMMoAbrSDYORYR-a2Au1hPA.roa (hash: GaJP4UO0sS8NGTP1pZn3Q8XkpBsgZUPrCjP5yXsfKKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:ac:1a:02:8a:a6:65:f7:25:8c:79:cd:db:e8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde756a9b6d14000c3e150d5b7d6095b7613fe4
Validity
Not Before: Apr 21 09:00:17 2025 GMT
Not After : Apr 22 09:00:17 2025 GMT
Subject: CN=da0d55287e3982ae68709aef37f11b8f39b43280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:39:d3:84:c6:84:6a:be:44:32:15:2a:e7:
39:2b:58:69:b1:4a:4e:a8:29:e0:36:16:2c:50:ef:
33:bc:f9:18:af:93:2f:e9:72:66:ec:bf:ba:06:7f:
cb:9e:ef:45:2f:a9:fd:4a:3b:77:f0:1c:25:de:f5:
23:32:91:2e:2d:b2:98:0a:ac:ba:e2:6b:8b:05:1e:
4e:3a:08:2a:f6:c5:e7:cc:35:4b:4c:6f:31:f2:dd:
f0:3d:90:7c:3b:8d:56:e2:89:c2:d3:38:3e:05:89:
f4:25:69:0a:3b:23:52:d2:58:b1:e1:eb:57:82:fd:
31:9c:35:64:43:6e:8a:bc:c5:e0:c5:47:05:89:87:
fe:9d:e1:84:54:0a:d9:ef:77:01:c7:a7:c7:c8:c0:
67:d6:f8:fb:62:fd:54:a3:0e:24:86:c3:2e:96:4f:
e0:eb:df:ac:a3:23:b0:dd:5b:54:67:aa:e7:be:a4:
02:8a:cc:14:50:b6:fa:13:19:e2:b1:cf:53:9c:32:
d9:d1:87:0e:2a:7c:fd:09:3c:9f:9c:18:94:92:a9:
c3:35:5a:b9:cf:29:2b:d9:c3:5e:f4:7c:55:83:67:
e9:71:7e:03:b4:35:07:19:3d:94:d8:d0:22:d2:d7:
89:a5:91:12:24:ee:49:90:98:2a:2b:5e:05:86:dc:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0D:55:28:7E:39:82:AE:68:70:9A:EF:37:F1:1B:8F:39:B4:32:80
X509v3 Authority Key Identifier:
keyid:1D:DE:75:6A:9B:6D:14:00:0C:3E:15:0D:5B:7D:60:95:B7:61:3F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0e:4f:68:6a:4a:6b:2c:0b:99:37:35:ba:57:77:f0:a9:e8:
0f:d4:b6:38:9d:c5:77:26:de:83:26:fc:19:99:20:cb:f4:10:
ff:25:d4:bd:6a:8c:60:da:25:5a:07:eb:66:90:97:e1:92:87:
20:c6:16:7e:77:5e:49:55:17:43:cb:34:24:2d:bb:e5:af:e5:
5b:1e:7b:93:b8:21:59:1a:3a:81:ef:3d:7f:31:36:04:d7:9b:
ce:1f:53:bb:9b:d0:27:2d:5d:a9:0c:b4:6b:04:89:c9:47:b7:
fd:1c:22:7a:ab:49:0c:fa:f0:5f:62:ad:47:a9:2e:cc:67:c8:
ad:ac:7f:d1:35:e6:6d:79:6a:28:b0:e2:08:a2:b6:90:53:fe:
bb:f6:12:24:b6:94:1f:7f:d8:52:a6:66:64:dd:a9:57:cf:68:
f6:68:45:30:7b:25:b1:29:6d:05:c7:2f:fa:45:ab:4f:75:b2:
af:03:77:d1:64:af:c7:ee:17:d8:66:69:74:8f:45:51:f0:1f:
4c:a2:bf:ac:05:91:d9:a3:e3:9a:d5:a0:62:d6:0f:da:6d:ec:
df:2b:23:e0:35:61:e9:bb:53:68:2c:fd:dd:98:4a:43:94:69:
30:39:9c:01:5b:d8:b6:72:2d:1d:16:98:34:08:00:98:6b:33:
ca:ad:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:08 2025 by rpki-client