Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
File: pZDvI7RWydsg0wdCkysBf8VyTlY.mft (raw, json)
Hash identifier: 9xzNOrs6M78+46DX225ETpGRRf+6WknwcZ5k3Q7R9Vw=
Subject key identifier: B7:DC:CC:03:51:78:75:DF:B5:9A:E0:8B:55:AF:03:E7:66:7F:B7:02
Authority key identifier: A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
Certificate issuer: /CN=a590ef23b456c9db20d30742932b017fc5724e56
Certificate serial: 019649D88173C5A42E6456D3C9DD7777CD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
Manifest number: 0CAD
Signing time: Fri 18 Apr 2025 17:00:47 +0000
Manifest this update: Fri 18 Apr 2025 17:00:47 +0000
Manifest next update: Sat 19 Apr 2025 17:00:47 +0000
Files and hashes: 1: pZDvI7RWydsg0wdCkysBf8VyTlY.crl (hash: 29zDlZBt5DkHRa7uNjK2bjA9NjI+jA3/LNNtByLqgj4=)
2: qkuFYPmd6yVSJeAUkr6iVxoW6uI.roa (hash: 6R5f5Psj0EmX1v5BkourUurygRB3rOnwEBUagdishKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:81:73:c5:a4:2e:64:56:d3:c9:dd:77:77:cd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590ef23b456c9db20d30742932b017fc5724e56
Validity
Not Before: Apr 18 17:00:47 2025 GMT
Not After : Apr 19 17:00:47 2025 GMT
Subject: CN=b7dccc03517875dfb59ae08b55af03e7667fb702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:b6:80:7d:9d:16:94:bc:4f:0e:66:df:da:
90:5c:f2:09:71:4a:3f:8d:02:ca:39:46:21:5d:4a:
c1:0f:50:31:66:69:1d:01:c8:dc:4b:d7:a9:7e:3d:
72:3d:b2:58:2d:77:1b:be:a0:d4:e2:6d:62:c9:a4:
b9:5f:1d:8b:20:49:03:8e:37:80:bc:99:de:fc:89:
dc:03:c8:c8:dc:0b:04:39:fc:ed:74:79:08:69:4d:
b6:37:ea:a8:53:73:08:82:18:1d:da:28:0a:1d:52:
97:5a:5b:67:56:43:7e:34:c9:3a:36:57:3a:14:5b:
52:b4:22:18:ae:3b:82:53:10:c0:43:13:46:59:91:
29:2e:b5:8c:fb:15:4a:72:8c:34:ff:43:8d:5b:d8:
51:cb:7c:8f:47:47:25:1b:1b:7d:f3:24:e6:b5:83:
00:e8:3f:a5:f7:6e:60:e0:22:46:c0:26:ba:98:ee:
c6:3f:f9:42:6d:ef:b2:a8:88:04:8d:1e:09:0d:33:
00:1a:27:46:3f:36:ad:25:a8:18:57:ed:38:94:d0:
4c:32:d8:85:1f:c3:44:0f:9e:98:77:48:b8:93:94:
a1:61:81:7a:ac:d8:26:2f:f4:bd:db:9c:fc:48:2d:
5b:6b:f5:4c:ce:07:54:4a:25:9a:1e:ea:cf:e8:eb:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DC:CC:03:51:78:75:DF:B5:9A:E0:8B:55:AF:03:E7:66:7F:B7:02
X509v3 Authority Key Identifier:
keyid:A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d6:e5:61:6e:0c:41:92:c5:a6:12:90:d7:16:ec:b9:2c:b5:
c0:b6:70:e4:b3:a5:95:16:1a:79:44:0c:b4:e4:34:d4:f5:e2:
cd:7d:c3:7b:da:e3:e5:9c:f7:d9:ed:22:e0:5c:99:74:99:9b:
e8:f5:f7:51:1e:53:31:14:5c:0f:ec:6f:91:65:35:e8:7a:de:
61:16:6f:df:64:4c:6a:14:d7:52:7f:14:c4:e3:e8:27:ef:61:
98:32:b1:46:a7:6c:13:d4:f0:32:fa:b4:14:dd:57:1c:04:1f:
b2:99:32:f9:34:82:08:fe:07:ec:15:ed:b3:43:f0:8b:2b:0e:
02:f8:78:5a:05:34:5e:63:da:80:3f:0c:a2:07:cd:89:58:c1:
29:c1:e9:a0:eb:a4:92:f2:0c:a1:e7:a9:cf:4f:be:82:66:db:
87:9b:3c:69:51:5f:9d:fc:1c:6c:a9:1c:50:29:a9:79:a4:c2:
88:c6:04:ad:aa:6b:79:3c:ee:67:1f:7a:15:5d:b4:1e:c2:32:
35:c5:c7:9a:3f:a0:4f:dd:83:20:c0:06:7c:e7:75:b7:ab:7e:
a3:da:42:50:95:f1:6f:a3:91:58:97:0a:67:57:dd:07:99:ae:
13:85:cd:b5:ba:be:67:f6:60:1e:a2:ef:77:ff:e6:a2:1b:0a:
4b:bc:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:36:37 2025 by rpki-client