Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: 1XI8mMKbQWmNM2IJ/HlzQbvdObiSeYUcr1Q2Uj7LalY=
Subject key identifier: 28:19:9D:0C:2F:3D:1B:49:69:83:F5:6C:64:40:AA:11:27:1A:43:64
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 01964D472C08C47E845B4C572AEF78AEA4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 09:00:32 +0000
Manifest this update: Sat 19 Apr 2025 09:00:32 +0000
Manifest next update: Sun 20 Apr 2025 09:00:32 +0000
Files and hashes: 1: OcTgY_TxJBbWYUXl-r4CTTXUle0.roa (hash: 1c7PjEo1UgZPDis6XvL/mHlYibhzZZ7MfR0yuK8HcsA=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: U0xLQFfLkWkYc/0XKLyAJrhO8cJ3UYBw+gvvormqSM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:2c:08:c4:7e:84:5b:4c:57:2a:ef:78:ae:a4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Apr 19 09:00:32 2025 GMT
Not After : Apr 20 09:00:32 2025 GMT
Subject: CN=28199d0c2f3d1b496983f56c6440aa11271a4364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:ec:4d:2e:fb:f8:2c:91:c3:b1:a6:60:59:
a8:fa:5f:a8:87:b8:6e:5d:fb:63:2d:8a:86:57:7a:
21:cb:5c:b6:50:da:9e:1f:1e:e0:80:14:79:44:c5:
68:70:91:2e:5b:dd:de:07:d8:59:81:e3:b9:5d:ba:
f8:c4:2a:96:d9:dd:bf:22:71:59:07:2a:63:eb:35:
29:05:7d:d9:4d:1c:d9:1b:ef:7a:0f:33:db:ab:70:
58:d3:ce:d4:41:75:82:c0:e7:5c:3e:0e:51:ee:59:
1a:f0:f5:4c:ee:39:93:80:2e:2b:0b:f5:c1:ad:70:
39:a2:d6:10:b7:89:21:de:b9:52:f1:84:e4:c2:21:
5d:55:46:8f:49:69:ca:5e:67:de:dc:d0:30:f1:f5:
44:ea:20:53:a3:cc:6d:57:58:1f:40:0e:1a:dd:a1:
d0:00:a5:81:1a:19:3e:c3:f1:2f:56:9f:87:53:e0:
c4:ec:ab:88:53:c3:72:a0:e8:78:18:72:41:3b:0c:
10:aa:4e:6b:99:06:d4:25:02:ee:b4:8e:34:12:8d:
8e:6e:d1:46:9a:3b:3a:20:61:a9:cf:0b:05:eb:76:
d2:55:4b:3f:b6:ee:d2:ad:76:ac:91:2a:f9:63:e6:
6b:bb:88:05:47:78:0a:df:79:97:03:d2:41:9d:58:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:19:9D:0C:2F:3D:1B:49:69:83:F5:6C:64:40:AA:11:27:1A:43:64
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cf:e7:de:ad:97:cb:d2:da:64:d0:f5:c9:d8:28:30:8a:78:
01:76:dc:54:63:64:a2:bd:f6:73:05:ba:ec:0d:08:50:ae:e5:
c2:b7:f6:ba:2f:85:7e:f6:a2:73:41:6d:0d:a3:91:09:13:81:
46:58:70:fb:8c:27:c8:9d:69:78:9d:97:7d:b2:36:78:c4:9f:
b3:9c:db:54:f2:bf:aa:18:3b:ff:f6:c9:a5:9c:af:5a:f1:c3:
01:34:74:c0:51:94:7e:b2:5a:dd:2f:e1:73:cb:91:20:16:2f:
ed:94:e5:ee:f3:49:55:ee:7d:3a:be:ca:68:54:4b:84:fa:00:
a7:04:e2:d2:37:74:ed:22:b7:26:2a:15:fc:37:2d:3a:72:d7:
a4:7d:64:55:bb:a1:17:a9:a7:17:cc:93:44:d5:73:8a:75:1e:
4e:17:b2:da:be:be:28:13:71:03:b4:1d:f0:c2:cb:ae:1a:30:
ee:80:31:09:3f:41:6c:59:5f:9a:a1:62:ca:fb:4d:68:a2:43:
f1:c3:ab:c3:31:b0:71:e0:fa:12:ba:61:ea:32:74:3a:43:e5:
a6:d6:b9:d7:53:85:b5:35:71:5c:d9:16:06:15:bb:ea:2b:c0:
ca:bc:02:1d:53:3d:d6:dc:95:bd:3f:49:1f:b4:d2:d5:62:26:
64:86:e4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:09 2025 by rpki-client