Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: 3eyGkso+ivC+DkPGln3Fibs2BI1dBt/FzvbFNjJWdYQ=
Subject key identifier: 39:CD:7C:F2:EB:9C:24:32:77:82:39:E9:BC:CC:2F:90:BC:15:54:29
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 01965613D546EC86BE51D534315D241A284F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0A02
Signing time: Mon 21 Apr 2025 02:01:02 +0000
Manifest this update: Mon 21 Apr 2025 02:01:02 +0000
Manifest next update: Tue 22 Apr 2025 02:01:02 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: vpYZSZe7uJQOW9VRd2T/9zLIey+CrxSDmPhJO31LwMA=)
2: tw53VyqONmO9P7i2y6gpvj2fu_U.roa (hash: J066HWT9IQx8ovZiJnDjPDFutWNRHoqwHzDICk2OhO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:d5:46:ec:86:be:51:d5:34:31:5d:24:1a:28:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Apr 21 02:01:02 2025 GMT
Not After : Apr 22 02:01:02 2025 GMT
Subject: CN=39cd7cf2eb9c2432778239e9bccc2f90bc155429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:54:73:ae:34:56:e9:f6:c6:21:a7:ea:cb:
f7:14:9c:35:76:1d:64:47:31:ca:9e:df:7c:55:b0:
40:94:e2:e5:52:c0:7c:ab:9e:a3:78:fa:35:0e:8b:
82:77:57:ff:61:2a:64:2a:9f:97:21:b3:64:ff:9a:
5b:ea:d3:f4:7e:28:70:e3:2d:50:53:39:98:29:3a:
6a:9d:eb:4b:af:a3:57:e3:e8:ad:64:97:71:bc:36:
58:c6:99:0c:c2:65:d0:f1:b3:72:b3:aa:84:ef:5f:
17:4b:81:06:4f:4a:9f:7c:94:bc:e3:29:4a:df:a5:
2a:d3:ec:03:f5:9f:df:18:8e:38:14:b0:82:14:c0:
f1:73:13:47:3e:66:3f:49:45:19:2a:a7:64:b8:c6:
cc:d8:24:43:5e:5b:70:29:c2:b8:27:86:6a:7d:f3:
d2:94:20:9b:d5:b0:85:c4:f5:8f:9b:5f:f0:b7:67:
47:06:db:93:c2:95:d9:41:b4:01:db:91:73:29:9f:
8d:35:90:ae:54:16:18:ac:be:4d:90:fa:7c:8f:ea:
0f:f9:e3:09:3c:2b:cd:19:c7:93:74:68:0a:89:10:
e0:b4:cd:95:a2:47:37:e3:af:19:69:85:38:77:6a:
08:55:6c:70:eb:86:39:17:84:de:c0:e3:b0:f4:a2:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CD:7C:F2:EB:9C:24:32:77:82:39:E9:BC:CC:2F:90:BC:15:54:29
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:20:92:7b:53:51:92:6f:fd:95:60:c3:07:62:67:c6:b9:df:
ed:e6:2b:73:b4:af:31:f7:b2:30:ec:df:a7:40:bf:d9:99:19:
ca:6f:26:f8:f2:f1:0b:af:cd:8c:ca:69:d5:2f:c0:87:99:0d:
31:27:9f:ea:1b:6c:7c:de:cf:42:ae:f2:28:6b:19:f1:e1:da:
25:38:99:93:b3:90:d2:d4:4c:0e:9b:8e:54:9f:01:23:61:46:
f0:65:ce:4d:4f:7f:e5:97:7c:2b:d7:ce:fa:f9:e3:6c:11:51:
f8:3f:ee:ed:d9:d7:7e:4e:9a:d7:d3:02:d0:1a:dc:fd:ba:bd:
53:96:f2:f6:b1:f6:92:ea:c6:b5:dd:ce:42:4e:a9:5e:8d:0c:
c2:9d:6b:c4:1e:58:59:1c:7c:3c:ee:ae:11:fd:14:03:03:d3:
27:3f:28:c3:44:8b:ca:51:93:d6:5e:39:05:4a:13:b6:fe:1f:
df:e3:22:86:c0:92:bd:39:12:f7:50:83:01:06:a7:24:14:16:
87:89:4b:60:df:fd:15:26:5f:80:e2:5d:f9:53:d5:40:fb:01:
28:4a:60:70:55:4d:76:a0:08:46:07:d7:f7:d2:17:03:9e:f0:
cd:f8:f6:e2:bf:08:db:d8:21:0f:a9:21:11:9a:27:fa:68:76:
de:1a:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:36 2025 by rpki-client