Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: A2S2BeH0U26j8ZFvrW+081Ah6PRhc3OsBg8MPaBOk2k=
Subject key identifier: CD:C7:F2:7E:D7:D7:31:21:B1:FE:D5:28:85:2D:CF:F3:BA:0C:31:FC
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 01964067C3222D216DADD7C7CF65442A9890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 09FB
Signing time: Wed 16 Apr 2025 21:01:04 +0000
Manifest this update: Wed 16 Apr 2025 21:01:04 +0000
Manifest next update: Thu 17 Apr 2025 21:01:04 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: bSJnRhol9/6GaJbqEHjF0JR/qM3B45ERdfvqspzFQFw=)
2: it5TB1fVnn8wAT1GhxrXXPpJQhE.roa (hash: uFvB0yeXGCmgY/JUbCJTKqf/gHh6c2TkYoHqFThttag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:c3:22:2d:21:6d:ad:d7:c7:cf:65:44:2a:98:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Apr 16 21:01:04 2025 GMT
Not After : Apr 17 21:01:04 2025 GMT
Subject: CN=cdc7f27ed7d73121b1fed528852dcff3ba0c31fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:d3:a0:fd:36:55:6f:42:62:3d:9c:2b:4a:
12:a7:f7:0d:cc:07:6d:d1:c0:58:fc:66:6e:74:5b:
b7:35:b7:f0:af:0c:41:56:21:29:8c:89:4b:4d:99:
ee:7a:4d:72:5c:df:2c:e9:24:2c:0a:e5:cd:5e:40:
6e:9a:33:b0:49:19:3f:b1:91:b5:03:53:3f:c8:6f:
56:78:30:20:91:93:c9:0d:fc:28:8f:34:ae:b0:c3:
3f:1a:68:ad:16:4e:fa:8a:a7:6e:fb:b3:1f:e4:1f:
94:6c:39:18:b0:0c:ef:2b:3d:60:f0:74:18:4d:45:
1e:15:a1:ac:77:00:c4:32:62:23:1c:81:03:c9:68:
46:e6:ad:5e:db:92:c1:65:08:d7:ed:03:c8:56:5f:
d3:09:68:cf:92:9d:7a:6b:ab:f5:96:84:6d:40:c6:
a7:74:78:e6:c9:8b:04:7b:9a:77:36:24:36:29:92:
9c:26:aa:5d:0e:5f:74:4e:59:fd:83:0c:a8:05:97:
89:d8:f7:68:db:3a:b3:72:63:c5:0a:80:93:e9:c5:
8f:cc:ad:5b:6c:52:76:49:a5:56:47:d0:bd:ca:dc:
29:21:d9:e9:d4:43:78:df:39:43:4a:ff:0e:93:51:
59:95:2d:0c:ee:7e:36:ef:8e:1f:ea:63:f3:6b:cd:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C7:F2:7E:D7:D7:31:21:B1:FE:D5:28:85:2D:CF:F3:BA:0C:31:FC
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1b:a4:9e:e9:82:7d:8a:77:ed:30:5b:68:30:58:21:c7:b4:
7b:53:e0:f5:7a:57:eb:79:42:b4:be:3f:e6:b4:d4:7b:39:f3:
45:f5:c9:18:c7:00:df:d1:3b:e7:c8:7c:d4:89:24:6f:96:7e:
bf:79:c9:1c:7c:bf:4e:f7:1d:9b:93:cc:a3:e1:47:e0:ad:75:
a8:dd:01:78:07:3b:24:d9:24:96:dd:c6:1f:1d:80:66:d7:ec:
89:c2:a8:d5:0e:99:c2:55:a9:d8:cd:28:e3:ab:06:cb:8a:73:
a6:bf:6f:7c:75:74:af:84:61:2b:ea:b0:d8:1e:57:03:92:19:
72:43:cd:54:6c:86:e6:7f:8c:d9:97:03:f3:81:7f:4d:ab:e2:
aa:81:9a:8f:f8:8f:c1:70:43:8c:12:f9:e2:75:b1:f6:3a:f2:
d8:56:0a:c4:e3:df:7a:7b:d5:0b:a7:e2:1c:db:eb:8c:0c:5d:
03:3e:f4:2b:bf:7d:c2:e0:f6:e1:81:1c:29:53:12:70:46:ed:
6f:85:db:22:68:2a:27:e8:56:92:36:eb:44:06:07:8f:e9:9c:
ff:b6:a3:d7:0d:b6:08:39:6a:26:5f:95:9a:73:04:12:ae:b8:
b4:b5:52:46:07:be:0c:ee:c2:a7:6c:2e:2f:1d:ea:f6:83:86:
a6:16:08:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:36:47 2025 by rpki-client