Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier: Nk6deeFawOP1HzTm4OtThdedllgeVExR0RUle5qZitg=
Subject key identifier: 6B:70:8F:96:62:A3:93:19:65:F0:14:D7:4A:F5:F4:D0:60:66:36:F8
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer: /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial: 01965492F0E634831B6D9F9980AABD20DA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number: 08
Signing time: Sun 20 Apr 2025 19:00:38 +0000
Manifest this update: Sun 20 Apr 2025 19:00:38 +0000
Manifest next update: Mon 21 Apr 2025 19:00:38 +0000
Files and hashes: 1: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: tCjj0dYItSwzAiu7B3WMUjffbEPWmPOeNfxgjugeJcI=)
2: UFEpRGmmgSxI-Cj4mUoULnogLh0.roa (hash: uynyMnukvUhaVDa9YBwkcCoinwLXAu+vAC1b07ExVN4=)
3: mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa (hash: UEuZfid3mOqO0N/4zAUnn5LYhUgHF25ZTPMwLRC0oAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:f0:e6:34:83:1b:6d:9f:99:80:aa:bd:20:da:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Validity
Not Before: Apr 20 19:00:38 2025 GMT
Not After : Apr 21 19:00:38 2025 GMT
Subject: CN=6b708f9662a3931965f014d74af5f4d0606636f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:7f:86:f7:e7:b4:b9:5b:3f:d3:8a:eb:60:
9f:41:22:c6:e5:77:e3:6e:8d:22:31:f4:19:c8:60:
a6:09:05:00:c2:5b:1f:bf:0e:69:b9:ce:45:1c:02:
68:3a:02:7d:63:81:07:4b:cb:a4:0d:f9:14:21:51:
3f:39:79:01:84:f6:b7:ca:9d:a6:53:cb:62:9b:c3:
67:96:4e:69:05:b2:b2:78:9a:9e:98:22:b6:ed:07:
84:88:e0:38:b8:61:19:d6:a4:21:c6:36:77:ef:06:
3a:b8:94:13:61:b8:16:33:41:1e:66:25:16:0c:ce:
e4:f4:5e:70:19:b4:31:b7:e9:db:05:b3:5d:6f:80:
ed:cf:31:fa:7a:a7:bb:2c:d9:ac:39:71:3b:14:b9:
dd:f3:1d:69:c2:0f:7b:f3:c2:ed:5c:18:a7:7f:cd:
14:aa:04:2f:bb:80:23:55:72:53:20:23:fd:ef:8b:
f2:f0:ca:1c:68:f2:2e:2a:94:44:2d:17:db:f1:c3:
01:88:f6:0a:9c:00:80:49:95:e5:29:76:9b:96:31:
3e:b5:99:c7:29:90:23:42:f0:57:3a:ae:87:9b:db:
bd:89:7d:68:1b:4e:5d:01:4e:0d:7f:80:df:d3:aa:
88:55:ce:27:f9:e3:f2:68:0c:fb:0f:e0:67:b8:99:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:70:8F:96:62:A3:93:19:65:F0:14:D7:4A:F5:F4:D0:60:66:36:F8
X509v3 Authority Key Identifier:
keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2f:a6:1d:15:2f:df:34:0a:5f:9e:62:eb:78:02:c5:92:80:
46:8e:44:9c:97:97:16:3a:2f:41:79:b7:7b:1b:25:4c:73:ec:
69:5d:27:b3:ca:aa:13:0c:42:5e:46:6c:dd:1f:d2:06:44:47:
a7:3c:d0:3c:b5:38:87:15:b8:bf:06:ff:a3:fd:50:61:39:5f:
5d:07:b7:8a:f0:fb:92:b9:70:42:f6:e0:d7:26:10:8a:a6:87:
52:a7:ee:53:33:6d:53:6d:4d:93:bd:83:a9:da:f4:bb:22:9a:
1a:33:06:c9:e5:48:84:e7:cd:24:33:2c:6e:6b:c2:3e:87:20:
2b:c6:11:fa:3c:27:ce:3a:16:83:14:6a:cc:c6:12:f5:d6:54:
1a:2b:a8:31:35:c1:18:a0:77:1b:cc:3c:05:92:85:0b:92:05:
be:e4:e3:a9:44:ce:46:e9:2e:83:f3:da:e6:ca:7e:02:02:db:
d7:2d:55:9a:2c:7f:ef:e5:0f:08:21:ff:65:b4:1e:d3:90:a0:
43:73:e9:3e:7c:0a:07:54:89:83:3b:67:75:2f:43:83:d2:b6:
58:21:ee:6f:6f:ab:fa:0d:39:9b:1b:23:f7:f4:bf:e0:18:dd:
2a:db:29:af:f2:47:b4:5b:bd:09:6c:d0:0c:b0:2f:05:93:0f:
5c:4e:18:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:42 2025 by rpki-client