Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: BCMbaZJ1IpVPRBaWrHDtR/Elea5ycj1XznKQWIBIfAY=
Subject key identifier: EF:C1:A5:EB:43:B7:C2:3F:E7:D0:D3:48:68:3F:AA:63:5F:05:9A:37
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 01960B30B265A69885345344DC12F2F20A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 14D8
Signing time: Sun 06 Apr 2025 13:01:02 +0000
Manifest this update: Sun 06 Apr 2025 13:01:02 +0000
Manifest next update: Mon 07 Apr 2025 13:01:02 +0000
Files and hashes: 1: c_4VrUZIMtuPlYj4DhW8ouhaRQw.roa (hash: 3ElLAVX1FXo1T4VYhDu+QaMztPbJUQVgeIUdwTADFRI=)
2: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: L95Nwk4TrOAB3BVgjDcfwYXsqDO9CO+cHrx2yXF1xeM=)
3: r_WAi-eWzHC7Psr81UVNU3kzOJw.roa (hash: ZETLofVAHwa7kjk2pEcSj1ALX1XE9n9Z4taPD31cXSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:30:b2:65:a6:98:85:34:53:44:dc:12:f2:f2:0a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Apr 6 13:01:02 2025 GMT
Not After : Apr 7 13:01:02 2025 GMT
Subject: CN=efc1a5eb43b7c23fe7d0d348683faa635f059a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:a4:ab:65:ac:30:42:7c:eb:2d:0e:e4:11:
2b:b2:0f:db:3b:ee:79:50:08:75:c0:4d:25:74:9f:
27:a9:b3:a0:5b:1e:bb:c7:b6:6c:36:69:09:2e:5d:
77:ba:39:e6:3b:4d:94:d2:6c:91:a7:5e:69:66:e0:
55:dd:43:bc:39:10:6e:d8:b8:88:86:14:9f:b7:bb:
c2:ea:b6:78:11:9e:41:1e:7c:74:39:53:7a:a0:c2:
8b:c3:7e:76:8a:0f:f5:21:ca:5c:24:07:47:ac:01:
89:ac:c2:ac:a2:75:e2:4c:83:e9:3b:66:02:b8:10:
69:1a:2f:7f:c2:bd:22:c2:21:3c:9d:9f:6c:ae:db:
0a:06:07:44:df:4b:4a:fc:a4:1b:bb:88:0d:17:da:
8a:4f:99:e9:1e:e3:67:f8:35:24:35:21:d2:bc:e6:
83:94:14:85:31:8d:fa:d1:0e:12:c4:25:93:c1:d2:
5d:f9:6e:c8:7c:21:a8:78:90:52:be:75:bb:a1:e2:
37:df:cd:c4:ce:b9:81:7f:1d:94:db:fe:c9:6e:dc:
bc:53:a4:a2:20:87:ad:f1:dc:3c:f2:a8:0e:ca:78:
80:f0:63:15:d2:36:c1:86:08:74:b3:36:b0:6a:df:
29:3c:8e:53:ba:24:ed:d0:34:8c:bf:51:e6:2f:72:
2e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C1:A5:EB:43:B7:C2:3F:E7:D0:D3:48:68:3F:AA:63:5F:05:9A:37
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:62:53:84:09:c7:07:94:95:ca:4b:41:42:5f:3f:b1:24:05:
77:35:a2:50:92:a8:09:f5:69:f7:4f:2f:54:e8:ee:51:f3:4b:
12:e3:4e:5e:8d:59:53:18:7d:5b:41:c8:74:b1:bf:4a:d9:d4:
48:25:7b:2f:0d:ff:bb:c3:fb:09:48:fe:a4:a2:78:fc:24:8e:
31:5d:0f:9d:44:64:4b:5a:07:14:b5:2d:ae:78:04:2d:ef:61:
ff:e3:5b:07:e5:44:57:e2:0f:9e:7b:37:ba:d4:be:bb:bc:d5:
38:13:30:35:18:02:3e:4b:f4:93:1e:42:23:bb:ba:8a:47:37:
f8:33:06:ef:f5:97:c7:f8:7e:f3:ff:a5:ab:e5:a1:b4:15:85:
63:3d:48:78:c3:18:65:98:8c:ba:bc:41:7f:23:c8:00:f8:7d:
4b:8d:0d:ca:12:3b:0a:36:ca:67:63:c6:6f:ea:14:b9:7f:7b:
65:15:7d:cf:a1:9e:67:c3:f7:49:bf:17:6d:0a:31:63:93:f5:
97:71:70:2b:a5:34:a0:4a:67:8e:c8:5d:c9:42:2a:38:79:e5:
28:03:dc:b2:9b:23:cc:82:46:a5:2d:17:25:db:36:d7:1c:57:
c7:0e:b7:1a:4c:89:b0:4e:53:b6:8b:44:78:74:5f:8b:eb:e1:
68:f9:b5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:22:05 2025 by rpki-client