Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
File: dODVhfGshfVEks_JXh3OD8L3lw8.mft (raw, json)
Hash identifier: +IXYYQLPFLsbf+TmyFqxRCz3U8QkI2R/OIgRE8oDKDQ=
Subject key identifier: AA:DB:56:24:B3:CC:9A:64:F4:F6:1B:A6:7E:74:BB:A1:EF:91:05:08
Authority key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
Certificate issuer: /CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Certificate serial: 01965CBA79BF2B61616B1EB1D968E78A86CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
Manifest number: 014A
Signing time: Tue 22 Apr 2025 09:00:46 +0000
Manifest this update: Tue 22 Apr 2025 09:00:46 +0000
Manifest next update: Wed 23 Apr 2025 09:00:46 +0000
Files and hashes: 1: ZK2-Yf0vyUn-1yqVZSeh59hAASc.roa (hash: dJFWEY6bKtkQB9DqJ5/i3H6PU+2US3ATnt6WwIQ5YmQ=)
2: dODVhfGshfVEks_JXh3OD8L3lw8.crl (hash: iwpy57tufdqzedE7OwSYSqho9eK2MbaJl3B0genbRss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:79:bf:2b:61:61:6b:1e:b1:d9:68:e7:8a:86:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Validity
Not Before: Apr 22 09:00:46 2025 GMT
Not After : Apr 23 09:00:46 2025 GMT
Subject: CN=aadb5624b3cc9a64f4f61ba67e74bba1ef910508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:6e:b9:7d:36:7a:14:96:5d:d0:a9:86:08:
89:9e:39:f2:33:da:cf:8b:37:27:a4:c7:89:18:0c:
0d:e8:1c:79:8e:54:28:7b:5e:1b:70:99:05:32:e4:
33:e0:f9:72:7d:8d:be:16:58:73:72:45:ce:a5:6f:
19:78:a0:88:f1:67:ad:63:e9:bb:91:29:de:d8:b4:
8c:04:ce:8a:a6:44:86:55:50:97:04:33:b7:79:15:
e2:48:3e:dd:a9:3b:41:02:79:3c:5a:c4:25:90:d6:
96:6f:98:f6:e4:40:8f:7c:8a:0a:bf:73:1c:fa:80:
fa:66:18:a7:fc:df:dc:2b:49:73:3f:21:20:81:04:
be:b6:7b:85:6d:f1:fd:e6:57:25:1a:b9:d7:09:8d:
f0:05:c7:0f:73:7a:23:6a:62:f3:db:cb:f6:79:8c:
da:c6:9c:be:c6:00:9c:9a:91:7f:db:60:60:0c:75:
82:c8:34:59:14:8d:5f:0a:e9:d3:ab:19:31:58:79:
fc:a9:43:6c:3c:95:17:07:7c:82:c3:4b:86:2c:5b:
4e:d0:58:2b:59:83:22:76:11:80:e0:92:7a:20:d6:
45:81:16:6a:fc:c8:66:2b:e9:81:69:e9:e2:e1:16:
36:49:14:67:1b:c8:04:63:a3:7e:0b:7b:94:e9:ec:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DB:56:24:B3:CC:9A:64:F4:F6:1B:A6:7E:74:BB:A1:EF:91:05:08
X509v3 Authority Key Identifier:
keyid:74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ca:f9:27:bc:39:5f:17:ff:3b:7b:48:d5:f4:94:87:76:49:
57:9e:2a:94:4c:43:f2:4e:20:26:50:28:d6:0d:01:0f:7a:01:
d6:1f:a5:22:08:2b:1d:6a:68:17:04:35:e4:86:31:1d:13:40:
9e:9b:01:b4:69:73:01:d5:32:6b:40:fc:7c:fd:9c:23:52:e8:
90:69:9e:4f:b1:c0:a1:8d:f7:0d:b6:d4:24:fd:3b:bb:e1:1b:
c2:de:f6:c4:de:9a:71:85:47:e6:93:bd:84:8d:5e:66:cf:e3:
8e:c7:50:dc:c0:76:39:a8:70:81:bc:01:ba:38:0a:61:39:55:
dd:fa:7b:33:33:38:e9:41:6b:01:cc:d9:2f:66:00:bc:e8:3b:
61:a6:54:47:a8:75:ab:de:b0:de:52:0b:fa:d9:a7:f1:b2:bd:
32:34:00:b0:4a:ce:ec:5f:79:9b:fd:84:76:46:9f:45:53:95:
89:a7:7c:9e:2b:91:f8:53:b0:da:1a:74:eb:0d:85:2d:92:e0:
47:a9:39:71:99:96:78:b7:b0:42:d6:fa:f7:cc:d0:5c:36:24:
17:bb:55:b1:d0:0f:33:18:6f:ac:b0:8e:2c:88:18:e3:f1:cc:
18:48:9f:10:f7:33:8f:37:96:ca:7f:7a:c1:f9:1e:f0:98:84:
7c:c5:ce:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:22:25 2025 by rpki-client