Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: V56xsdELij71ovgJzotmQUJfEuJsvCfWdtP+8B5jGZU=
Subject key identifier: 7A:7F:FC:57:B4:A9:C2:64:DD:34:19:CB:10:A1:86:8A:B6:F7:92:1B
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 0196561309E038176FECAEA2CDC97C596093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 02:00:10 +0000
Manifest this update: Mon 21 Apr 2025 02:00:10 +0000
Manifest next update: Tue 22 Apr 2025 02:00:10 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: Z4c34XamJodUmXC7pzYNnkQxvN7dBQ2LjVkUaLOB+NE=)
2: Vj26lr7hbbX_fCXK7w3hESEooM0.roa (hash: gGIWp8lV6uKwDTfCg2XsPsepLLQekr1mHTq2CjmnAag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:09:e0:38:17:6f:ec:ae:a2:cd:c9:7c:59:60:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Apr 21 02:00:10 2025 GMT
Not After : Apr 22 02:00:10 2025 GMT
Subject: CN=7a7ffc57b4a9c264dd3419cb10a1868ab6f7921b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:87:a2:78:4e:7f:79:f8:95:03:7e:b4:be:
03:44:34:a1:63:62:b8:2f:05:c0:df:c1:a4:c3:d0:
a1:bd:06:2b:d6:d3:64:46:7c:b5:db:73:4c:6b:91:
34:ac:27:d5:4d:f5:03:2e:58:2a:c8:a5:a5:31:46:
9a:c6:78:87:6a:0f:66:08:7e:8a:c1:b5:a0:9d:2a:
a0:c4:2a:64:58:5a:0c:c1:b2:1b:25:a6:20:86:3f:
80:a2:69:25:94:30:67:b8:81:fa:00:f1:e0:34:30:
fa:d2:a7:11:41:08:1a:25:03:c7:f9:35:06:b7:63:
69:c4:68:3b:ea:38:d8:31:72:6c:b0:35:88:58:83:
f3:0c:a2:5f:ce:d6:24:cd:ae:16:f9:3b:2e:12:78:
18:01:d0:37:e2:75:84:ab:30:a3:33:a7:a0:4c:97:
4d:21:4f:36:14:1f:ed:06:1c:53:9d:4d:be:c4:4e:
0b:87:7f:df:ce:df:21:44:b0:7c:64:db:54:0a:61:
c7:94:18:b5:a8:d9:c8:65:0e:85:f0:da:c0:bc:80:
70:8d:ea:3b:b8:9f:2c:ef:6c:43:97:b6:fb:1e:cc:
f1:3f:8f:bf:d3:9a:ef:c5:83:b0:24:a2:60:64:af:
56:62:43:5d:04:93:41:9f:94:88:3a:8b:bb:15:21:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7F:FC:57:B4:A9:C2:64:DD:34:19:CB:10:A1:86:8A:B6:F7:92:1B
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:99:48:9d:57:a5:fb:f5:d5:0d:3c:1f:d5:62:b3:a9:a1:0b:
d9:67:bd:35:29:63:60:55:a1:b9:48:d0:53:1a:de:d5:8c:3d:
f4:85:68:ba:62:50:0f:79:92:7e:0f:1e:6d:54:0e:c1:d8:e4:
da:64:e0:ec:80:b2:97:15:e8:66:f1:33:d4:d1:ee:97:e3:51:
18:e5:b7:ea:5a:83:9d:76:55:48:9b:31:bc:42:22:0d:89:96:
46:03:3b:f9:2d:db:85:cd:19:1a:84:10:d4:d9:e9:f4:6a:e2:
41:72:be:25:70:e9:2e:69:61:4d:07:13:7c:13:55:5c:00:f5:
76:a2:05:09:16:3d:c6:52:ed:4c:8a:e2:29:d5:ca:df:77:52:
e0:61:5b:e6:d4:19:9c:e2:ce:fd:61:20:97:f6:7a:45:38:75:
d1:b2:a2:cf:3a:48:b4:9c:b0:d5:29:0d:46:34:5d:a1:c2:e6:
7c:1b:dd:84:03:f5:b6:e2:f5:87:d5:89:b3:31:aa:d8:49:c9:
6e:85:79:11:db:aa:b9:d0:f6:be:7a:af:7d:a5:a5:86:45:08:
7c:02:1e:3e:cf:a1:6c:44:ef:7c:c7:b2:f2:06:c2:9e:36:95:
54:08:9d:51:dd:44:d5:ce:42:81:b3:40:5d:6b:88:da:54:72:
8b:b4:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:46 2025 by rpki-client