Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
File: d_u84sIID4H1oPmPJ5Ipgm3khQs.mft (raw, json)
Hash identifier: juiQFsfSzIMlSh/7lYKP9FjExLjE0NL2wkEwKGwAvnQ=
Subject key identifier: 6C:34:BB:8E:57:5F:56:E2:9A:A0:FA:26:17:3B:AC:26:8A:97:2C:51
Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
Certificate issuer: /CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Certificate serial: 019656135053306EBD3D2646E0A700BF8CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
Manifest number: 0C23
Signing time: Mon 21 Apr 2025 02:00:28 +0000
Manifest this update: Mon 21 Apr 2025 02:00:28 +0000
Manifest next update: Tue 22 Apr 2025 02:00:28 +0000
Files and hashes: 1: AOhn7xhM2kSUfRAFFhvDCxU-O20.roa (hash: 1VAhBGtFhGjWFmWSsORfWNgJJ1LUT2F54ZQ/3ep5zho=)
2: d_u84sIID4H1oPmPJ5Ipgm3khQs.crl (hash: clt1xA86LMkVSIstSVR5qWNz1iiekho4EG9Ot9OCne4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:50:53:30:6e:bd:3d:26:46:e0:a7:00:bf:8c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Validity
Not Before: Apr 21 02:00:28 2025 GMT
Not After : Apr 22 02:00:28 2025 GMT
Subject: CN=6c34bb8e575f56e29aa0fa26173bac268a972c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:32:c6:4f:74:f9:bd:8f:6a:1e:9a:eb:db:b3:
6f:86:ff:35:06:46:fe:90:56:66:1b:e3:c8:61:c2:
12:4e:4d:26:7c:2f:20:a9:e7:e5:28:c9:25:fe:34:
cf:8c:7b:09:20:a9:25:f2:7c:9b:2d:53:40:1e:d0:
5b:4a:71:f4:b9:4b:82:14:e7:9d:ee:5c:e6:cf:d9:
d6:be:f7:b5:72:52:5b:a2:78:5c:01:28:27:ad:eb:
72:c3:f2:63:49:f3:96:2b:ee:64:84:f5:10:fb:ad:
5a:53:76:4c:07:9f:43:6e:f4:df:81:9b:db:32:e4:
a5:f3:15:44:89:30:d0:be:99:fa:3f:ac:d4:11:ae:
d7:43:da:75:e4:c6:e5:a6:e3:ef:5e:f9:79:b7:43:
62:60:8e:32:a5:3f:bd:b4:8b:b2:60:eb:c5:c5:2e:
40:31:8a:c5:1a:09:6a:68:fb:02:e8:44:fe:59:21:
e5:c2:78:56:60:09:d6:23:67:fd:bc:57:fd:ee:1f:
4a:3c:57:7a:b0:2f:64:aa:30:58:4c:12:c0:70:df:
42:61:ce:e5:61:d4:fe:ec:1e:f2:96:98:4d:c5:be:
cc:f4:bd:a4:73:b0:7a:29:ba:77:ee:e4:61:ad:2c:
29:00:b2:f2:53:de:69:1b:37:c0:9d:cd:e6:e0:c0:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:34:BB:8E:57:5F:56:E2:9A:A0:FA:26:17:3B:AC:26:8A:97:2C:51
X509v3 Authority Key Identifier:
keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6e:34:7a:c8:4b:e1:44:b3:2a:7b:48:b4:b3:ed:be:1b:e3:
d9:58:c5:da:67:45:3d:66:0f:55:6e:71:5c:ad:e4:da:a7:06:
44:82:ff:ac:85:a9:7f:ac:1e:7a:5b:5f:b6:3c:6a:b2:f0:ff:
cd:69:50:1a:63:ae:17:ca:84:1d:cb:ce:ec:26:58:dc:6a:69:
57:10:dc:1b:11:ef:89:99:6d:0e:21:63:27:7c:89:2a:8d:93:
e8:c3:96:cd:56:e9:e9:69:b0:8b:70:f0:48:f9:d1:be:42:c7:
d2:af:c3:de:92:bb:68:9f:c3:1c:28:9c:84:2d:3d:ea:4a:eb:
b0:f2:4f:e9:f8:ca:88:8f:33:fa:2f:50:94:95:2c:d6:91:2d:
18:ee:8a:e1:e1:1a:1d:48:30:59:e2:d2:97:5e:53:00:7c:16:
d9:9a:3d:25:3b:83:ff:a5:55:2e:a5:28:6d:fe:7b:cf:fa:60:
ca:61:e6:34:fc:dd:ca:c0:7b:9a:71:6f:2c:35:17:7b:ce:20:
3d:09:ee:22:22:2c:a4:59:df:0a:0b:ea:26:e7:81:65:09:d8:
ef:c3:2b:32:7c:0f:3b:86:38:bf:53:db:ac:d5:50:0d:29:2b:
a8:39:ee:7a:0e:33:12:c2:15:50:45:43:4d:54:ed:4a:5c:1d:
5b:5f:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:35 2025 by rpki-client