Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: anPrMgtOFH4AtIWa+Tvdru7hNPXyFAFUyYCgnSgqGhE=
Subject key identifier: 2C:EC:8D:81:BE:82:DB:4F:3D:93:73:EF:5B:E3:46:B1:0E:25:9D:50
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 019655381BDF7CA45438F010AB13C77E6023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 08B2
Signing time: Sun 20 Apr 2025 22:01:02 +0000
Manifest this update: Sun 20 Apr 2025 22:01:02 +0000
Manifest next update: Mon 21 Apr 2025 22:01:02 +0000
Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=)
2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: 5j/YIu+Y7cJzpHmPv/bTOEsTOqntAcNhTRjz0pDWX9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:1b:df:7c:a4:54:38:f0:10:ab:13:c7:7e:60:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Apr 20 22:01:02 2025 GMT
Not After : Apr 21 22:01:02 2025 GMT
Subject: CN=2cec8d81be82db4f3d9373ef5be346b10e259d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:7c:b4:70:8d:37:fb:c7:db:5b:86:18:74:
e3:05:00:ff:bc:31:04:1c:bd:7c:8b:a3:78:9d:42:
9d:5a:3f:c6:a6:21:7c:59:9a:8d:88:fa:8c:a7:57:
2b:fd:9d:5c:80:fa:f1:03:1c:34:f5:32:f4:6e:bc:
51:49:72:17:8f:56:41:a8:06:80:66:3d:98:79:d2:
cf:0f:45:e6:f2:d8:2d:1a:d3:83:a8:d6:94:0d:4e:
5a:a1:71:29:05:b4:38:47:e6:82:67:8d:e9:80:43:
bf:bc:bd:db:5f:f4:8d:7d:b2:3d:c9:b6:4e:f9:d8:
0f:26:b7:06:0d:7a:b3:77:21:41:57:7d:d9:a1:c6:
0f:b9:d6:33:4e:0d:5f:36:28:e4:51:73:23:12:e5:
e9:2f:10:d9:d7:5d:fb:f9:5e:1e:75:31:f0:ec:ce:
36:6b:0b:14:57:25:93:d3:0b:ca:14:7f:4e:87:33:
51:46:fc:94:0a:ca:f2:45:e5:a9:e1:e3:8d:e6:e5:
62:95:79:42:94:0d:83:13:38:a1:d7:62:8f:a0:23:
26:2f:4d:c8:1d:35:60:09:f4:8d:9e:f3:a5:f4:64:
5a:5f:41:8d:2f:83:b7:45:6f:f1:68:62:43:4a:26:
a8:de:94:6d:b8:98:b0:72:7e:39:5a:6d:74:de:6f:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:8D:81:BE:82:DB:4F:3D:93:73:EF:5B:E3:46:B1:0E:25:9D:50
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:74:e3:ee:96:1f:0f:ed:bd:6c:59:e1:1c:a7:a4:45:cd:c8:
99:32:61:f8:ee:e1:09:d8:29:03:1d:a7:20:31:07:a3:c1:09:
62:fe:c9:18:0e:4b:6d:23:79:25:83:d6:33:07:b1:d5:c7:e7:
68:27:49:9e:96:3f:87:79:f9:76:70:29:a2:46:10:02:63:d6:
56:1b:ff:58:90:7d:0a:32:89:15:b6:b8:1c:18:ad:0a:08:32:
ba:1c:c1:6c:36:92:a0:1e:ba:86:43:eb:55:c5:69:e3:7b:45:
58:b8:f6:44:23:12:9a:d5:18:53:f6:86:0a:df:90:1a:1d:69:
1b:a0:89:2c:b3:92:e7:fb:7c:36:aa:89:56:3d:ee:63:9d:33:
44:57:36:af:d8:18:f7:39:5d:a0:5f:3d:37:93:9b:0c:80:1f:
69:c8:0c:88:0d:54:25:d8:38:47:61:f0:c1:67:f4:d4:43:99:
ca:6a:19:ef:e0:d0:7e:04:f8:11:bf:c4:83:52:a9:4a:e6:15:
55:81:6c:88:bb:0f:3c:6b:d5:94:a4:a0:5d:ad:94:99:6a:e5:
47:9b:f1:75:4a:50:a1:f6:a0:ad:a1:00:e9:7a:e6:94:03:53:
3b:08:51:a9:d0:37:c2:10:cc:06:7e:4a:9b:6d:8a:aa:26:07:
91:28:7e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:02:15 2025 by rpki-client