Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
File: RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft (raw, json)
Hash identifier: 5Hf4G2HVrHgsDeYESZUMnhJ76MPm+zMMecy9ReIE9yo=
Subject key identifier: DD:A2:25:B7:5A:1C:B0:B2:AC:74:1F:44:C4:F7:3C:D4:90:78:FB:D2
Authority key identifier: 46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
Certificate issuer: /CN=46224dc9396e580ff7120f257353a70c72379c93
Certificate serial: 0196515BE7A2371069D86F7FA36CEC70D62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
Manifest number: 14D2
Signing time: Sun 20 Apr 2025 04:01:39 +0000
Manifest this update: Sun 20 Apr 2025 04:01:39 +0000
Manifest next update: Mon 21 Apr 2025 04:01:39 +0000
Files and hashes: 1: 237nnYKB7i2VaJ7m52nEdfcb0Ac.roa (hash: dLnbAiBZCTSW/Pqjq4dBaGgbhjyCcK3BPz7BIZYga/k=)
2: RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl (hash: CDTY1F6oEZNRpZFyIZs02cUwO67K/aRpaWXtfBOZG6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:e7:a2:37:10:69:d8:6f:7f:a3:6c:ec:70:d6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46224dc9396e580ff7120f257353a70c72379c93
Validity
Not Before: Apr 20 04:01:39 2025 GMT
Not After : Apr 21 04:01:39 2025 GMT
Subject: CN=dda225b75a1cb0b2ac741f44c4f73cd49078fbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:cb:3b:90:de:a7:ea:28:af:30:2f:f1:ba:
d8:9b:ec:20:a3:d9:bf:bb:6a:db:f9:9e:09:38:40:
aa:af:d6:5b:f4:e2:6b:79:76:fd:c7:a7:3e:eb:ea:
9a:2d:36:bf:c9:b0:89:93:09:aa:e7:d6:23:b2:d7:
34:12:9f:7b:70:31:58:79:ef:91:20:ce:ce:ea:b2:
2c:cd:b8:27:5d:62:e2:6a:2c:7e:36:2f:13:ee:fb:
a3:20:24:a3:dc:12:1e:62:97:12:ab:58:74:bd:79:
03:5b:c8:c8:37:77:7d:b9:2e:2b:7f:d3:8a:1d:09:
84:00:e5:b1:28:12:89:28:42:6d:b1:66:ac:94:97:
cb:f0:1f:7d:b4:26:53:5b:22:1a:97:43:c4:4d:2c:
df:07:20:15:e5:da:c5:a7:f7:4f:57:18:f6:e7:df:
2e:82:e8:68:6e:d5:ac:e0:d6:aa:9d:f9:c8:aa:05:
b1:4e:6b:05:b1:ca:f4:0c:42:e4:9b:2e:3a:67:cd:
55:24:0c:42:a7:ce:d8:df:a1:84:52:f3:bd:42:94:
a1:b2:e1:b3:51:2f:98:2f:25:73:ae:8f:e5:a6:02:
29:e7:96:be:ff:2b:ed:c7:86:4f:e7:ab:28:a0:3f:
63:55:cf:1a:f2:9c:8d:3b:4b:25:39:b1:3e:21:2c:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A2:25:B7:5A:1C:B0:B2:AC:74:1F:44:C4:F7:3C:D4:90:78:FB:D2
X509v3 Authority Key Identifier:
keyid:46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:41:61:b1:a3:71:56:46:6c:92:92:45:05:7e:f2:a3:4f:05:
2d:7e:4e:2f:b6:70:7b:66:67:e8:83:12:19:5f:63:d7:ee:94:
be:19:5b:1c:0e:86:d2:7d:7c:22:88:1a:83:6f:36:d5:42:64:
bb:3f:10:56:9c:fa:48:94:70:be:1a:bc:f9:c1:a6:d3:5f:99:
76:c6:f8:39:c1:82:aa:ef:27:a0:df:8e:ea:d5:47:14:98:74:
20:33:6c:77:cb:57:0b:53:e2:0d:55:28:58:5b:10:9a:ee:f8:
66:be:02:fb:d7:66:55:db:b0:99:fa:c0:9d:af:39:7d:c2:11:
42:05:67:a6:4a:c6:cc:65:0d:f0:a4:e4:10:6c:bc:44:90:cc:
75:65:c3:b5:fa:0f:95:9f:a9:c8:7b:c7:47:8c:49:29:19:24:
7d:44:44:90:ba:43:35:36:29:b5:8e:e1:8e:f9:da:e2:27:05:
e9:3b:e6:12:23:ba:a1:4f:36:de:8b:15:dd:69:ac:48:19:27:
90:01:ca:c8:1a:18:50:1c:bf:02:47:a7:1b:8b:ec:1f:f1:20:
f1:53:66:29:f3:2e:1a:a6:4e:25:c7:94:7c:52:cb:0c:30:4a:
ca:a8:f3:fc:7e:51:17:bf:bc:1e:e0:29:50:09:7f:95:f1:18:
a1:9d:46:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:36 2025 by rpki-client