Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: nr7EePbySBTYk/ixUD6xbg6Wt4xj6EAxaVZHDVSFpRA=
Subject key identifier: 1A:30:25:7C:F7:17:32:90:DD:5B:3E:4E:8F:E9:EB:4B:DE:0F:55:FA
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 019613902DAD4FDF21EC8EA3FB0BFCB87E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 14DD
Signing time: Tue 08 Apr 2025 04:02:17 +0000
Manifest this update: Tue 08 Apr 2025 04:02:17 +0000
Manifest next update: Wed 09 Apr 2025 04:02:17 +0000
Files and hashes: 1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: 7/HOcrDgkWMIodiQreJvqvvRRmY2ZPkZzjnNKVFnoXM=)
2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=)
3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:90:2d:ad:4f:df:21:ec:8e:a3:fb:0b:fc:b8:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Apr 8 04:02:17 2025 GMT
Not After : Apr 9 04:02:17 2025 GMT
Subject: CN=1a30257cf7173290dd5b3e4e8fe9eb4bde0f55fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9b:88:71:55:d5:71:be:ee:06:dd:69:c3:dc:
74:0a:f4:84:05:3f:78:91:76:8f:2f:28:a2:45:b1:
bb:16:61:04:7d:9e:50:6a:1d:76:f5:2b:97:8e:63:
3b:d5:6a:fa:51:7a:0c:ad:5d:ba:3e:bf:24:6e:60:
10:7d:41:8f:90:53:33:ff:b1:0b:0c:3a:fb:d1:12:
df:20:0e:c7:aa:86:ce:cf:2d:fb:db:32:0c:5f:dc:
4e:4d:78:f5:db:8b:fb:7a:bc:c2:37:ec:44:19:95:
d8:3f:b2:13:1a:b9:c7:f6:40:11:36:0e:80:c0:23:
3f:50:09:22:60:a2:ef:4f:7a:2d:de:78:83:19:c4:
02:36:e9:d8:b3:85:ee:89:90:9e:96:a2:50:63:44:
7a:b8:75:8d:00:8b:0d:6c:af:46:b3:a0:39:15:92:
b0:ce:78:55:a1:04:3d:ec:76:7d:3c:9a:08:2e:63:
86:6b:62:f2:7a:2c:b1:06:d7:26:85:df:c1:68:95:
22:f1:14:96:1a:7b:d8:46:e9:1a:d5:78:7d:4d:02:
92:24:db:96:f8:de:91:57:da:0d:8e:50:91:9f:ba:
6d:3b:3d:43:5d:fc:23:b8:c3:51:2d:2a:cf:71:11:
9a:0a:28:8d:3e:b8:71:41:fb:3b:29:24:0e:0a:6b:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:30:25:7C:F7:17:32:90:DD:5B:3E:4E:8F:E9:EB:4B:DE:0F:55:FA
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:96:2d:77:56:8f:a9:74:22:77:38:cd:bb:d8:d3:d9:3f:d7:
75:f1:1c:ee:18:bd:0e:ad:e3:94:93:8d:a6:5e:fd:fe:48:09:
8c:ae:bc:5f:69:cc:02:7a:f0:56:ff:2f:17:85:0a:0b:14:6b:
47:25:8d:5b:53:82:24:8a:de:d0:ec:65:2e:5e:22:b1:24:65:
8a:ce:1c:ff:e9:36:3d:7b:64:6d:53:ab:29:46:ba:90:4e:75:
f1:80:9b:80:88:af:cc:8b:4a:ec:3f:6f:e6:d7:00:0a:67:3f:
8d:b6:3e:ec:41:48:84:d3:9d:4e:40:03:ca:1d:a7:e5:e7:03:
ac:03:78:96:90:34:4c:1c:ed:87:8e:96:6d:d0:58:e2:f8:9f:
b9:d0:b1:8e:b8:ee:04:39:76:fa:fc:a6:8e:e2:d6:8a:20:23:
54:81:53:51:38:59:0a:69:95:f2:0e:bc:a9:11:f3:fc:04:a4:
36:e1:75:05:a0:6b:86:f2:b5:23:10:1b:07:1d:ca:7d:af:6f:
40:cc:a9:31:bb:1d:a1:8b:46:ae:b3:12:7b:9c:0a:9a:35:2f:
92:a3:65:fc:62:fb:ea:48:9f:d4:65:cd:27:9b:91:aa:10:df:
54:47:57:ae:b9:7a:a4:34:62:50:11:ac:00:fa:7f:8d:3b:64:
db:e4:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:26:10 2025 by rpki-client