Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: aTFzZUTsEbvlFBtyxRCDydktnWyVEleX6kz7sorIwjw=
Subject key identifier: 7D:F9:51:29:B1:7F:36:95:77:E6:D1:16:C5:C3:4B:00:5B:61:C5:68
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 019653EE4DDE7B9EAD6A2C4E99497C70A3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 0B29
Signing time: Sun 20 Apr 2025 16:00:48 +0000
Manifest this update: Sun 20 Apr 2025 16:00:48 +0000
Manifest next update: Mon 21 Apr 2025 16:00:48 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: VGqZyCD20HGluiybuF74ZG846B6zPUZz0RE9NDjI1AA=)
2: TKaIIghuBjovehstBf-4yPQzWzs.roa (hash: Y5l+50EAAN4J3BZwHmdWVnVvSIYr6cNnr7nr74LFy0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:4d:de:7b:9e:ad:6a:2c:4e:99:49:7c:70:a3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Apr 20 16:00:48 2025 GMT
Not After : Apr 21 16:00:48 2025 GMT
Subject: CN=7df95129b17f369577e6d116c5c34b005b61c568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:de:ab:60:70:a2:5b:52:04:90:38:60:c5:
f5:5d:4b:89:14:3f:e9:ed:03:a3:70:b7:a4:af:85:
83:01:34:21:ea:e2:1c:da:15:d1:8c:1e:ed:49:63:
85:14:1f:d1:c6:f1:52:6d:13:4b:ac:9e:3b:be:41:
b0:b3:c0:2e:d7:f0:a0:45:45:ab:c8:54:64:4b:66:
5b:c8:b4:22:6a:ad:d2:34:7a:c5:ca:bc:fe:9b:a9:
8d:dc:c0:8f:e4:ea:53:ca:7c:00:d1:4a:31:d8:ae:
71:2d:d4:5f:d1:1f:bf:72:32:3f:24:a5:ce:3f:67:
93:62:2c:8b:87:44:ff:b1:6a:b4:64:a3:04:44:ae:
f5:5c:6b:be:0a:46:3a:e8:2f:fe:2c:b7:0d:0f:90:
7f:8f:97:0b:28:63:bc:09:ec:f3:18:54:77:df:a2:
a4:b8:2d:5c:44:31:01:3a:01:8d:b9:73:3e:b9:8a:
7d:ee:f0:75:c5:f0:81:a4:fd:8b:ed:e2:ce:3f:48:
fa:22:fc:2e:8f:86:84:d7:24:e8:ca:e9:c7:7d:5d:
17:48:0a:4f:08:59:a7:15:8a:80:74:d6:76:46:ab:
b8:77:07:e3:16:16:c1:e5:21:9b:83:3d:cb:72:67:
0c:3b:85:fd:73:f7:7b:a2:8f:bb:cb:e2:36:19:54:
7e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F9:51:29:B1:7F:36:95:77:E6:D1:16:C5:C3:4B:00:5B:61:C5:68
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c2:d8:f1:4c:d8:00:24:6a:0f:57:24:b9:9d:0e:c8:91:0d:
ca:3a:6d:97:05:fb:ad:fd:55:6b:18:9c:29:d3:03:d2:93:f6:
7c:66:29:0c:34:79:23:f6:a8:1e:18:b7:0f:08:8a:5c:fc:dd:
4c:32:0a:68:e0:a6:df:90:04:4d:74:35:f4:2e:94:7b:c7:e8:
4d:e5:84:ae:1e:bf:95:28:e7:9a:01:ef:2e:58:3c:30:41:29:
16:21:2c:00:a6:0c:c1:52:bb:90:ce:d0:7d:18:0c:10:9e:ed:
a5:45:8c:e8:8c:4e:e5:42:be:b9:c3:b3:7d:eb:85:91:f7:7a:
26:c6:1c:0c:7b:44:b4:8e:ff:63:ae:c4:a0:56:10:48:b6:dc:
3b:23:d7:84:dc:da:57:cc:e5:c1:d3:5d:15:52:e6:e2:b9:fe:
5d:aa:74:75:3c:3a:5f:fd:2c:bb:3e:6b:11:28:d5:d8:6e:0b:
1a:67:28:b5:cd:93:34:d1:d4:d5:b1:fe:b5:9e:b1:40:3b:b3:
85:17:44:72:c7:b5:9c:ab:b1:2f:56:05:1b:9f:ce:dd:fd:69:
fe:3e:77:17:90:9e:5e:c4:71:f1:18:af:f0:23:d2:72:bd:a4:
5a:af:7f:3f:cd:7b:52:70:b8:84:21:57:1b:fb:67:d9:a2:27:
b7:41:4b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:15:15 2025 by rpki-client