Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: ME4m9YOknyVAg5qSygt9fC8MMB6cAd1VFiSqmT4XyE4=
Subject key identifier: D4:4A:54:89:0A:62:56:C4:70:23:A2:1D:2A:F7:BA:7B:06:A7:FC:B9
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 01963FC27EF5F30B12193B6A5DC55028AA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 0946
Signing time: Wed 16 Apr 2025 18:00:33 +0000
Manifest this update: Wed 16 Apr 2025 18:00:33 +0000
Manifest next update: Thu 17 Apr 2025 18:00:33 +0000
Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: iw5g5pi2qV9cSK4xO1lA9WycveWJCeYjsYqhHV1MRag=)
2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:7e:f5:f3:0b:12:19:3b:6a:5d:c5:50:28:aa:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Apr 16 18:00:33 2025 GMT
Not After : Apr 17 18:00:33 2025 GMT
Subject: CN=d44a54890a6256c47023a21d2af7ba7b06a7fcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:37:05:7d:c0:1d:15:d7:25:43:77:a2:80:
65:41:cf:b2:2b:8d:dc:7e:0a:5a:71:e3:7a:ac:68:
bb:4d:18:e5:6a:10:9a:56:db:fa:9d:6f:31:2d:99:
a5:f5:32:92:18:c9:ed:97:18:03:77:24:77:34:5c:
39:d6:00:8f:8d:76:00:6b:b8:17:a1:f3:80:b3:13:
ee:18:17:a1:00:fd:b3:98:5a:36:70:a7:92:93:24:
8c:b7:0c:8d:00:7b:21:4f:5d:00:01:b5:35:1e:c5:
47:8a:92:b7:6c:cf:d5:bb:b3:d0:5c:95:0e:15:e4:
01:77:85:18:72:a8:e6:e0:17:fb:f7:3c:6d:2c:b7:
3e:aa:cf:7c:ad:4b:c0:44:78:c4:05:1f:c1:f6:e8:
f3:9f:aa:7f:84:4f:09:bb:b9:e2:22:45:b6:6b:e0:
e0:f2:50:4c:43:8a:e9:c1:3a:aa:3b:94:d5:6b:15:
a2:eb:d4:50:e1:8f:ff:d9:97:87:84:89:0e:95:b9:
32:44:cc:3d:0b:50:32:96:68:8a:16:5e:c6:15:a1:
c8:31:98:6a:ba:bf:76:80:d5:5e:87:f7:75:0e:72:
ca:19:ab:64:d3:e9:bc:b0:1c:a3:45:2d:5e:af:91:
e0:54:07:d5:2c:f1:e8:9a:7c:d9:75:39:01:5a:b1:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:54:89:0A:62:56:C4:70:23:A2:1D:2A:F7:BA:7B:06:A7:FC:B9
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:13:69:77:d8:b8:6b:d7:23:07:71:4f:b7:b9:68:60:f6:26:
9b:8f:4c:da:f3:bc:0a:95:50:c3:85:bc:0b:9f:f6:47:b4:0d:
c4:dc:65:97:75:d9:30:44:fc:b4:3f:2a:98:6c:96:c6:df:f3:
f0:db:5c:b4:c6:01:e5:8c:fa:7d:98:a0:82:a0:4e:fb:a9:a9:
0f:00:ba:18:1b:57:98:89:47:59:34:9a:b8:85:83:83:13:1e:
a1:28:9c:1a:78:a4:c7:bc:27:e8:29:21:42:ff:7c:1c:48:46:
c5:06:30:a1:71:c2:f6:72:fe:d9:bb:b6:d3:76:dd:54:6f:70:
79:ce:b5:ad:53:21:0a:b9:5f:ba:e7:f2:8b:17:09:75:fc:ed:
e5:33:31:3d:02:f0:c4:92:66:0f:38:a0:20:cf:22:3f:2a:19:
c3:d9:10:fd:28:df:c4:93:c9:ef:7f:ec:c6:68:6b:0a:e0:aa:
63:7c:6d:40:4b:10:ad:86:0c:7c:43:fd:d7:39:1d:b5:5c:b5:
1b:e9:c2:7b:c9:77:a6:b8:3e:28:38:43:09:2e:d1:42:1b:9a:
58:9e:e1:fb:fc:82:47:2a:e4:ad:c8:4e:13:12:3f:b6:18:6a:
02:5f:69:95:66:d0:97:59:4f:83:86:7e:66:72:57:fd:33:47:
0c:25:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:08:52 2025 by rpki-client