Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: W2+s0XVvkn4bvWZ4fSapLlLr9criZYTVuRWBV8tDuYo=
Subject key identifier: 3F:4A:64:C4:75:CC:7E:CE:3C:64:19:35:81:36:BF:09:1F:4F:90:8F
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 01958C600A608F07F69ADB22EB518AE12DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 0FDA
Signing time: Wed 12 Mar 2025 22:00:58 +0000
Manifest this update: Wed 12 Mar 2025 22:00:58 +0000
Manifest next update: Thu 13 Mar 2025 22:00:58 +0000
Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=)
2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: vMLKi6sGqjjMkOvfDdirOrym3grpikMcd99333C3yTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:0a:60:8f:07:f6:9a:db:22:eb:51:8a:e1:2d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Mar 12 22:00:58 2025 GMT
Not After : Mar 13 22:00:58 2025 GMT
Subject: CN=3f4a64c475cc7ece3c6419358136bf091f4f908f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cd:4c:f6:20:59:55:b2:aa:96:06:04:69:8e:
c9:54:0a:00:00:ce:9c:6f:dc:44:c7:86:de:13:e8:
f8:bb:11:96:7d:ce:67:39:b2:ba:ad:6e:91:d9:26:
fc:cc:c8:f7:69:0a:d3:3e:27:7f:63:9f:1d:7d:29:
64:c6:bb:56:5c:26:c4:82:43:51:ba:4e:6c:3d:4a:
86:96:b3:9f:89:12:7a:ee:8c:b4:bf:17:41:91:6f:
5c:d5:e6:81:dc:6e:58:a7:ee:94:98:6f:35:df:50:
0e:be:bb:48:c3:f7:a5:33:be:0c:86:d8:4d:57:71:
cc:1c:50:dd:c4:69:61:8d:6b:fa:e7:29:11:d3:d8:
00:7f:85:50:0a:90:89:a1:28:57:aa:cb:e2:01:ad:
76:49:77:fb:97:81:83:b2:7f:2a:6f:61:1e:c4:c0:
c1:41:01:1d:a8:5e:0a:dd:71:18:fc:66:5d:ce:d7:
a1:1e:fd:76:76:82:00:1a:9b:65:f8:80:5c:dd:ec:
b2:44:51:7f:ff:b3:b1:5d:40:61:5f:b3:7d:16:c1:
04:f2:f7:f2:4c:45:68:20:e2:93:9e:ff:97:b7:8a:
18:2a:fd:60:61:b1:95:3e:e5:ac:19:6f:8b:64:7f:
fb:04:65:f3:39:a4:53:3f:45:b4:89:94:81:d7:5f:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4A:64:C4:75:CC:7E:CE:3C:64:19:35:81:36:BF:09:1F:4F:90:8F
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9a:9a:e1:2d:6e:88:cd:88:da:48:8a:6a:17:63:39:b3:38:
8e:19:df:c8:fb:84:96:8c:0b:72:1f:07:6b:1d:3b:6c:c0:70:
ef:76:76:f4:37:50:04:58:48:9f:bd:21:89:75:2d:5b:14:f1:
a5:50:8a:29:1f:15:b4:08:4e:a3:e3:f4:09:94:bc:60:6c:6b:
3b:8c:21:80:9a:6f:bf:75:fc:23:30:d0:bd:50:f7:36:02:0e:
76:3b:17:5f:c8:ce:62:ad:18:30:3e:3f:00:c4:5a:03:98:ec:
2e:97:bc:5b:78:b6:39:b7:4c:b0:06:f7:9e:39:e9:33:18:31:
62:fc:ac:43:42:a1:48:32:58:ef:09:0f:c3:41:36:81:c0:f2:
a3:14:9f:94:22:2a:56:bf:67:e7:b1:11:02:df:e7:74:93:8e:
73:69:40:e9:bb:70:70:ed:64:ec:26:06:b2:80:94:4f:13:d1:
72:a7:2b:56:f6:6f:68:47:fa:bd:44:cd:80:fd:76:bd:aa:96:
ec:25:62:be:7f:d8:08:8a:30:1e:88:7f:7d:4e:5f:59:5d:c4:
02:18:f0:d3:82:7d:a7:fa:f4:72:8a:a9:0c:c9:5f:80:6e:e4:
7c:ed:00:c1:3e:9b:f6:e0:d6:1d:0d:e1:37:8b:e6:79:ab:59:
6e:1a:ce:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:30 2025 by rpki-client