Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: 50HooXsMnbIlwrvYjSZtsUE5/w2wTwVhjxeMQGxuqCc=
Subject key identifier: BC:1D:10:0D:CC:19:8E:0E:66:A3:47:AF:65:DE:04:41:AE:43:CA:1F
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 019641E85E4E51B91431A946B071CF737D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 1038
Signing time: Thu 17 Apr 2025 04:01:09 +0000
Manifest this update: Thu 17 Apr 2025 04:01:09 +0000
Manifest next update: Fri 18 Apr 2025 04:01:09 +0000
Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=)
2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: Ti3YCJh36HaBO8aTPCWGUTHEIg81X3J6S1VVP0cJUcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:e8:5e:4e:51:b9:14:31:a9:46:b0:71:cf:73:7d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Apr 17 04:01:09 2025 GMT
Not After : Apr 18 04:01:09 2025 GMT
Subject: CN=bc1d100dcc198e0e66a347af65de0441ae43ca1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:1f:b0:bb:b9:89:e9:cd:f5:29:6e:d8:8a:
e0:7d:93:8d:7b:ff:73:4a:5b:a2:41:f1:7d:96:af:
a2:d7:35:a8:a0:f8:e5:ec:5b:52:d7:5f:05:9f:08:
f2:ce:93:48:13:16:83:57:f0:76:ae:3b:3a:98:99:
f0:1a:eb:73:ea:62:8a:2e:1e:6d:e4:84:1b:55:7d:
ae:f3:38:24:ed:8a:d9:99:29:17:67:bd:2b:c1:c6:
71:7c:fe:91:be:86:2c:7a:7e:14:d9:6c:e8:a8:d3:
ab:4c:b0:ab:e2:49:42:cd:27:18:70:da:d0:81:5a:
87:37:2c:56:77:fd:c5:41:b4:88:73:83:5b:05:30:
d7:e3:0f:44:ed:a5:cb:75:23:a7:78:d8:a8:1b:94:
3a:50:61:52:17:d7:a3:31:dd:c4:34:16:0c:39:25:
64:98:02:a2:9e:22:46:b1:f1:72:a3:1d:40:ee:90:
ff:f6:c4:1c:93:3f:28:3c:31:2c:de:f4:12:50:6b:
01:9a:1d:99:60:a7:23:7b:39:76:c7:3f:21:5b:0b:
f9:dc:db:79:d2:be:8c:12:27:84:9f:a5:c4:8d:95:
12:90:67:85:b2:4c:e2:0c:ff:75:1f:6f:fc:de:17:
ba:5d:5f:e3:f8:22:e1:04:af:79:b6:7f:62:58:f6:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1D:10:0D:CC:19:8E:0E:66:A3:47:AF:65:DE:04:41:AE:43:CA:1F
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:41:96:65:88:d2:66:f2:4d:f3:a8:49:87:d0:27:2b:9c:55:
6d:3b:e0:df:72:38:59:a0:3e:4a:da:5a:dd:95:9e:8a:fd:f9:
d2:74:d8:17:ae:16:28:5f:88:08:1a:52:31:90:8f:f4:16:fd:
38:24:57:e2:d8:fa:39:c8:3b:c6:af:ae:9c:2d:d6:3b:35:0d:
f5:3a:a6:19:ab:2d:8c:30:1b:bb:0b:7a:5a:27:3a:53:3e:79:
1b:fd:96:de:75:08:d0:0c:5e:99:15:db:30:10:45:6b:fe:44:
93:99:a8:7e:1c:79:8d:43:d2:83:09:d0:40:be:d3:aa:4c:bf:
3e:8c:2b:4a:2c:ce:3c:34:6d:ec:0a:56:56:4d:9a:e1:c8:a5:
69:cd:fb:88:c1:4b:89:3d:42:06:e5:e3:00:a2:8c:28:5a:26:
38:10:7c:a3:af:f9:a1:ab:e4:f5:b5:6e:de:93:d0:cb:f0:5d:
64:06:2a:83:7d:00:06:f7:1c:c4:d4:09:d7:e5:71:66:01:29:
02:ba:fb:ab:5a:e1:1e:01:82:34:ce:53:94:53:e4:49:74:bc:
0b:f4:c6:78:9e:1f:a0:44:ab:3f:1f:75:5e:b4:f9:be:7e:20:
2d:09:ae:64:c5:1e:29:c3:75:35:93:95:08:96:7d:9b:05:87:
44:46:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:24:07 2025 by rpki-client