Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: us8QTdftH+TBFtSFCU6c8iJ6uFS0nXfBrfFSD92lIKQ=
Subject key identifier: E0:B1:65:21:F2:81:12:C2:FB:38:4F:28:B3:A7:42:EF:E0:AC:61:BB
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 0196507F1E4A6FF3F0B59A661B13D2E9CAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0949
Signing time: Sun 20 Apr 2025 00:00:30 +0000
Manifest this update: Sun 20 Apr 2025 00:00:30 +0000
Manifest next update: Mon 21 Apr 2025 00:00:30 +0000
Files and hashes: 1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=)
2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: 9Xvc9wrFIZYs9xwMoCEL2fF398+OQQMXNBOSLiWJ7XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:1e:4a:6f:f3:f0:b5:9a:66:1b:13:d2:e9:ca:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Apr 20 00:00:30 2025 GMT
Not After : Apr 21 00:00:30 2025 GMT
Subject: CN=e0b16521f28112c2fb384f28b3a742efe0ac61bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:82:33:0d:6f:2e:1d:e5:21:57:ec:81:d1:
8c:c7:07:7e:fb:49:35:f1:82:e5:8c:62:e8:17:f3:
c7:71:18:69:98:48:7a:55:83:00:8d:be:77:3c:5e:
cb:e7:10:88:63:06:4f:26:e1:c0:7d:53:47:f2:97:
0b:89:f2:52:2b:e6:79:4e:f3:7e:ba:be:41:53:53:
7c:81:f9:11:62:36:ab:cd:fd:7e:00:05:a7:a8:d6:
da:e3:c7:71:c9:86:72:3e:8c:3c:49:cc:42:7c:0e:
61:ce:1e:0c:db:a2:40:5f:da:40:48:68:20:c8:8e:
36:76:04:d0:63:93:30:88:2d:07:ed:ef:7e:11:e5:
d3:62:8a:3b:8c:6a:4c:32:22:12:3c:9e:9b:3c:6a:
35:d7:d1:dd:cc:ae:75:da:7b:38:b7:3a:3b:bb:e8:
9f:d8:fd:ae:9b:cf:0b:43:da:54:48:30:6d:2a:4f:
bd:b6:a0:35:68:3b:2f:55:05:65:71:9b:7f:fe:e4:
2d:bb:0d:08:47:42:4e:95:3f:dd:21:73:63:5b:9f:
fb:1d:68:6c:4c:7e:f5:ce:9d:95:81:90:02:29:a3:
64:59:64:51:1c:c0:96:98:59:57:8d:2c:1e:05:6b:
bc:e3:90:d5:8c:04:45:c3:35:0f:d8:47:68:b7:c3:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B1:65:21:F2:81:12:C2:FB:38:4F:28:B3:A7:42:EF:E0:AC:61:BB
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:eb:2a:ca:e7:45:c0:a2:7b:23:db:59:b9:4d:08:9d:b2:3d:
6d:b9:4d:c7:6f:30:6f:ea:2d:4c:98:a2:a3:73:2a:ff:b1:4b:
c5:f7:d1:d4:ce:4f:a7:c2:b8:25:9f:8b:b6:94:b5:bb:9d:58:
6b:3f:5a:ca:0b:93:b2:ac:d4:75:fc:14:f6:53:83:51:0d:71:
7d:8f:9c:6b:e6:bb:a7:0c:99:24:ce:86:dc:80:db:86:4f:b8:
c8:7f:4d:41:65:6c:63:f5:53:d0:c4:8e:d9:9c:eb:7c:84:f4:
6e:1a:87:3e:11:74:aa:3e:bb:65:fb:dc:42:71:cb:79:92:db:
d8:df:86:ec:cf:ef:a1:bc:48:2c:f1:94:05:11:e6:a3:4b:cb:
b0:7a:33:e9:aa:53:b8:89:23:f6:df:c0:36:a0:ad:b0:30:a6:
32:a1:56:37:6b:f7:28:e4:b2:b4:8b:e8:c1:88:03:2b:bc:62:
92:8b:f8:71:55:6c:35:92:96:22:ed:6f:48:4b:be:f2:cc:d2:
28:12:50:2c:3b:9a:02:75:be:d5:ab:b3:ec:cd:6a:91:69:55:
fa:9c:0a:48:71:e4:e5:44:15:14:2d:f7:5b:b4:d8:fc:31:ec:
ef:eb:b4:4f:f9:bd:aa:19:59:65:45:9a:7c:a2:49:6f:d2:43:
ed:0d:ec:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:37 2025 by rpki-client