Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
File: A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json)
Hash identifier: tddhxvEcsJ6d68fBpuXF9zEs84t6Iu3Jqwd9xeZOpFg=
Subject key identifier: 88:67:99:C4:EF:5E:47:80:4C:35:FA:F6:D2:EE:EB:FA:FE:2B:31:E9
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 01965C1590E376CC058083D1F5316A4F8E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
Manifest number: 1067
Signing time: Tue 22 Apr 2025 06:00:39 +0000
Manifest this update: Tue 22 Apr 2025 06:00:39 +0000
Manifest next update: Wed 23 Apr 2025 06:00:39 +0000
Files and hashes: 1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: GUD/o50N1pgTdVFXRVU7qpEdymPV8+WgCqxwEqbKBGA=)
2: e11Y1BzeTv89ORv01AAdP5K30II.roa (hash: N7EMAlCoADAa7ySQW7940rPsHLZnRpbv9iF4uLAj9Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:90:e3:76:cc:05:80:83:d1:f5:31:6a:4f:8e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: Apr 22 06:00:39 2025 GMT
Not After : Apr 23 06:00:39 2025 GMT
Subject: CN=886799c4ef5e47804c35faf6d2eeebfafe2b31e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:a0:09:df:c6:f2:16:20:1b:64:02:24:c1:
7b:59:a5:39:03:0f:94:54:72:13:7a:8a:bc:a3:93:
11:c0:05:b0:4f:b4:30:2e:54:77:b2:b4:fa:34:ef:
67:1e:7d:65:54:b9:a4:7a:43:83:ca:b0:97:21:d4:
01:7c:53:99:8b:84:11:4b:91:4b:09:8a:67:28:9d:
75:be:d9:9e:18:53:da:05:8d:be:01:a4:b4:6f:53:
3f:8b:86:37:54:7e:8a:03:dc:dc:b5:5b:30:f0:da:
d1:7d:c1:bc:0f:e1:af:31:e7:96:37:dd:6d:37:d5:
20:7c:3e:11:4a:e3:b8:51:64:f9:bf:ad:d0:02:b9:
ee:92:c1:b3:2a:1d:4d:d2:b9:ff:04:9d:40:fc:a1:
10:39:79:3a:83:bb:07:8e:1d:af:a3:e2:57:a2:f3:
ce:07:c5:ba:d8:f6:4a:9b:ba:83:5c:6c:aa:67:8f:
16:00:c7:6e:35:6b:1a:87:c2:7d:72:c3:a6:f5:57:
1d:a9:4d:20:46:2a:d3:26:37:26:28:ab:c8:82:31:
d5:4e:f6:41:42:01:81:4a:54:6d:d3:4f:69:a7:f5:
3a:8d:ab:81:1d:d8:f8:b7:39:15:43:f9:07:ec:14:
56:0a:74:a3:19:87:e1:ce:af:c7:b0:5e:71:1e:02:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:99:C4:EF:5E:47:80:4C:35:FA:F6:D2:EE:EB:FA:FE:2B:31:E9
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ed:56:a1:a2:d1:72:5b:34:4e:38:06:c6:63:e5:85:f6:be:
09:e7:40:14:26:a1:a2:71:24:0d:93:2a:7a:01:69:f0:e0:ab:
8a:3d:2c:5c:7e:1e:2b:01:69:be:be:35:e1:8b:09:93:05:eb:
43:35:9a:4b:8d:65:20:93:e9:7f:17:04:b0:ec:39:97:83:dc:
41:56:6d:5a:4b:e5:65:92:a3:8e:7b:c3:93:97:95:e2:db:63:
63:b9:34:8c:73:fb:e8:8f:cc:64:d3:7a:c1:c5:1d:73:2e:23:
6e:17:71:dc:43:e9:3c:fa:a9:04:ed:1d:23:fd:70:f8:1a:46:
c4:be:14:47:43:3a:38:35:e5:d0:6c:40:92:d0:d1:8b:dc:eb:
f5:0f:b4:4d:8e:17:ec:0c:5a:37:a5:42:07:4b:b1:d3:28:29:
39:2a:9c:a8:b0:4f:b9:1e:b9:24:0e:30:2d:17:2a:a3:15:05:
90:f8:00:9e:52:f7:4c:7e:89:38:d0:09:68:4c:1b:64:29:8c:
86:7d:53:b5:21:41:8e:2e:94:04:3e:cb:8e:be:3f:ac:6f:66:
88:2f:31:47:51:7e:87:3c:b6:b4:2a:30:01:77:a0:bc:8a:e8:
9a:e0:f7:ae:a8:24:a6:03:93:25:f3:08:10:19:12:71:2d:37:
d1:e2:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:34:43 2025 by rpki-client