Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File: dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier: kvFclVLFk2UJi2k0O6D/3Id8hCMILz6wqejgG3tUaAc=
Subject key identifier: 6C:C7:E0:A5:FB:1D:DD:E7:BF:52:90:F9:B0:7D:FD:BA:50:8B:01:28
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer: /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial: 01965537F09BA29509E8FEB481174D147D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number: 07FA
Signing time: Sun 20 Apr 2025 22:00:51 +0000
Manifest this update: Sun 20 Apr 2025 22:00:51 +0000
Manifest next update: Mon 21 Apr 2025 22:00:51 +0000
Files and hashes: 1: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: ljpzAel7hscCKMbEHPrP5iS1KC8ozDC+zoo3blrGs3Y=)
2: fckG1hreaQ8xP9aJJKEUiJVYbO4.roa (hash: H/fpzZgWfyhKP6Q91nDD52iN8W1nvip6ZLK/KybKJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:f0:9b:a2:95:09:e8:fe:b4:81:17:4d:14:7d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Validity
Not Before: Apr 20 22:00:51 2025 GMT
Not After : Apr 21 22:00:51 2025 GMT
Subject: CN=6cc7e0a5fb1ddde7bf5290f9b07dfdba508b0128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:71:ec:11:e5:fc:5b:af:8b:12:d6:8c:85:
f1:97:27:27:9a:78:eb:b4:b1:23:99:50:ac:fe:c0:
31:bb:95:2e:c5:17:de:86:3c:9f:39:b0:16:a1:32:
0b:e3:c8:ca:84:34:db:da:f7:6c:38:56:37:3a:05:
9d:d2:f4:42:b8:40:f6:2d:37:90:d2:c9:3c:b8:b8:
f5:2d:7f:70:70:09:48:30:a4:92:64:f8:8f:ee:22:
5b:e7:04:17:5c:cf:c7:51:e4:06:c0:33:fb:4d:90:
54:fa:c6:a7:30:8e:f4:10:1a:6a:d4:d8:b6:c5:be:
49:a2:00:8a:5d:64:77:cf:7a:1e:e2:27:b4:3d:3d:
63:9d:6c:b9:24:04:93:2d:1a:af:5c:62:3a:80:e1:
e3:a9:71:19:03:e1:47:a5:bf:e9:2d:83:02:87:56:
1f:d6:85:d6:b5:96:d7:d6:a4:78:03:98:34:e0:d5:
a9:f6:ae:b1:66:b5:2d:9c:aa:57:8d:1a:03:b6:74:
86:4c:bb:be:bb:ae:84:c1:31:db:ac:70:c4:62:b3:
c5:fc:73:c2:91:1d:9d:6d:0e:d9:b0:87:76:60:81:
93:26:8d:d4:ce:94:af:fa:bc:f1:bb:45:32:c6:3b:
8d:a7:3c:17:36:6a:d9:f9:7f:18:14:a1:3c:11:71:
cb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C7:E0:A5:FB:1D:DD:E7:BF:52:90:F9:B0:7D:FD:BA:50:8B:01:28
X509v3 Authority Key Identifier:
keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:36:ed:07:4a:fa:8f:2e:bf:47:0d:11:ed:2e:62:df:64:0e:
25:4c:5d:c1:a6:00:47:d3:24:88:b5:48:d3:1b:6d:cc:30:db:
2f:71:b8:0a:91:ed:f9:00:0c:45:06:bd:c5:8e:ec:fd:bb:82:
18:5c:db:c3:e2:6d:24:5f:82:73:e4:68:5b:56:1e:58:04:7a:
8e:9d:d0:82:f0:75:50:db:1c:ed:49:71:d9:73:63:73:5f:9c:
5c:9a:82:c0:19:94:47:0f:18:92:9d:ae:a0:18:3e:5b:f3:da:
4e:ec:1c:29:e4:91:51:27:73:d3:33:b4:d2:13:60:bf:19:b5:
bf:f0:06:72:25:59:57:19:dd:30:4c:af:38:ec:44:78:ef:7f:
fb:7e:02:cf:37:ae:73:87:ca:08:c6:84:29:6f:28:79:e4:04:
54:1f:02:0d:75:e2:44:0f:c1:11:d3:9b:3a:2c:41:2d:7d:eb:
38:b7:c0:61:27:a9:89:0d:49:c4:b0:cd:7a:2a:4a:8d:e2:31:
6c:0c:30:43:52:7b:34:3e:01:82:3b:fc:01:78:21:31:e6:05:
29:c6:3c:ba:05:2b:09:c5:32:2b:05:ca:d5:b7:07:b0:2f:0e:
e2:85:57:cc:38:be:48:5e:6b:f4:bf:a5:37:35:66:3a:94:86:
f1:8c:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:44 2025 by rpki-client