Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: Tb13AFXiz9HeV2nJV4S++JBBMMvkJ68Si9iSD7E2aJI=
Subject key identifier: 94:D4:89:5A:70:11:08:0F:DA:EB:96:88:BA:B1:29:EF:30:26:D9:01
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 01964444425FB626C287D8C000DB3A8F52FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 1233
Signing time: Thu 17 Apr 2025 15:00:46 +0000
Manifest this update: Thu 17 Apr 2025 15:00:46 +0000
Manifest next update: Fri 18 Apr 2025 15:00:46 +0000
Files and hashes: 1: 1-NNWhK-5UZlX86GIvBS3F5KFXGM.roa (hash: ZnHYmG2JFMVQIt7lMjIb53DbqPPrkNie9D30hGqcWLQ=)
2: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: 8W4+TcasjZCIMKNRWLFflZQnx+D88vOkJDHN2LsUwzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:42:5f:b6:26:c2:87:d8:c0:00:db:3a:8f:52:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Apr 17 15:00:46 2025 GMT
Not After : Apr 18 15:00:46 2025 GMT
Subject: CN=94d4895a7011080fdaeb9688bab129ef3026d901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:a4:ad:8f:14:99:57:d0:6b:bf:ba:57:4a:
f8:dc:b0:db:c7:67:f2:53:a4:cb:b4:6c:de:d7:90:
34:32:02:96:bd:d4:77:91:a5:fb:02:2e:97:b2:7e:
e5:35:f4:56:02:b8:ac:7a:87:6a:9c:a5:c3:c5:0a:
8c:a8:e5:17:b9:c0:c7:92:30:30:cd:84:9b:b1:17:
71:96:36:96:41:85:45:d5:52:db:9a:96:4b:7c:b6:
4a:96:18:24:74:ae:73:44:7d:90:7e:0f:4e:d5:02:
8c:a5:f1:75:27:65:3e:e3:7f:03:0a:0b:79:2d:c6:
ca:51:88:bb:b1:7c:27:fb:4e:cf:e6:97:82:e4:dd:
c9:c4:81:f1:5c:f2:24:cb:58:c6:43:92:4c:0e:96:
7e:1e:3c:2b:a0:eb:e0:9c:83:a6:ce:04:dd:45:1d:
0b:1f:94:10:5a:41:6b:64:fd:a3:0f:c8:dd:69:6f:
ab:08:95:c7:e8:59:22:97:33:54:6f:b4:f7:39:9e:
5a:8c:e2:16:5e:96:df:df:40:ca:f1:3d:cf:05:0b:
25:13:8d:55:18:9e:fa:53:24:64:09:72:d5:2d:6a:
e8:10:e6:66:ae:ce:68:60:f2:bb:79:8e:d1:4c:44:
01:c2:b8:dd:5c:a1:17:53:ec:36:1f:0b:47:22:9f:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D4:89:5A:70:11:08:0F:DA:EB:96:88:BA:B1:29:EF:30:26:D9:01
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4d:92:b7:ac:da:e7:95:fb:87:ef:fb:8c:fb:30:0c:de:1a:
38:46:74:f8:46:56:c7:4a:98:18:71:ec:c8:36:c8:7f:de:dd:
e4:8c:89:6f:eb:dc:ca:02:61:a7:36:23:eb:bb:41:6b:0a:f5:
21:66:79:05:9c:00:2f:e4:40:bf:4d:4e:b7:95:91:d8:1a:12:
17:3c:bf:b4:d2:8b:ba:43:8d:30:49:fd:58:42:c1:7c:c9:54:
6b:5d:61:87:da:d6:f4:d0:77:01:ea:31:3c:dc:fc:4c:19:da:
80:a3:a2:16:b4:0c:ca:9a:1e:1f:cc:bd:4d:30:c7:84:1c:b9:
e7:95:fb:25:f8:62:23:4b:f8:af:29:f5:ac:2e:56:1b:ba:b9:
d5:55:1d:5c:05:b1:6d:48:8c:c4:60:38:0a:c1:99:21:46:3b:
82:80:26:98:77:cf:5e:61:f8:da:77:48:3e:96:00:d8:2e:ed:
7d:55:cf:61:71:f9:ee:ec:de:4e:ba:8f:ac:83:23:2d:ee:c3:
b8:88:b4:37:cc:2b:f5:20:14:24:8b:43:ba:f8:12:57:51:71:
58:36:99:ee:a8:ab:eb:37:23:90:b0:4c:45:b6:68:bc:2c:5c:
7f:87:e2:5e:82:d6:ac:a8:6a:a7:d0:50:f0:10:07:7c:78:e2:
d7:a1:bb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:35:31 2025 by rpki-client