Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: R8y9TjOPplaQ+rP7btBZMw1QEBFRShrTwHv82jrZlWs=
Subject key identifier: A6:89:DF:54:BF:48:81:47:95:C3:FE:FF:BD:E1:7A:BE:F5:CB:E9:67
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 0196447AEFD9269ECC75B34880761F04AAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 0F8C
Signing time: Thu 17 Apr 2025 16:00:29 +0000
Manifest this update: Thu 17 Apr 2025 16:00:29 +0000
Manifest next update: Fri 18 Apr 2025 16:00:29 +0000
Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=)
2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: 3CQG6DrAF0JW2KnAWFmzylvHV+E0JN0IRz3kkFeQI/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7a:ef:d9:26:9e:cc:75:b3:48:80:76:1f:04:aa:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Apr 17 16:00:29 2025 GMT
Not After : Apr 18 16:00:29 2025 GMT
Subject: CN=a689df54bf48814795c3feffbde17abef5cbe967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:10:23:09:a2:4e:45:17:04:39:87:d1:18:
66:f5:45:ba:6f:56:ab:3b:e4:98:c9:61:7d:76:2e:
ac:51:dc:22:48:e3:94:a6:4b:0e:5e:2d:b5:00:25:
8e:00:28:da:98:90:92:d1:de:7d:55:e4:50:8f:dd:
00:7d:9c:f2:c3:21:76:f9:a9:a0:ae:b9:4e:82:2f:
dd:63:6a:89:0c:00:a8:27:5f:a7:31:5e:10:5d:e1:
46:bf:81:b2:48:eb:9c:bf:a0:0f:a1:9a:33:a1:b8:
1b:ed:8d:96:f3:71:97:fe:8b:bc:66:c0:db:4b:4d:
39:86:88:84:08:3b:60:29:da:36:53:f2:32:1b:c8:
15:9c:74:51:2a:65:c8:06:f0:fd:12:75:9d:2a:22:
df:c5:97:cc:62:1f:ce:82:ae:19:34:83:74:88:0b:
b9:e3:cd:d7:2d:af:a8:6e:69:83:6c:43:6b:ec:7e:
5f:dd:18:25:7f:bb:29:b7:f4:ba:0c:4b:f4:15:1e:
a8:d2:25:ea:9f:23:60:18:91:85:87:d1:c0:c8:e0:
48:84:ad:48:5d:6b:71:c1:94:c4:bb:49:c0:78:ab:
ce:3f:28:57:99:9d:99:a8:d0:14:57:43:13:9d:11:
04:b3:d8:d2:60:b2:4a:80:2c:b8:3f:eb:36:e1:46:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:89:DF:54:BF:48:81:47:95:C3:FE:FF:BD:E1:7A:BE:F5:CB:E9:67
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a9:5a:c2:36:73:cc:2d:69:27:00:ae:2a:5f:61:a9:3a:e7:
78:e3:49:12:cd:4b:a9:d3:7b:61:ae:29:93:51:a9:f5:d8:46:
b1:56:67:5a:95:88:a7:b4:6a:7d:5a:aa:1c:9f:f0:d2:aa:20:
e3:9f:48:dd:bc:cf:0d:94:7b:92:96:79:d9:63:03:4c:8e:9a:
5f:c6:ef:2e:57:49:d5:0e:3b:80:7a:97:c8:a3:67:3c:d8:a9:
f7:e5:00:50:1c:73:29:19:ce:ae:1c:f9:28:06:cf:a6:e5:45:
0c:d0:9d:8b:32:2e:21:ac:65:03:05:de:b1:0f:93:a6:1c:65:
ab:67:fc:26:7a:b6:2a:c1:5d:a7:6e:05:cc:c6:8b:98:45:2e:
36:90:67:ac:a0:54:d9:c7:c6:68:b7:4b:84:5f:a8:4f:cd:d7:
b0:53:c1:e3:19:3a:79:7c:92:b2:a1:43:10:39:e0:b0:d8:06:
a4:d1:a3:9d:21:43:13:5d:84:f0:2b:eb:0c:28:6b:40:6b:3e:
f5:ac:86:8e:f4:01:65:88:08:ec:cb:3a:e2:da:fd:8c:c0:dc:
c6:8c:c8:48:f9:7e:83:1e:0f:fb:0f:07:96:e4:fd:79:fc:d8:
87:c2:62:8e:f7:fd:51:b5:ad:e0:4d:41:c2:46:a0:10:b1:8a:
0d:da:6b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:20 2025 by rpki-client