Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: oSI+78g7jeubSZjKuxQ1eM4Awt7fFj+6xTcmHUUFJPU=
Subject key identifier: 95:DB:7B:4F:40:4C:90:6F:BE:58:5D:EC:B6:55:B6:18:B4:BD:31:49
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 019654251B7A01FEACAF9A19AB3202444EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 11BF
Signing time: Sun 20 Apr 2025 17:00:40 +0000
Manifest this update: Sun 20 Apr 2025 17:00:40 +0000
Manifest next update: Mon 21 Apr 2025 17:00:40 +0000
Files and hashes: 1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: smf1FyEVVSXmo5nTiXURndcNiCzxdYr+3axkRdw+zzQ=)
2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:1b:7a:01:fe:ac:af:9a:19:ab:32:02:44:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Apr 20 17:00:40 2025 GMT
Not After : Apr 21 17:00:40 2025 GMT
Subject: CN=95db7b4f404c906fbe585decb655b618b4bd3149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:19:da:57:97:a7:5d:34:be:18:f4:47:1e:21:
ed:d7:87:fd:1b:24:79:69:77:9c:a5:1d:6d:43:b0:
8b:0f:ac:24:72:a8:39:eb:d1:4b:05:97:c9:35:d3:
56:42:82:9b:3c:f1:ee:d3:3a:94:e0:ec:e6:aa:ec:
6b:9e:b1:f9:5e:10:87:24:bd:53:34:ba:40:1a:9e:
3f:83:c0:40:ef:94:2c:09:e0:22:92:1e:54:7d:71:
6a:93:6d:76:97:b1:f0:6d:ca:9f:46:df:94:0d:da:
52:93:93:ca:f1:95:24:6f:50:48:c5:02:0a:87:23:
0c:59:d6:5a:70:5b:2d:ae:b2:12:87:8b:b9:3e:13:
8c:71:90:de:fb:bf:d1:db:d3:c6:8a:9b:c0:fa:78:
a5:3e:56:5b:47:c3:18:f7:44:c0:a7:a1:49:b1:0b:
c2:2b:98:a1:fd:38:d7:e7:ce:fa:8b:ff:7b:ef:b7:
00:52:23:3c:2a:10:39:3c:2c:3a:b4:cf:b3:35:7b:
20:cb:28:07:a5:84:e3:47:a4:bc:dd:76:32:89:f6:
60:b4:05:2f:41:7c:8b:43:76:16:76:d4:4c:a4:9e:
94:85:dd:9d:65:41:f4:ac:d4:10:09:19:c4:bc:9b:
5a:18:c0:45:05:fd:cb:11:e5:71:7a:34:54:dc:c0:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DB:7B:4F:40:4C:90:6F:BE:58:5D:EC:B6:55:B6:18:B4:BD:31:49
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0e:55:7e:ab:a8:34:43:9c:84:48:3e:dc:6b:a7:ad:44:4b:
4b:33:34:84:c4:c1:46:e8:c8:a7:e9:d4:c7:04:e1:1c:06:0c:
2f:8b:a8:8c:ab:3a:54:af:37:43:26:26:2d:d4:fd:37:6f:a3:
5e:5f:e6:f3:75:8b:f3:ac:b0:73:fa:69:c8:2c:52:2a:a7:d5:
93:db:da:5f:cc:83:5c:a2:ba:fd:f7:ba:f8:c4:06:19:2f:62:
d4:ae:88:7c:58:25:3c:f5:43:a0:08:04:cb:06:e0:24:89:f8:
e9:f0:32:fd:8f:4b:89:6d:1e:30:94:0c:b4:b8:ee:57:1e:39:
5b:08:b9:6f:33:f8:e5:6c:c2:f0:f2:c4:e7:bb:5a:72:4c:12:
7d:5c:dd:66:d7:d6:b1:fc:99:e9:64:e7:54:18:9d:45:e7:f6:
0a:8c:41:18:af:ee:a5:5a:cd:35:e8:2c:60:4b:01:37:32:2c:
35:6d:20:92:f4:b4:2a:3a:48:3e:61:34:d9:cf:d2:fd:b2:a0:
6e:50:65:2c:14:a1:81:df:df:66:9c:5b:21:b2:b5:e7:1f:23:
ec:f4:08:06:87:9b:c9:e8:a3:ce:21:58:a1:27:4d:e8:c8:e9:
d2:5f:a7:54:eb:54:5a:23:da:c4:c5:61:13:38:9d:70:30:90:
6d:e6:9a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:01:28 2025 by rpki-client