Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
File: 1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft (raw, json)
Hash identifier: e44fu83kv4p/AjuutSmp8gVy2NojmBxiOAvyX6yRbic=
Subject key identifier: 2D:B7:A7:5F:B2:4F:42:19:42:59:27:6B:18:9C:7C:44:83:CB:7E:1B
Authority key identifier: F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
Certificate issuer: /CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
Certificate serial: 01963AD30F0E41DB6E5ED6C1E0D039C28B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
Manifest number: 101D
Signing time: Tue 15 Apr 2025 19:00:32 +0000
Manifest this update: Tue 15 Apr 2025 19:00:32 +0000
Manifest next update: Wed 16 Apr 2025 19:00:32 +0000
Files and hashes: 1: 1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl (hash: 54KTFILnp1dUqrX1Be/VexFawWTOkR7lIIxVM7VXtE4=)
2: 7AjGLQsJj7KXSqBNNqiLp45yitU.roa (hash: z05Ju9vFqoh0JjoPd8SpAqwh3plkGnHfuFRv3k0ibgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:d3:0f:0e:41:db:6e:5e:d6:c1:e0:d0:39:c2:8b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
Validity
Not Before: Apr 15 19:00:32 2025 GMT
Not After : Apr 16 19:00:32 2025 GMT
Subject: CN=2db7a75fb24f42194259276b189c7c4483cb7e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:87:73:17:d4:4a:07:6e:3b:90:f3:f1:d0:
e1:39:01:b4:3a:95:1f:86:c8:23:79:7e:13:93:37:
0a:ab:77:18:63:08:ad:80:31:98:77:36:03:cf:8b:
2c:91:fd:c5:e9:7a:91:b7:fa:89:12:ac:d5:70:c4:
1b:57:3f:18:d3:3f:4d:fd:37:7e:fd:e7:cd:da:61:
87:05:04:e7:56:a5:54:2c:d7:34:c5:d8:f6:c2:1a:
d7:66:f9:11:84:e4:4c:a0:72:a2:2b:6f:ce:f6:44:
11:fb:ca:ee:4c:a8:51:08:70:83:c6:7c:d3:96:74:
00:22:e6:4f:e6:b7:63:5a:bc:59:e7:b1:ee:c6:53:
9b:29:54:84:de:5e:b9:15:2c:ce:25:4c:89:fb:40:
4c:7b:86:a4:29:34:2b:0c:46:0b:20:4d:bd:96:94:
96:73:21:9c:55:22:3e:d2:53:5f:41:1b:89:6e:9e:
ff:51:97:d1:38:61:75:f8:f7:82:87:82:49:90:0d:
33:24:6f:96:8c:83:9e:f4:b3:e2:72:f7:02:08:47:
b6:a2:d9:e9:fd:38:32:bb:39:8f:7f:47:bf:4d:8a:
14:56:6b:de:6b:f4:2b:da:b8:dd:95:da:59:9a:07:
a1:2e:1a:b3:8b:f0:f1:0b:1b:08:77:0e:60:48:00:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B7:A7:5F:B2:4F:42:19:42:59:27:6B:18:9C:7C:44:83:CB:7E:1B
X509v3 Authority Key Identifier:
keyid:F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6c:0c:dd:58:d1:78:1c:57:96:8f:66:7e:d7:b3:c1:d6:5c:
44:31:d3:5d:46:23:b6:be:fb:c7:21:eb:7c:17:53:a6:cf:cb:
25:84:9d:5d:6b:d5:a1:3c:82:91:a4:99:99:fa:63:1f:b5:a1:
97:2c:be:ec:7f:9e:76:cc:f9:1c:f8:ca:68:ea:0d:22:2d:f3:
34:fe:39:3d:96:8d:8b:be:f9:69:09:5e:fe:e2:87:ff:41:f5:
ae:46:e8:4b:11:d3:26:2c:12:da:8f:e6:1c:50:3c:17:94:35:
86:15:fd:9d:78:e0:3c:13:6e:31:b4:b5:39:af:fb:64:9d:c0:
ab:32:4b:a4:56:ff:e9:b3:bc:c6:dd:35:a5:11:e8:07:f8:bd:
5e:43:96:57:78:ac:3e:f6:4c:b0:2e:47:dc:b5:2c:ee:c1:5b:
7e:f9:98:56:43:3d:f6:f0:33:74:df:e7:0a:c0:0d:ec:54:43:
77:3a:bd:23:0a:60:58:a5:f5:b2:61:f3:9a:60:53:31:77:73:
94:e8:48:ce:e4:4b:4b:7b:81:fb:56:7d:93:a6:b0:96:47:c9:
76:4b:44:13:fa:fc:fe:c1:0c:8c:84:d5:54:10:e3:36:6f:9f:
04:34:4f:0a:5e:53:f5:94:ec:ae:62:6c:f4:26:03:5c:84:08:
03:71:00:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:07:40 2025 by rpki-client