Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier: EktyORWdaY5Hz0lN1COcFzMYAyCPPSwUTNIutGgu35A=
Subject key identifier: 62:CB:AB:05:B0:6C:5A:9B:5E:C2:B3:96:20:BA:E8:B6:2D:D6:D4:D8
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 01962C05DA3896323941D6DF8880800BE485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number: 14E8
Signing time: Sat 12 Apr 2025 22:01:43 +0000
Manifest this update: Sat 12 Apr 2025 22:01:43 +0000
Manifest next update: Sun 13 Apr 2025 22:01:43 +0000
Files and hashes: 1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=)
2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: 5UNpQjmxzqKIxnlStDp+Za5WOirA9pq9fsm72jh/3CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:05:da:38:96:32:39:41:d6:df:88:80:80:0b:e4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Apr 12 22:01:43 2025 GMT
Not After : Apr 13 22:01:43 2025 GMT
Subject: CN=62cbab05b06c5a9b5ec2b39620bae8b62dd6d4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:c5:a1:f4:d6:0b:3e:48:39:e8:f5:8c:3b:
d9:3e:96:4b:7d:3e:b9:c2:f0:b8:e9:35:f4:8f:ca:
c3:c9:83:aa:20:b8:18:0c:18:d3:da:b5:84:1f:5a:
15:b5:72:30:2e:6b:3a:d5:fe:a6:f8:3d:15:92:77:
c7:c6:b8:c7:f5:f8:53:aa:a1:2f:01:32:69:9f:04:
2f:96:3a:77:4a:65:27:2b:41:7b:0d:bc:10:54:7e:
5f:66:9a:87:2d:3c:1e:dc:e9:45:58:b7:76:83:71:
ba:43:59:ae:03:aa:8b:36:b6:de:e4:af:11:02:93:
57:28:1a:c6:9d:2f:4c:40:2d:d4:38:e8:16:0a:18:
da:eb:a0:0d:13:fb:4e:c3:ac:40:2b:06:89:a3:7e:
46:20:fb:9e:83:54:e9:a0:b4:22:78:f1:68:29:4a:
5e:0c:3c:bc:08:15:ff:4c:71:2e:76:f0:86:f6:39:
74:22:c6:4e:24:36:6f:e8:cc:d0:a6:fd:94:bc:c7:
f3:fc:c5:e2:30:54:44:61:60:08:dc:05:4c:23:44:
d3:b2:6a:4c:95:ee:c6:3b:59:e9:e4:71:d3:dd:ba:
14:0a:9b:fd:3e:7f:41:6b:b3:c6:ab:47:3a:be:6d:
c6:33:ef:c1:16:e1:27:60:4b:d4:44:25:a2:41:1a:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CB:AB:05:B0:6C:5A:9B:5E:C2:B3:96:20:BA:E8:B6:2D:D6:D4:D8
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4e:3a:1e:60:1b:a5:b0:58:78:46:bd:18:bd:af:a8:3b:bb:
f7:28:a4:32:e6:d7:9e:d7:e3:d4:e1:5f:4c:01:73:06:58:bb:
9e:f7:c6:d9:18:88:9b:37:ec:12:2a:7e:80:68:f2:f1:a4:e1:
05:7e:25:88:ab:d8:db:e1:82:cf:bc:2d:ac:01:9e:bf:8b:2b:
c3:3d:62:d1:29:8f:db:76:71:d3:98:32:70:38:9c:7b:55:2a:
c9:ac:d6:ed:01:52:5d:7b:61:62:b7:07:64:e4:e3:02:9d:1a:
da:bd:c0:e2:fe:99:e6:95:4d:6f:9c:15:09:5d:12:1e:50:30:
ef:19:04:5b:cf:61:c7:94:5c:f0:a0:f1:55:66:49:61:6f:a8:
0f:06:8f:c8:a5:1b:aa:57:58:da:97:24:2c:e9:7c:75:4d:49:
fc:42:4d:cd:2d:54:6c:43:66:44:75:6a:a2:a8:c4:9b:0f:35:
ae:71:ad:5c:95:2e:fa:cb:91:25:e0:12:ca:29:1a:f7:40:9c:
1a:2d:b8:04:15:63:cc:a9:d6:72:4d:57:3d:c4:6a:fd:af:a2:
b4:24:c7:b5:fe:5a:96:7d:54:c7:9d:8a:4b:54:2e:18:62:f8:
80:33:ab:0c:6b:b1:66:bf:2b:e1:0e:be:7e:c4:60:56:94:11:
80:de:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:20:05 2025 by rpki-client