Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier: pfsIDUIogGlWp0RWSM7LNayOHANWIwRM2bd8LHbryo8=
Subject key identifier: A3:C0:77:F3:70:0A:D9:4C:55:2C:51:D7:73:F6:87:B3:08:6D:DF:30
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer: /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial: 019651C92AABA98AEF92E67473197EA51E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 06:01:00 +0000
Manifest this update: Sun 20 Apr 2025 06:01:00 +0000
Manifest next update: Mon 21 Apr 2025 06:01:00 +0000
Files and hashes: 1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: DURv3ruwXCkl9t6fn3FSIK/6orzia4oA3A2yN+BIDn8=)
2: sndMGN9hrwytu8M86g8e17_E-wk.roa (hash: 5lmWBoAQNAypsv2KN0NMYJT+hXVE7BGT1N8Z8n2QPIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:2a:ab:a9:8a:ef:92:e6:74:73:19:7e:a5:1e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Validity
Not Before: Apr 20 06:01:00 2025 GMT
Not After : Apr 21 06:01:00 2025 GMT
Subject: CN=a3c077f3700ad94c552c51d773f687b3086ddf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:e7:6e:01:f6:c0:04:ae:a7:d0:f9:d3:2c:
72:c2:4c:5e:02:5b:72:2f:4c:50:4b:9b:15:0c:f7:
5e:21:be:55:82:bc:8d:c3:7f:b0:3f:d8:85:68:fa:
bb:88:e6:cd:4d:73:05:18:44:ed:82:0d:e1:c8:39:
cb:b2:d9:59:25:81:e5:2d:85:28:b5:d0:bf:d2:dd:
d7:97:e1:0d:9f:db:32:95:78:9a:cd:39:82:f7:aa:
2f:9d:f1:ab:5c:af:bf:90:76:a9:5a:10:02:1c:c4:
bf:a4:91:7c:5a:36:94:5d:d4:1e:63:fe:82:cb:8a:
82:9e:69:64:0e:be:3f:d9:bd:9e:ef:0f:7c:c0:09:
07:eb:bb:73:6a:73:4f:fa:81:46:82:f2:bd:9a:8a:
8c:d4:46:f4:3d:80:4b:44:96:2a:b3:a5:ac:a3:98:
08:ac:38:f8:e2:12:c1:7b:99:b3:c7:56:f2:b2:5c:
7d:11:30:27:37:b1:16:b6:b8:a5:da:bb:7a:91:85:
83:e4:28:86:ec:3f:c6:ee:72:04:bf:68:2a:75:77:
22:2d:35:57:21:d8:fb:b9:ff:03:2a:c2:c0:3f:48:
98:ba:9e:4b:8d:cc:52:17:7e:b8:15:cb:75:05:dc:
23:80:4c:cb:fa:a1:8e:f2:05:29:ff:75:fe:96:60:
2d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C0:77:F3:70:0A:D9:4C:55:2C:51:D7:73:F6:87:B3:08:6D:DF:30
X509v3 Authority Key Identifier:
keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:44:4b:90:29:c8:b9:d6:ae:ca:89:ce:59:e0:44:45:33:2f:
34:6f:45:34:95:6b:39:b0:28:0f:aa:1d:35:9c:85:e3:87:36:
65:65:e6:d4:b1:db:1b:54:ad:ec:00:93:9a:3a:f1:f4:ae:05:
11:fb:bb:e9:80:25:92:f2:0f:98:c2:0e:74:93:75:78:06:58:
4b:3f:a7:88:2c:c0:bd:85:57:dc:16:82:82:8e:00:a7:56:96:
bd:d1:f4:e3:2c:cb:bf:ad:19:55:de:36:bf:a4:d6:1b:6c:81:
06:e3:02:74:60:4d:cb:4a:23:ba:e5:ae:2d:52:2f:67:04:b0:
6e:70:61:97:84:a2:9b:85:04:b5:52:82:06:4a:ce:9a:af:30:
47:44:c4:52:f3:fd:c8:ac:a3:4c:d0:b1:65:07:e5:23:9c:82:
39:5f:02:49:6f:10:e6:65:88:b3:de:f7:a1:f7:ca:b5:b7:93:
26:d2:cb:92:46:04:64:f9:4a:2e:d1:80:16:8c:9d:9a:1c:59:
85:95:d4:a7:44:00:ee:3e:3f:c9:cd:97:23:33:5e:ee:8b:fb:
82:be:87:5c:1e:ba:8b:c8:73:eb:37:7d:b0:21:83:84:19:f8:
29:c4:5c:a0:b8:83:8c:04:b0:14:06:f7:41:43:77:cb:31:ba:
b3:b2:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:52 2025 by rpki-client