Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: bkhtXAde+SKHxZ+/Gtgth8FG1RYl5kBW3T+NuBVbAW4=
Subject key identifier: 29:D4:60:D0:E0:FE:94:B8:4C:0E:FC:EE:76:73:19:10:A5:21:FF:41
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 01964D7ED5EDC381E1AF4491FDAF828EC78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 0AFA
Signing time: Sat 19 Apr 2025 10:01:19 +0000
Manifest this update: Sat 19 Apr 2025 10:01:19 +0000
Manifest next update: Sun 20 Apr 2025 10:01:19 +0000
Files and hashes: 1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=)
2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: XoCcIyPBKhUfhmS61CZtzJJJ5GPAzuZLHQ+oYH8TMNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:d5:ed:c3:81:e1:af:44:91:fd:af:82:8e:c7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Apr 19 10:01:19 2025 GMT
Not After : Apr 20 10:01:19 2025 GMT
Subject: CN=29d460d0e0fe94b84c0efcee76731910a521ff41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:97:37:b3:04:f0:cd:f2:14:8b:f4:b0:19:
46:90:55:b5:a2:a6:2b:44:e6:55:cd:22:a9:b7:13:
3d:03:55:de:45:04:a4:b9:70:11:62:41:ab:e6:d9:
eb:65:60:c1:b7:d1:b8:70:c9:95:49:0b:41:b1:e1:
e8:96:22:e9:58:0f:23:c5:7a:3f:b5:fb:c3:6f:f3:
26:40:e7:8c:7a:44:3a:a2:f9:e1:26:b0:61:29:57:
55:8d:20:ee:15:49:f3:43:bb:1a:82:41:75:ba:6d:
a2:30:c9:56:b5:da:2c:c2:21:7b:10:fa:47:24:d6:
90:7a:5e:9c:fb:95:22:21:aa:15:1f:e5:87:68:27:
a4:96:65:0e:ee:58:8b:e4:4b:df:92:1c:97:ea:ae:
d3:b4:79:f3:6a:0f:20:4c:af:a4:5d:dd:2d:9d:a2:
ab:e6:d7:7e:54:e3:41:97:c6:f7:dd:9a:f0:99:50:
3d:2f:ff:c3:7a:20:a7:ba:3d:8d:f9:92:ab:23:ed:
a9:67:1f:ee:57:2c:90:db:1a:2d:c6:2e:51:5b:d8:
b9:db:4a:48:45:db:34:d8:fb:f2:0c:74:ff:43:ad:
31:76:dd:ad:55:bb:ec:9e:e8:07:d1:2f:25:c1:5f:
63:90:3f:ec:85:51:17:85:01:1d:fc:0d:09:e7:c8:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D4:60:D0:E0:FE:94:B8:4C:0E:FC:EE:76:73:19:10:A5:21:FF:41
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6d:83:bd:08:57:7c:e4:0e:41:2b:61:cd:05:d2:b7:38:7c:
ac:67:12:50:13:e4:eb:e6:37:7e:a1:11:f9:02:cd:d8:da:cb:
5f:f5:54:9d:1d:45:fa:08:68:58:1c:33:c3:15:88:44:34:7e:
4f:51:ad:ae:3d:44:1d:b1:43:e0:b5:11:57:48:88:67:de:e8:
0f:99:90:83:31:8b:3f:1e:50:6c:57:c2:70:db:d2:31:ac:e6:
e8:43:f8:f8:32:da:52:10:e8:5b:df:70:29:2b:89:d4:02:f8:
d7:ea:33:49:96:6d:c4:ac:83:4f:f7:3c:d2:60:49:88:89:9e:
75:36:1f:8e:14:8c:fd:06:e3:1d:ac:cd:91:f3:d4:ce:26:cd:
22:53:6e:3c:72:b1:bf:96:12:9e:93:a6:9b:74:5f:82:91:3a:
3c:eb:c1:a6:de:4f:3d:96:9f:b5:e5:1e:7c:94:fa:ca:be:a5:
15:be:06:ab:c8:29:b3:88:d6:a7:d4:b8:10:bf:7f:2e:da:ea:
19:1d:d6:c7:f6:d6:70:71:43:75:50:e8:6d:42:3e:3f:01:ec:
be:d9:e1:a9:ac:ad:fc:b8:3c:15:97:07:a9:ee:18:43:8c:74:
bf:77:02:6a:8e:f2:cc:d4:e7:a4:db:9c:67:bb:fa:6d:d1:3f:
e2:d0:7d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:11:52 2025 by rpki-client