Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: L5334wkSdO3bDoEuw1/+81Nfr3m2jieeIB3KAOcxz3Q=
Subject key identifier: 35:76:C5:0D:18:96:A7:C3:58:90:7C:44:C0:DB:6E:E2:36:C0:08:74
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 019655008977D5A083F03673831DA10450DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 0609
Signing time: Sun 20 Apr 2025 21:00:20 +0000
Manifest this update: Sun 20 Apr 2025 21:00:20 +0000
Manifest next update: Mon 21 Apr 2025 21:00:20 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: Z/48KVHK+jhZy2fYtD/xoVx3OqqjhpkL607O7xz2wm0=)
2: XYDcPLsMJ5XYkYL0PQrHKhNJ9s4.roa (hash: 1m7+mEL2iJYkvJfrDXaZzofwFCojsAzxm4zXV5nNyDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:89:77:d5:a0:83:f0:36:73:83:1d:a1:04:50:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Apr 20 21:00:20 2025 GMT
Not After : Apr 21 21:00:20 2025 GMT
Subject: CN=3576c50d1896a7c358907c44c0db6ee236c00874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:fd:89:c5:44:5d:ed:16:ab:36:f8:ba:3f:
75:05:8f:9b:cf:30:83:d3:5d:26:e4:70:cb:65:16:
60:f2:f8:20:06:61:01:85:4f:ac:b7:0e:0d:ef:b9:
c8:53:60:2f:a6:21:95:83:62:0b:90:8f:50:01:f7:
7a:80:1f:0b:1a:da:ae:53:83:4f:24:ba:6c:35:20:
9c:a4:7c:0e:dc:47:03:cc:6a:4f:3c:62:08:74:7d:
51:b9:3a:c3:4e:ca:bf:ce:23:39:c6:b7:35:6c:fc:
a9:9a:57:1e:ac:89:b3:2e:6f:db:56:ee:55:3f:e6:
50:8b:6d:8d:ca:33:3c:03:39:12:78:e9:35:14:bc:
b7:1f:f2:eb:c6:1c:3d:f5:4b:67:79:be:9e:0e:f0:
28:4d:bc:55:33:06:22:2d:cb:32:a1:9a:e0:3e:8d:
e0:8d:08:c1:70:4d:1a:03:77:1e:29:94:86:f9:bd:
17:00:32:2f:7a:80:a7:78:12:52:ed:f7:9d:25:f4:
7e:87:84:dd:68:49:36:b8:0c:24:08:db:6d:71:f4:
7b:e8:a3:64:7d:35:3e:81:41:36:14:e7:b7:57:bd:
81:fb:71:6f:9e:c6:cc:91:67:e3:a9:e5:6d:75:dc:
a6:e1:7c:2a:2e:cc:35:1a:63:2a:8d:93:68:ae:11:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:76:C5:0D:18:96:A7:C3:58:90:7C:44:C0:DB:6E:E2:36:C0:08:74
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6b:d3:18:df:f4:e9:88:af:39:0a:1d:a9:88:d1:95:48:e4:
c3:bd:d6:dd:52:58:42:09:77:0d:47:e7:21:ae:29:14:17:19:
7f:8c:9b:39:5f:a5:dd:74:c4:26:cd:af:42:8a:23:ef:33:30:
90:93:7a:85:8e:4f:77:b8:a8:38:62:6d:be:d7:f3:89:c2:ae:
d6:eb:6e:cd:b0:a0:d9:fd:0a:4f:9c:cc:e7:e4:cf:b6:21:17:
20:d6:73:29:2f:29:a0:2e:62:1a:8d:9e:c8:d3:9e:bc:06:bd:
6c:c1:c5:15:ae:29:97:e0:1f:9e:bc:e1:b7:3e:16:6d:78:39:
b0:42:a2:a1:12:53:b3:ef:3b:62:bc:eb:34:5c:fb:da:34:49:
e9:5b:b2:9a:3f:28:ea:bb:87:04:69:c0:0a:d2:2f:aa:ea:8f:
de:94:f8:8b:51:0f:26:3f:b2:8d:48:ab:2c:a3:69:06:4e:75:
00:a2:23:76:d2:b4:bb:f6:e2:fc:f2:62:c7:a9:58:df:6c:31:
86:5f:4f:9f:e6:d4:d5:42:70:69:17:a5:9a:1a:0d:82:3e:8d:
36:9a:d8:b3:01:3b:3f:1c:2a:07:0b:bf:4c:e3:fd:06:d7:31:
a0:ac:33:eb:ff:86:56:db:3f:ba:3f:b8:de:78:8e:8a:ad:a4:
58:06:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:03 2025 by rpki-client