Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: PVAAd/HeLM2+zrzuWjfK5uvkm0CYnSinMtQiErbo7UQ=
Subject key identifier: 94:8D:3E:D0:BC:38:DD:BE:A4:05:36:13:E3:83:59:2C:0E:B7:57:FB
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 01958C974D71DEFE45B3B2B19F4C98E8D12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 08A4
Signing time: Wed 12 Mar 2025 23:01:20 +0000
Manifest this update: Wed 12 Mar 2025 23:01:20 +0000
Manifest next update: Thu 13 Mar 2025 23:01:20 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: 8Y2Jcg+HlEcBcY9IdsodZ5Pq9GcfPJ1sz6yF2r/0Jss=)
2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:4d:71:de:fe:45:b3:b2:b1:9f:4c:98:e8:d1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Mar 12 23:01:20 2025 GMT
Not After : Mar 13 23:01:20 2025 GMT
Subject: CN=948d3ed0bc38ddbea4053613e383592c0eb757fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:65:6f:11:62:4a:78:9a:16:e9:bf:2b:bd:
3f:22:3c:75:1f:98:fc:3a:c3:78:06:06:37:8a:76:
42:81:12:0e:5c:e2:05:4e:21:70:e1:8e:04:64:61:
86:95:d8:8d:eb:37:bd:8f:d8:83:21:c9:7d:36:a3:
00:e0:7c:c7:99:8c:10:6e:c4:43:00:55:06:22:65:
f2:08:31:c0:53:fc:48:80:65:ab:a2:6b:9c:1e:8b:
ba:bb:0e:37:a4:20:e4:05:da:8f:a5:0b:c5:7d:f3:
45:27:41:ef:3e:b6:f7:ad:d8:8e:8b:ae:c6:b4:b7:
bd:3a:60:5e:a1:b7:dd:1e:bb:a8:20:1d:25:ca:6b:
a9:f9:2a:b5:e5:0b:52:f1:b5:3b:82:ca:4b:1b:65:
71:f6:8a:b3:ba:70:20:cd:d6:d5:4d:10:2e:ff:1d:
57:81:7d:73:c7:e3:a6:67:25:d2:c8:f5:3d:ec:f5:
3c:60:3d:2f:9d:35:c1:9b:e1:9a:b9:c1:57:0e:c0:
d1:5a:ec:36:f4:b3:dd:f2:12:19:d0:35:31:14:2b:
cc:19:39:f6:75:58:6a:1d:ae:60:0f:3f:e3:37:86:
b6:22:14:87:fa:a2:eb:c4:bc:d7:90:cb:5c:60:d7:
73:92:8c:1b:f1:9b:3d:1e:c7:ba:fd:b7:5e:52:36:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8D:3E:D0:BC:38:DD:BE:A4:05:36:13:E3:83:59:2C:0E:B7:57:FB
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d6:75:30:15:b1:2d:b9:37:6c:69:e3:ee:e8:90:1d:b9:57:
70:fe:9c:5b:96:86:e8:6d:d6:d6:42:bc:a3:4e:8b:3c:3e:e0:
0b:2b:fd:09:99:5e:84:71:41:05:07:11:a0:d9:8f:75:fe:b1:
40:7d:f8:b6:d0:bf:32:c7:79:2c:dc:7a:f3:52:63:17:13:16:
42:43:34:a0:ac:ce:7a:5e:e7:ac:1f:e3:2f:69:a6:5d:11:78:
61:ba:cc:6a:1d:58:1e:04:fd:94:63:bd:8f:99:e3:a2:cb:72:
83:fe:14:ef:e5:e3:ad:96:2e:08:45:35:a9:a1:7b:07:73:2a:
22:09:a2:5d:15:e5:18:c8:8f:f2:7f:56:97:08:b6:b2:0b:16:
8b:2e:10:66:51:91:15:89:26:b3:6f:14:17:34:15:f2:6c:c2:
b5:d4:d9:64:e5:26:d9:98:c6:17:3c:a2:28:87:d6:2a:58:26:
89:cc:27:37:7e:17:b5:a9:ad:07:fc:76:f2:9b:a0:49:65:0d:
69:ee:6a:a2:e8:9d:bd:be:1a:90:1a:6d:ad:e8:67:83:97:23:
bc:2f:89:1e:ce:78:c8:50:fc:b9:c6:1d:f6:47:5b:98:b8:b1:
32:b2:96:77:b2:05:6f:66:e9:8a:96:4c:a4:38:c9:4d:3f:fe:
48:1b:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:26 2025 by rpki-client