Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: +b9MSAM73XN/tH2GNIIwwnBR7VZZ9M9EXJH7SYVhk5o=
Subject key identifier: E7:82:C6:51:0C:50:6D:5C:9A:FE:BE:89:3C:55:25:A0:4F:43:35:34
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 01964D7EC5C034BA02C22FA5E42B0D915367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 10:01:15 +0000
Manifest this update: Sat 19 Apr 2025 10:01:15 +0000
Manifest next update: Sun 20 Apr 2025 10:01:15 +0000
Files and hashes: 1: cKLVURSgkoMYO4wy8vne_qwgRmg.roa (hash: SnmmNcbbOM0qBXdozd7WzP3UhHfxrlR5ILW9dCCKUpI=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: CCRsbFIBheTbb7I8gfjAB8ZwmVqdKiPla/oggW99ffw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:c5:c0:34:ba:02:c2:2f:a5:e4:2b:0d:91:53:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Apr 19 10:01:15 2025 GMT
Not After : Apr 20 10:01:15 2025 GMT
Subject: CN=e782c6510c506d5c9afebe893c5525a04f433534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:0f:35:bd:5c:14:68:07:0c:37:da:54:52:
92:2c:5a:ea:44:01:3a:b4:e9:7c:06:24:1b:03:a8:
4d:34:77:2c:90:54:db:7c:77:71:b4:31:00:05:8e:
bd:98:08:f7:46:b6:59:0d:f3:e2:49:db:81:82:51:
60:fb:0f:ce:79:ac:b6:36:46:42:07:df:19:2e:2c:
a5:d3:0c:6e:1b:5d:fa:02:1e:3c:8c:ec:ba:7d:5f:
17:c5:50:a8:be:ff:28:0a:fa:11:28:1b:22:18:a5:
4d:70:0f:af:44:3b:4a:eb:b2:b5:5d:f4:34:1e:3a:
f3:fd:f6:08:73:37:4b:c4:9c:c3:1a:e2:bd:c3:18:
9d:d0:51:58:78:ce:f8:40:2e:92:30:3d:15:5f:1b:
37:8e:aa:ed:88:ac:8d:36:35:f3:89:49:5d:c0:c4:
5f:ae:d8:92:21:fb:d4:4d:98:ef:a2:40:f5:49:d0:
c0:68:ea:db:90:ea:f7:d1:96:9a:1a:75:82:38:70:
81:38:a8:53:87:1e:33:87:22:de:35:45:ad:78:61:
23:8f:ef:bc:4b:33:4c:d9:f1:05:71:93:8b:e2:df:
2a:fc:0d:29:b9:4e:37:94:5a:4d:d7:ac:16:10:ff:
02:f2:dc:27:d3:bf:d5:62:2d:aa:79:1e:1f:05:5c:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:82:C6:51:0C:50:6D:5C:9A:FE:BE:89:3C:55:25:A0:4F:43:35:34
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e0:85:f1:88:80:53:11:5c:ae:49:37:a6:42:5a:2c:0d:a5:
fb:51:64:a2:ec:e0:ab:2c:a0:4f:3b:d8:95:f7:21:20:f5:8f:
1f:1c:a5:56:6f:ac:da:26:7c:6a:a0:a8:49:7c:0f:62:83:1d:
5a:dc:26:b0:ce:de:8b:2a:4f:24:d0:0e:f5:32:96:0c:ac:9b:
a3:de:90:55:36:f5:2e:09:6a:90:83:77:71:7d:a2:be:15:59:
7f:13:e6:41:d2:36:2e:95:90:ac:0d:af:fe:bf:53:25:23:98:
21:46:82:8a:50:30:7c:95:5a:da:f6:a6:0d:3d:d2:06:60:cd:
ee:09:26:09:02:2a:c5:20:c4:42:a2:cf:13:82:7a:f6:8d:b8:
64:d0:ec:9d:f5:58:c5:f4:5e:20:0d:c6:24:62:9d:36:cc:93:
be:2f:51:e3:d7:15:21:5a:05:f6:0a:38:4a:8f:1d:09:fb:b8:
f7:37:46:de:ac:a4:57:09:5f:ac:f8:c6:18:75:a0:d1:8d:d8:
da:af:0f:97:3a:d3:8d:db:ec:00:f6:bf:5b:36:a4:5e:90:c8:
8b:3b:a9:d8:01:18:e4:53:6f:10:72:f7:0c:ca:06:e0:d7:40:
54:ba:d6:d6:90:58:72:45:0f:29:3a:d3:ba:55:e8:5d:e7:af:
8b:5b:25:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:58:40 2025 by rpki-client