Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File: dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier: ptXECYiAuE2xtI/X1qCwVkGmE+2yQdME+8kNgaa9Jv4=
Subject key identifier: A9:2E:C2:C0:18:5B:45:7A:A2:B7:B4:71:FD:EC:F7:D6:02:38:F1:76
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial: 019613C6533159C61E80EE2B5129E4EF1FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number: 0F7E
Signing time: Tue 08 Apr 2025 05:01:26 +0000
Manifest this update: Tue 08 Apr 2025 05:01:26 +0000
Manifest next update: Wed 09 Apr 2025 05:01:26 +0000
Files and hashes: 1: bt6q6PTF8ueRiqJegnWl0jfi6G4.roa (hash: 8TVgggZ1XLtgR7AATYFo0DWz6MeX2DZ1/wik7k03eIU=)
2: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: WmfZSIpt7P2497oQZH357LufCB1InAy+fe0hlXrHuN0=)
3: dM8kA9UdpYik4eGdd4p2YObVlEA.roa (hash: 09Lj5oy/dbzOsXRPbe2C4Tko7I3Jb+mI9jtmELQT9g8=)
4: jSoECDBgi6VXYwcb2Ry0gxkfevA.roa (hash: IB9PwzbzFSot/avb9nPz1wMhdqqmWhuiYKAtdM5DSM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:c6:53:31:59:c6:1e:80:ee:2b:51:29:e4:ef:1f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Validity
Not Before: Apr 8 05:01:26 2025 GMT
Not After : Apr 9 05:01:26 2025 GMT
Subject: CN=a92ec2c0185b457aa2b7b471fdecf7d60238f176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:fe:5a:38:3c:6e:4c:24:9a:66:6b:0d:cc:
3a:36:f9:f0:21:e1:81:e7:20:ce:d7:59:6b:ba:83:
20:25:96:f8:39:54:b0:77:c6:9a:1a:f3:20:ec:38:
17:13:32:7b:bf:a3:4d:64:07:93:eb:26:e5:2b:43:
46:bc:b5:a0:75:84:7f:4d:3b:3b:ec:c1:63:1e:54:
91:88:9e:27:31:a8:66:5a:b8:d7:47:2a:a0:6b:80:
62:d9:83:4c:31:6a:bc:7d:97:02:6d:22:f2:1e:f2:
26:54:b2:54:fd:e5:db:73:d1:17:b5:06:25:cf:f2:
44:54:3a:76:ba:1f:95:ff:8c:ca:f8:14:f1:de:3e:
82:34:4a:dc:a7:ca:44:5d:8d:63:73:f1:d4:d1:a2:
34:df:e9:70:23:ff:01:0f:54:81:b3:be:bf:48:f6:
93:17:9f:6b:60:d8:e9:74:b3:4e:b0:b1:8e:0f:05:
91:46:6d:8e:05:57:72:6a:1d:ff:89:5c:84:b9:b1:
1c:a6:a8:5e:08:8b:fa:fc:34:d7:e1:20:39:bd:71:
ed:d8:1b:13:ca:a1:81:d5:d0:ea:90:2d:80:37:9a:
a8:31:54:ce:6b:ec:d9:e7:94:18:ab:7a:5c:1d:fa:
2a:ef:f3:ff:30:f4:46:fb:5d:5c:21:38:95:33:ad:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:C2:C0:18:5B:45:7A:A2:B7:B4:71:FD:EC:F7:D6:02:38:F1:76
X509v3 Authority Key Identifier:
keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6f:9b:79:aa:fd:c9:8e:4d:af:63:fa:57:65:19:65:77:a1:
2f:70:77:18:89:4a:3a:7f:9f:3b:b1:a0:f5:d5:1c:60:75:1d:
e3:27:97:7e:c8:d1:b1:c6:ec:70:f5:59:d1:40:c4:f5:1a:15:
49:94:ba:1e:87:2c:67:dd:75:26:10:22:2b:5b:96:02:1b:8f:
24:df:73:00:e6:09:c5:47:0c:bd:91:10:43:15:9d:e4:1d:c3:
37:92:12:c2:e6:0c:94:11:76:36:38:1e:dd:69:4c:76:c7:e0:
51:e0:f8:6d:97:12:0b:2c:aa:ec:33:a6:18:17:1e:ee:c9:3b:
81:ee:a8:db:b2:68:28:69:6e:86:47:a4:c9:5a:04:55:c6:a8:
9c:86:85:64:51:10:de:f6:31:0d:a6:a9:4c:df:14:2e:58:bb:
94:5f:21:d9:a9:d6:26:ef:67:0d:63:71:44:12:d3:d2:b6:77:
de:8e:82:3c:81:53:0e:9e:fc:4e:c6:bc:70:4b:f1:89:71:80:
9d:13:da:57:8b:02:ce:aa:71:a0:87:aa:be:27:c8:4b:7c:bb:
ff:01:49:e0:88:75:a9:52:de:c3:2e:15:1a:d6:59:cf:f5:a4:
fa:21:6f:4c:1d:b9:f6:2d:e7:45:9b:1a:15:18:dc:1a:94:b2:
a2:69:f1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:51:13 2025 by rpki-client