Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: I71R9SxF7CGcHoabEKpQVfu2idAholKQd5KhwGVDHyA=
Subject key identifier: 91:1A:10:B6:40:47:2B:B4:2F:FB:F8:96:C0:6F:04:47:6B:61:66:F3
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 01963E0AE890D5A65CB3E8D4EFA89F9A0E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 10:00:24 +0000
Manifest this update: Wed 16 Apr 2025 10:00:24 +0000
Manifest next update: Thu 17 Apr 2025 10:00:24 +0000
Files and hashes: 1: YkTwnLLBjio1cr_ngfAfzZs1Hh0.roa (hash: Y9RRPtZapEofyZ5MjGOGJpjlqTcZ/UM1TnoKmtwIB40=)
2: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: y6thCzjWkNnsRJINPvUMFwjCplttOZyrKhb2NPq4Z34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0a:e8:90:d5:a6:5c:b3:e8:d4:ef:a8:9f:9a:0e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Apr 16 10:00:24 2025 GMT
Not After : Apr 17 10:00:24 2025 GMT
Subject: CN=911a10b640472bb42ffbf896c06f04476b6166f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:56:2e:c0:28:85:58:4c:a7:3d:75:e6:f3:
9b:6d:12:96:3e:ac:c6:d5:fb:2d:e9:1e:e9:e0:7d:
3a:d0:e6:96:9b:9c:aa:bd:7c:11:7d:9e:49:8c:75:
ad:41:e2:77:88:47:a0:7a:df:f6:20:78:87:20:dd:
02:90:e4:6c:0b:ac:aa:92:64:21:f4:db:a2:56:15:
a0:21:d3:c1:72:1f:49:92:9b:0d:84:f7:85:e5:c0:
8c:d9:db:4f:84:bc:dd:0f:9a:90:d2:07:5d:98:37:
16:5b:36:43:3d:ca:3a:c2:e8:96:99:08:db:03:56:
a0:fa:fb:c8:ac:d3:7b:34:19:fd:00:cb:21:24:db:
e1:19:49:bd:16:46:54:ea:d1:bf:71:27:da:17:58:
db:b0:bd:60:5b:bc:64:a2:7d:3c:15:8c:58:87:21:
c5:4d:a5:b8:df:13:cc:eb:77:56:8a:c8:90:44:1d:
67:9b:68:f7:f8:51:9e:c3:89:0d:0b:fe:ba:34:8b:
8f:02:87:82:7f:ef:98:2a:70:bd:d4:d7:e9:a5:34:
53:27:1a:41:aa:df:6e:2b:2f:83:9e:0b:f5:f0:8b:
2b:c2:62:57:1e:d0:36:55:60:f1:a7:8c:24:f3:2f:
7c:7b:b3:e1:57:ca:99:52:3f:d2:98:6c:7a:c1:0b:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1A:10:B6:40:47:2B:B4:2F:FB:F8:96:C0:6F:04:47:6B:61:66:F3
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:35:ae:b3:f8:51:b4:1e:d8:c8:7d:83:fb:f2:c5:1c:f7:d2:
1b:82:7a:88:1e:80:db:78:29:8a:ae:64:d1:97:d7:71:5f:e7:
66:5b:41:96:98:26:63:34:34:84:57:36:b3:3e:d7:36:de:51:
87:b2:6c:02:83:93:26:ec:88:47:67:4c:1a:bd:13:c7:78:15:
c9:e1:c7:b6:18:16:4a:29:db:dd:f4:06:0a:c4:79:e3:1f:a4:
bb:f1:e8:7d:ee:f8:b4:91:db:ee:e8:90:87:e2:36:7b:cf:53:
01:9d:f5:42:ca:b3:2b:65:b4:c8:99:16:34:3e:e8:1b:dc:37:
6c:7e:06:61:e6:37:d6:77:57:8e:2d:31:2f:ec:8e:7c:de:94:
fd:cc:bc:9b:4a:45:20:75:64:1a:f9:d6:25:e1:0f:29:01:ea:
f0:6a:c8:e2:af:a8:be:c0:6d:f3:f4:bd:fb:25:3d:a8:cf:cc:
77:95:a4:d9:65:74:2c:db:c0:11:73:12:fa:fe:28:39:dc:c1:
e1:2c:2e:de:41:85:bd:a5:37:9b:cb:38:c7:34:43:8e:83:f5:
35:5d:a1:02:73:13:a2:40:22:af:1a:40:2b:22:d3:52:89:42:
0e:c8:d3:a3:55:ca:7f:0e:b8:8c:7c:2a:a9:f4:28:40:b5:7d:
c4:57:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:16:44 2025 by rpki-client