Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: CfH/Ggo86XuHOwCLYlvPz29aSLcnbIihBLME9oawuPc=
Subject key identifier: CA:1C:6D:AE:D0:96:6B:1E:E9:44:E7:61:B2:4F:23:FA:58:FA:E1:B4
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 01963EE720ED392B28CB6A46EB2B4393E93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 0E98
Signing time: Wed 16 Apr 2025 14:00:56 +0000
Manifest this update: Wed 16 Apr 2025 14:00:56 +0000
Manifest next update: Thu 17 Apr 2025 14:00:56 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: /IBq+8I/1oOw/m/K+c0eunMwoTCzaD3agpoXqxf2ih8=)
2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=)
3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e7:20:ed:39:2b:28:cb:6a:46:eb:2b:43:93:e9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Apr 16 14:00:56 2025 GMT
Not After : Apr 17 14:00:56 2025 GMT
Subject: CN=ca1c6daed0966b1ee944e761b24f23fa58fae1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:5d:c3:c0:a8:3b:09:ea:85:86:a4:60:27:
e3:ab:17:f8:d4:94:8d:cd:be:29:3e:ca:d2:4c:77:
08:95:4d:f8:0b:79:de:66:01:15:57:dd:d6:62:49:
04:e5:49:37:1b:04:2e:58:72:f4:70:09:1e:fa:fd:
3e:52:92:0c:b9:b6:0f:4a:60:e5:87:45:19:de:86:
2f:28:48:62:21:12:57:61:2e:69:be:21:32:4c:f3:
f5:72:13:25:e7:83:28:f0:c0:bc:58:2e:21:8d:aa:
b1:39:60:84:5e:19:aa:3a:b4:7a:6e:42:5b:10:b7:
18:0d:1a:fe:f6:4d:0a:19:f9:e5:24:9b:16:2b:c5:
42:af:98:01:92:8a:df:20:f2:03:83:eb:68:52:9d:
fc:5a:25:f8:7d:17:c9:d1:78:83:be:23:70:b6:e7:
f5:4b:3f:a9:f9:b7:c2:30:f5:9c:3c:1e:bb:5a:f3:
f7:a8:cf:d0:8d:fc:31:c6:87:2c:da:93:62:55:55:
37:5d:2d:b3:8f:c0:a2:b8:67:22:23:45:16:5d:88:
19:8c:80:88:b5:d6:16:77:da:d8:7f:4a:55:77:a6:
01:f6:2a:33:ad:6a:d8:d7:9c:07:7e:be:bb:01:c6:
c3:16:7b:af:fd:c1:dc:0f:4a:40:67:d8:db:09:9c:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1C:6D:AE:D0:96:6B:1E:E9:44:E7:61:B2:4F:23:FA:58:FA:E1:B4
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:db:12:2f:c0:c0:03:2a:f2:f7:2f:01:e7:8b:4b:b5:da:ac:
33:66:f7:10:8d:80:66:d0:3a:2a:24:35:af:2e:b0:51:da:01:
a2:e7:95:b4:1a:95:b0:d3:ae:2f:8f:07:a9:e8:96:59:65:73:
13:d0:b8:1b:33:7d:04:4c:a9:87:3a:85:b0:d2:c4:a4:57:d3:
05:e0:6e:9f:0a:c6:cd:bc:e5:5c:ba:1d:09:52:4e:23:97:00:
60:12:13:3b:15:18:cf:46:58:30:ce:49:80:99:16:f1:9b:06:
1a:fc:35:7e:d3:20:1a:3a:45:1d:23:2b:3f:94:dd:2c:5e:91:
1a:20:a2:09:97:33:58:1e:2e:23:30:7d:5a:a8:eb:d4:6e:a8:
c9:e5:fb:ec:aa:d8:46:78:fe:da:e2:f5:b0:79:94:8d:3d:67:
1c:ff:90:63:c3:da:3e:56:78:43:89:29:42:98:92:12:27:73:
41:4b:4e:80:8a:78:e5:46:ff:15:d9:35:f7:1a:79:40:92:2c:
33:5f:27:33:ac:3c:71:c6:5f:ab:fa:8d:70:9e:1e:ec:12:53:
6e:7b:a3:35:c9:db:46:6e:28:b9:9a:00:a3:cd:2c:7f:08:e3:
18:32:dc:8a:21:90:05:a7:99:52:be:fc:13:74:f2:8b:0e:9f:
87:a2:f9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:32:42 2025 by rpki-client