Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: BWPx/I8b8vzk2lf8PFgJZ3L7TN4dWj6WJDO3tY0Fa0o=
Subject key identifier: A6:BF:43:AE:5B:13:BD:69:E9:D4:E7:03:69:51:89:35:32:68:3D:95
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 0196507EF735D429A27325C3326773949F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 00:00:20 +0000
Manifest this update: Sun 20 Apr 2025 00:00:20 +0000
Manifest next update: Mon 21 Apr 2025 00:00:20 +0000
Files and hashes: 1: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: NsQtlsslV/VVbgsAkPGmrKa+NTlK8mta4Qtzt/RRTls=)
2: qzRYbIxueG7BxO2kIyNYDm59o0o.roa (hash: ZxnZOMA5hmEug+cRf8g9nRIfM3tLtcITJFQSj4Zq/Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7e:f7:35:d4:29:a2:73:25:c3:32:67:73:94:9f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Apr 20 00:00:20 2025 GMT
Not After : Apr 21 00:00:20 2025 GMT
Subject: CN=a6bf43ae5b13bd69e9d4e7036951893532683d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:63:da:0d:b9:67:4a:fa:ce:67:b8:e0:d1:
68:b8:89:fe:fb:90:41:51:e3:a1:2b:3b:78:87:bb:
b0:20:67:1a:0b:b8:e0:58:66:cc:a2:dd:7d:c7:75:
1e:b6:13:6e:bc:16:b1:33:81:44:82:a3:8d:4e:63:
cc:2a:93:98:05:be:d5:60:c6:0d:fe:79:e1:d0:86:
51:10:9d:b1:b3:14:f6:d0:b5:50:bb:0e:a8:51:5b:
dc:a5:b4:a4:cd:56:01:82:58:fe:81:89:ba:3f:1c:
be:82:6f:9e:95:62:b4:cb:3b:e2:62:f9:23:b6:72:
4b:92:d9:78:cb:3b:32:78:8d:12:16:a3:fa:1e:4a:
a0:bb:a4:95:50:57:32:81:c7:dd:6f:24:32:dd:f9:
34:89:a0:3d:9d:ff:6a:99:08:f1:ad:2d:8f:b6:bf:
a3:ef:32:d8:90:ef:44:f3:cb:5c:9f:53:0f:32:e4:
37:4d:10:09:c1:7f:7f:60:0d:40:14:ba:71:6b:87:
04:fa:29:2a:12:62:11:3f:3d:82:18:4c:63:8b:aa:
fd:a4:33:bf:ff:65:bd:16:56:d3:23:9c:c2:27:c7:
41:aa:d7:1e:9f:7b:46:72:93:6a:ff:fd:f1:b2:5a:
1d:9d:d0:33:59:9d:85:b3:82:a1:09:2c:d6:9b:82:
c9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BF:43:AE:5B:13:BD:69:E9:D4:E7:03:69:51:89:35:32:68:3D:95
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5e:93:ee:0e:b8:aa:57:f5:63:cf:c7:81:e3:b4:ea:30:30:
8f:73:ef:31:11:88:37:94:69:b3:b4:16:81:a4:53:84:83:50:
bb:0d:b8:0f:5b:29:5c:08:df:1b:a8:10:94:eb:bf:60:b8:92:
65:78:cf:19:46:ad:d9:25:ac:cd:32:27:c3:83:53:5f:9f:c4:
88:45:e4:84:03:26:6d:6e:27:fd:7b:ee:87:d4:e1:e1:e9:1e:
31:90:f2:02:34:29:dc:08:ae:9e:91:c7:cf:19:9c:83:62:7b:
5a:21:0b:dc:8a:7d:3e:04:88:ab:d3:9d:19:5e:c2:1e:75:06:
87:18:49:b1:5a:fb:44:cc:e4:a3:c0:bb:9b:5d:62:89:98:8a:
84:35:e6:63:47:ff:b6:da:a4:92:51:9c:9d:bc:8f:36:96:80:
12:03:a4:41:d4:66:71:74:e7:7f:49:df:99:45:d0:3a:10:24:
45:cc:95:39:f3:48:4c:b4:80:30:33:30:30:1e:78:95:72:0c:
70:80:d2:31:f7:90:74:8c:25:c7:1b:1e:61:e1:cf:a7:38:0c:
18:f0:00:b9:41:7a:86:ed:0e:bc:13:18:04:de:2e:4a:a7:43:
f8:bf:ca:ad:6d:75:32:32:04:0b:98:5e:12:84:e5:f5:94:f4:
da:40:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:27 2025 by rpki-client