Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: F8VJlGgCbfIRfV/X9rZeL4p7ijfwkK8Y/nvJTzybOcM=
Subject key identifier: 1F:C8:F1:8B:D6:F7:5A:C6:D1:28:E2:09:2F:77:63:95:B5:CE:FB:F0
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 019653494B493D618ABF83BA027033AEBA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 1239
Signing time: Sun 20 Apr 2025 13:00:34 +0000
Manifest this update: Sun 20 Apr 2025 13:00:34 +0000
Manifest next update: Mon 21 Apr 2025 13:00:34 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: QD8BKzlz2xpKJEchAVO6x+4qSNtZ/RDhE0fI+zNYAnQ=)
2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:4b:49:3d:61:8a:bf:83:ba:02:70:33:ae:ba:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Apr 20 13:00:34 2025 GMT
Not After : Apr 21 13:00:34 2025 GMT
Subject: CN=1fc8f18bd6f75ac6d128e2092f776395b5cefbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:37:15:bd:11:19:04:eb:d2:ff:7c:74:53:ef:
de:8c:ad:1b:bc:d5:6e:07:a6:54:6d:30:d8:e6:af:
1f:03:6d:a1:f3:26:85:93:61:9a:f5:78:f5:f2:13:
d0:25:d7:59:37:3d:93:ab:61:80:60:27:a3:c9:ed:
0e:c0:ce:d1:ab:4d:09:37:b9:39:c1:8d:eb:7d:e3:
ff:2c:65:3d:90:a1:06:f3:89:b4:7c:ed:7d:a0:37:
ca:03:e4:42:84:cd:bf:22:5b:19:03:a8:3c:dd:a5:
3e:f8:0c:ee:5e:af:ab:1b:e2:97:44:e1:14:b6:56:
23:cd:96:70:e5:1b:12:be:b7:23:9c:c5:c4:14:25:
40:ee:e3:f6:23:d1:79:97:3a:c8:c1:8c:a3:20:52:
09:ba:cd:05:e3:a3:bf:ab:dd:2d:10:e0:93:a5:94:
0f:9e:16:f3:6f:d4:da:a9:69:36:73:36:a7:ae:98:
58:91:b5:f5:fa:e7:16:e9:6b:b7:6c:4e:9d:e5:17:
49:a7:8a:bc:60:68:f8:d0:71:3e:b8:e1:d7:be:df:
8b:56:95:8a:2d:72:f1:3b:ed:8d:db:06:e8:db:49:
d1:6c:53:4d:2c:d3:3f:28:e8:f1:d0:32:54:06:ae:
42:04:5a:72:e2:a3:89:e5:da:3f:df:df:c5:2c:e6:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C8:F1:8B:D6:F7:5A:C6:D1:28:E2:09:2F:77:63:95:B5:CE:FB:F0
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6d:6a:13:fd:b5:40:25:41:2f:06:c4:4a:74:ce:75:99:12:
2c:e0:a0:54:fa:ec:ef:ff:67:f6:84:65:9b:79:98:f7:a7:1e:
67:e4:ab:a6:78:b5:ab:4b:09:ce:8d:48:e3:2a:fd:47:5d:8f:
49:c8:82:f4:9e:ac:a0:65:4b:4a:ba:12:10:e2:7a:94:6b:42:
95:ac:dc:01:2f:21:fd:00:cc:20:ff:4d:43:0d:ff:7c:80:af:
23:5b:d9:27:7b:6f:b0:04:29:5e:75:ed:1a:10:c3:bb:ce:21:
74:c7:2d:6b:ef:36:36:ab:f0:cc:2e:42:17:2b:23:3e:0e:11:
46:79:dd:11:73:85:8d:dd:f6:70:66:26:e3:94:26:94:4f:53:
2a:d1:89:9e:23:d7:4a:94:69:83:f0:5f:40:e2:b1:da:71:a7:
97:54:a0:38:9f:3d:95:46:ed:1a:60:02:ed:0d:4d:36:a7:42:
93:7c:cb:df:7b:25:8b:02:a0:df:a2:9c:86:3e:ab:38:fb:b9:
63:9e:dc:bf:5a:e7:cf:46:c1:c5:99:e9:f8:0a:2f:4c:24:df:
5d:1a:7f:8c:64:93:d1:00:0e:13:0e:f8:78:77:17:d3:05:9c:
43:b6:51:85:d6:24:4e:f3:2c:29:03:96:b9:76:ff:08:b0:b8:
c3:6e:e2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:07:11 2025 by rpki-client