Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: zHpf/9xwwBYsFND0k2Os58cS6yEx62+DAnNpMw9E3Fo=
Subject key identifier: 7E:71:B0:46:93:C7:B2:A1:CB:5A:92:F5:2F:B9:30:F0:45:81:D9:45
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 019656134BC28E9833AFE0FE309CC8420488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 0207
Signing time: Mon 21 Apr 2025 02:00:27 +0000
Manifest this update: Mon 21 Apr 2025 02:00:27 +0000
Manifest next update: Tue 22 Apr 2025 02:00:27 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: ePE07HtkV5ftLbob5VlNvQMe/CqkijjfqX1dXgnlHhE=)
2: mFUkKUV2j8Fct1DGbVQJTzcA0ig.roa (hash: bNr/zF64vk+SVTrKPbIdCfqu6Sowa5lS9V4LG/Ns2g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:4b:c2:8e:98:33:af:e0:fe:30:9c:c8:42:04:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Apr 21 02:00:27 2025 GMT
Not After : Apr 22 02:00:27 2025 GMT
Subject: CN=7e71b04693c7b2a1cb5a92f52fb930f04581d945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:b9:a0:61:a8:69:3c:45:4b:62:0a:15:b3:
7b:e0:89:fd:65:a3:31:96:a4:d1:68:46:23:72:0f:
9a:e9:c8:61:a1:33:b4:70:8c:94:a0:37:39:3b:0b:
db:43:90:1d:d5:7a:2e:7c:e3:46:98:22:a9:19:af:
3f:83:e5:84:9b:a9:31:ee:e9:ef:d2:c3:0b:a6:31:
14:aa:4b:a9:4d:be:97:c1:99:92:1e:bd:d0:69:32:
4f:6d:ba:eb:6c:49:4d:3b:e3:af:12:80:1f:52:8e:
12:d2:fd:4b:01:46:a4:de:f6:7a:72:0a:ec:2c:c5:
a0:e3:8e:39:3b:28:bb:92:50:67:26:f3:b9:75:fd:
51:16:20:86:ea:1c:84:88:e8:01:b7:62:7c:db:10:
9b:b2:2b:97:e2:d5:49:c6:88:f1:7a:1e:2e:77:52:
42:70:99:18:66:8e:1b:75:6b:7b:be:69:3c:12:c7:
92:6f:84:3e:f2:0a:d0:cf:ed:6c:7b:28:b8:00:16:
b1:27:49:19:9d:ac:66:01:19:de:1a:95:a7:02:6e:
7c:a0:a2:d6:32:c7:ce:66:7b:04:6e:0c:81:bd:b2:
ca:35:64:71:9c:78:24:0f:9b:bf:0f:35:9d:47:99:
b8:eb:05:bd:8e:09:9f:00:84:51:19:88:ea:cc:d9:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:71:B0:46:93:C7:B2:A1:CB:5A:92:F5:2F:B9:30:F0:45:81:D9:45
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8d:5d:f2:d9:c6:a8:17:1e:5e:bb:eb:79:a8:dc:1b:be:a3:
ef:ee:ad:ce:86:50:a2:d0:8f:9d:c4:ed:17:bd:4d:92:db:df:
02:38:5b:43:07:59:e4:63:27:45:09:0e:29:17:12:8c:17:6b:
e8:4d:c1:b2:d4:51:40:07:65:e4:c0:ae:47:6e:7f:a6:2c:32:
71:42:52:23:a7:a2:6e:b0:da:cb:dd:7e:29:8e:3a:1f:b4:c0:
87:46:71:76:b9:5a:99:9e:55:e2:eb:ba:01:4a:f2:ec:e6:9a:
7b:9a:77:0d:12:e4:25:ed:a9:09:71:cb:28:2b:cc:6b:28:3a:
0c:20:51:2f:0b:ac:73:e5:3b:fb:8e:42:20:7e:2a:6a:58:0b:
51:8e:09:b8:10:2c:ec:03:ed:4c:2f:6f:f3:1c:39:8a:65:50:
37:d8:31:e3:f0:6b:a3:de:d8:47:f3:ee:37:4b:a7:20:c1:3f:
89:76:9a:0b:a8:61:8b:c0:93:8a:54:ee:ce:59:a0:45:c0:22:
15:93:34:59:54:fb:ed:93:d2:f4:a1:d0:92:f5:8c:06:96:82:
44:78:31:4b:19:97:c8:f6:39:47:39:81:f6:c2:dd:e7:6b:63:
8a:9f:1e:05:f9:9a:25:3b:57:e5:f1:48:cf:7d:49:56:21:47:
59:b7:82:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:04:06 2025 by rpki-client