Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: FUhK69l81pY77IHMcFguF40T1vpjujlWAs18/Fvf+NE=
Subject key identifier: E1:04:F2:0D:49:2D:54:94:30:8D:F2:62:A6:FD:EB:69:CF:90:23:01
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019653EE8C7E1E0D619CDBD3D819B7266931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 01E9
Signing time: Sun 20 Apr 2025 16:01:04 +0000
Manifest this update: Sun 20 Apr 2025 16:01:04 +0000
Manifest next update: Mon 21 Apr 2025 16:01:04 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: nmongHbKoqW99CYOJju9xtNmVt+RT/FmW5Rmf1ekAFU=)
2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:8c:7e:1e:0d:61:9c:db:d3:d8:19:b7:26:69:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Apr 20 16:01:04 2025 GMT
Not After : Apr 21 16:01:04 2025 GMT
Subject: CN=e104f20d492d5494308df262a6fdeb69cf902301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:01:d3:b1:62:3a:8b:b3:c7:b5:25:48:14:
fe:13:f7:87:cb:35:8c:35:59:f9:e2:4e:84:5e:d7:
01:12:97:ea:d0:46:54:b7:9c:84:bd:59:f2:f9:08:
5f:17:b5:3c:a0:32:c4:86:5c:ba:0b:de:98:2b:74:
cd:f7:a2:74:6a:14:5b:25:90:50:ce:1d:a5:f6:16:
18:76:aa:b2:ed:e7:fd:35:d3:39:14:ba:55:50:0a:
47:c7:45:d5:73:67:57:b1:e1:cc:62:5b:4a:79:2b:
e0:ea:6b:60:6c:4c:95:d7:7b:b6:f4:4f:99:dd:b7:
e1:c5:08:56:53:48:92:8f:af:23:63:db:4d:45:a0:
1e:05:c4:58:38:d3:b6:44:b6:90:06:9f:5c:97:6d:
66:5b:72:83:7d:ac:c4:2f:7a:d5:41:4d:1d:79:af:
7d:fb:d5:d8:83:6c:75:d4:05:75:d5:f1:55:bd:34:
23:05:eb:a9:26:43:11:44:6e:3f:1a:79:91:37:d9:
e8:d2:99:f9:d4:c6:3f:a2:1f:5f:20:6e:69:a8:37:
4f:52:00:40:8c:a5:a8:2f:e5:a0:b9:71:14:9e:d2:
94:fa:df:d0:77:ab:24:da:a9:20:2d:48:76:c8:d5:
b5:df:b0:80:0e:07:b5:f9:28:2b:f6:19:41:db:dc:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:04:F2:0D:49:2D:54:94:30:8D:F2:62:A6:FD:EB:69:CF:90:23:01
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:dc:2e:44:dc:cd:9c:95:95:bd:12:7f:c6:79:20:9b:7a:36:
97:c5:aa:9c:42:86:c9:d5:bd:b9:c0:9a:26:1f:c3:31:ce:04:
e3:57:bb:88:39:19:c7:ff:c2:a4:04:e5:83:8f:27:33:e5:f6:
a4:56:ae:02:c1:77:6c:df:dd:22:0d:2c:13:e9:ef:fa:3c:15:
56:5c:11:91:4a:24:eb:b5:7b:ec:f2:4a:c9:fc:86:8a:94:4e:
a8:90:97:b9:53:a0:75:b7:cf:3d:6a:df:90:76:ce:88:dc:d3:
14:e7:12:a2:9c:51:ce:ae:f4:d5:c1:cd:b1:91:90:84:a0:02:
c6:25:0b:42:e9:43:4b:06:f8:ea:6c:3f:2d:f3:ef:c2:ed:77:
14:59:be:27:f4:0b:c8:6f:05:5c:d9:78:aa:74:a7:e9:26:ce:
67:09:94:29:f0:2a:62:7e:8c:d1:b5:d5:0e:6d:f8:b5:aa:bb:
f0:84:3a:cb:df:27:de:42:8c:9a:16:3d:7f:c8:e8:b9:68:82:
29:86:38:a4:cc:48:4b:b4:e3:71:1d:ac:f8:6b:97:53:a6:de:
33:1d:a3:c6:35:13:89:46:2c:e6:51:6e:c9:dc:4b:ee:63:ad:
28:f9:97:3d:e1:d8:7f:e1:da:1c:b3:ba:76:15:18:10:46:f4:
d6:96:7d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:50:58 2025 by rpki-client