Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: 7jL9huHhqewbGB2bBEu3tN0c2xuHwVpJCH/V7f4ZMPQ=
Subject key identifier: D8:AD:ED:E9:18:4D:11:3A:21:19:24:6B:B4:6D:BD:1F:4D:2B:13:41
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 01964368180DFC4C6FA92FEAA803330C1BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 123A
Signing time: Thu 17 Apr 2025 11:00:17 +0000
Manifest this update: Thu 17 Apr 2025 11:00:17 +0000
Manifest next update: Fri 18 Apr 2025 11:00:17 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: 9Sh9Rv3tSLOsddgIq3TnXutaO4FOhmyiesVFAPR8QPY=)
2: Qhw2m_H5wgy1bU1_w7tg_sEon00.roa (hash: OI2KiRz3XriFCi8yNAm0vl8e78xAWnDgkIja/W4YfWk=)
3: ss1gihVVToicSpjIll9T_OSx9gU.roa (hash: FhBaaNRK7eLkeLLuE6sWEDb9sN1AQ9CWDHvMeiUHSs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:68:18:0d:fc:4c:6f:a9:2f:ea:a8:03:33:0c:1b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Apr 17 11:00:17 2025 GMT
Not After : Apr 18 11:00:17 2025 GMT
Subject: CN=d8adede9184d113a2119246bb46dbd1f4d2b1341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:f9:a2:4d:d6:e1:bb:3f:df:c1:79:2b:40:
b7:a0:6a:64:3e:46:87:ed:f3:c8:e4:39:b1:82:dc:
34:9d:08:e3:01:01:53:4b:8c:42:5d:c1:7d:5a:ac:
39:cb:6d:f5:0b:f1:d3:43:91:80:03:0a:33:35:7f:
7b:44:97:3e:62:09:97:57:71:f6:96:d6:6c:2d:f8:
d8:f2:8b:2a:b5:1b:45:f9:ac:37:52:4a:3e:8a:b4:
ce:4d:fc:07:ce:f4:e4:19:02:38:6e:a7:65:b2:94:
a3:92:6f:83:22:6d:4e:d8:37:a3:41:1e:ba:89:6c:
70:00:c6:5c:44:ee:29:0f:77:9c:30:68:9b:d1:7f:
11:d9:5e:61:c1:34:78:9a:e3:37:5d:fa:44:b5:b6:
78:96:66:7e:81:2b:0b:82:c6:65:ae:66:9d:8c:b9:
d5:88:49:64:c5:49:80:dd:91:85:1e:b9:3f:ad:09:
8f:98:c3:fe:f9:4f:52:a5:f3:a6:98:51:7a:a5:f3:
53:61:29:f3:9f:fe:5d:73:aa:03:35:31:8c:29:a4:
c6:16:74:85:25:6e:47:15:87:99:ff:8c:b0:ef:03:
0c:37:75:a5:de:a5:a8:24:bf:70:ca:1b:cf:b9:53:
21:44:bc:42:12:84:c4:e2:04:37:7c:cb:1a:d0:34:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AD:ED:E9:18:4D:11:3A:21:19:24:6B:B4:6D:BD:1F:4D:2B:13:41
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e8:9e:05:29:e3:3f:4c:6c:1e:1d:d6:10:28:ee:5f:a0:c2:
4c:b0:f5:29:ed:9c:c0:b6:99:85:33:73:7b:25:82:60:81:6a:
20:c2:d5:e6:90:70:b2:20:11:a0:06:1b:9d:ec:46:30:ed:c7:
d0:aa:1b:5a:15:b8:ac:6f:f0:75:93:6e:9e:30:cf:aa:82:d2:
85:5b:b6:f8:c6:2a:a5:42:fb:5a:fd:e1:52:e2:1e:5f:08:03:
e3:c6:b3:c5:e4:88:74:7a:5d:0b:2b:13:d8:95:17:db:5f:5d:
f3:e2:eb:8e:08:ea:3d:67:47:c8:72:46:1b:7e:c8:17:64:8d:
2f:c3:5c:f7:d8:84:e9:f6:c0:f2:4c:fa:a4:ea:af:9d:67:97:
3b:b0:97:db:19:b1:ff:d9:a5:a0:71:9b:36:e5:37:d7:36:f7:
70:e9:62:db:b6:bd:fb:90:ce:7c:60:76:84:91:f6:97:26:0c:
9a:a4:a8:41:77:f2:23:e2:3a:bf:85:7d:6a:6f:d2:d8:91:8e:
78:08:be:9f:33:da:03:2d:50:55:ac:4c:b2:b6:b4:cd:a3:ef:
be:0a:fb:02:10:3f:c5:1c:90:be:c4:00:28:c6:e6:67:18:f8:
10:23:de:90:81:0b:ea:a0:1e:d5:8f:4e:29:c5:72:d3:39:a8:
56:6f:27:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:44:05 2025 by rpki-client