Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
File: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft (raw, json)
Hash identifier: JQlxtTHPWgD9iU8lry4p/aZjWdzB9ytEEQlVerRePQ4=
Subject key identifier: EB:62:3D:25:FE:62:50:B1:F7:FB:EC:80:3E:F2:35:0F:75:CA:94:32
Authority key identifier: 76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
Certificate issuer: /CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Certificate serial: 019646A01732306B78E63E11DE023DF6915D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
Manifest number: 043E
Signing time: Fri 18 Apr 2025 02:00:18 +0000
Manifest this update: Fri 18 Apr 2025 02:00:18 +0000
Manifest next update: Sat 19 Apr 2025 02:00:18 +0000
Files and hashes: 1: bsvx6NPc5wE4z82KVeJlkoJxWms.roa (hash: 6rlBzLZqcg/z+eAbxCr25c2freBfaX3gVlYhMsk4Kok=)
2: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl (hash: ZdBM5xAPNmeb1/X4uh3ovDUlaHJl5NU9m2uDWvIYfx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:17:32:30:6b:78:e6:3e:11:de:02:3d:f6:91:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Validity
Not Before: Apr 18 02:00:18 2025 GMT
Not After : Apr 19 02:00:18 2025 GMT
Subject: CN=eb623d25fe6250b1f7fbec803ef2350f75ca9432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:1a:1d:8d:73:74:d6:79:72:fa:55:87:d8:
83:be:f7:82:4f:1c:5b:4b:4b:8f:85:1e:db:d6:7e:
25:d4:38:06:0a:e1:2d:d3:01:f8:94:67:5c:22:8e:
a0:6e:6a:f0:73:1e:56:5d:53:a2:fc:55:6a:65:42:
05:95:5e:5c:0d:d0:b9:cd:24:41:9f:39:08:4f:c0:
2f:31:ce:fa:54:4c:3e:0b:6a:d6:cc:0a:cf:2f:35:
e3:35:3c:20:9f:d4:59:8e:f6:0f:ad:1a:e1:8b:80:
99:c7:39:06:c3:12:2e:e4:a9:93:d5:9e:f4:ea:c7:
03:60:34:5e:2e:a9:7b:04:66:f7:23:f0:87:cf:b8:
22:b9:68:1d:ba:62:c2:3c:fe:41:8d:62:59:d5:8a:
46:c3:aa:d1:25:b6:11:1f:70:9d:45:c2:56:f2:56:
05:9b:77:46:b0:2e:00:d7:2c:27:fc:57:e9:bd:04:
e3:d3:c1:af:ef:49:e2:38:31:0a:43:53:91:96:51:
c7:86:56:fb:d8:ad:a7:f2:ba:77:ec:c5:5a:96:ae:
74:44:80:b8:b0:a4:ca:5f:27:0c:94:79:4c:4b:54:
10:88:75:86:b7:2e:f5:bf:da:f3:87:57:11:d2:3e:
1a:0d:83:bf:07:dd:34:7c:8f:72:a3:77:a6:ae:98:
bd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:62:3D:25:FE:62:50:B1:F7:FB:EC:80:3E:F2:35:0F:75:CA:94:32
X509v3 Authority Key Identifier:
keyid:76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:73:ca:51:67:4f:da:81:77:2c:a6:2d:7b:35:23:b0:72:f0:
bc:eb:48:cf:fa:1c:12:0b:b4:2c:25:e1:ee:ca:6e:5a:a5:83:
27:f9:76:d5:e0:fe:2b:dc:f2:8f:eb:ad:91:64:5e:5d:14:13:
20:87:40:91:7a:08:01:fa:f5:9a:f4:50:28:21:90:39:54:69:
0c:21:79:4e:65:63:45:c1:53:f1:8e:e1:a2:ba:78:bd:82:0e:
29:7e:8e:40:90:ef:72:d5:9c:2d:6d:96:c6:3b:63:29:af:7a:
ca:ab:35:04:8d:d2:6e:86:b7:2e:a7:97:c7:51:f7:4c:4d:1b:
69:d6:d5:eb:ef:26:52:ed:df:0e:ea:a6:1c:26:4f:db:d3:77:
6e:bb:6e:50:16:03:0a:7a:82:4f:9c:af:10:b4:ea:ba:8a:c3:
9c:0a:da:08:c6:98:82:ef:14:c6:b0:2c:65:2b:c7:dd:52:89:
36:23:1e:86:42:62:e8:43:29:f2:11:ee:e8:6e:72:00:3b:ba:
72:53:a9:90:74:a2:54:52:66:91:36:15:af:42:0f:08:4a:d3:
88:14:ca:36:7d:82:9e:83:41:cd:17:77:91:a0:0a:50:ba:47:
a4:22:51:67:e5:37:3a:b1:51:3a:cd:73:94:a0:f3:48:e9:3c:
05:c6:e6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:57:49 2025 by rpki-client