Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
File: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft (raw, json)
Hash identifier: cYVHfAB+q6YZFP9KGOOjZhPmMdinpq6/elOYqmslEYQ=
Subject key identifier: D4:A0:81:65:A7:BC:21:27:1D:5B:D3:AB:1F:21:FB:94:24:C4:56:CC
Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
Certificate issuer: /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Certificate serial: 0196455693AD7D9EA844C4362ED0014B8A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
Manifest number: 0D5D
Signing time: Thu 17 Apr 2025 20:00:23 +0000
Manifest this update: Thu 17 Apr 2025 20:00:23 +0000
Manifest next update: Fri 18 Apr 2025 20:00:23 +0000
Files and hashes: 1: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl (hash: 5vqcw4E2r8cOZhB2iQvGAaWn+sJjVxMGfLSon3wQ64o=)
2: OmRgq5feW-kx9jvx4AAFdyevf30.roa (hash: AB8XLVSpCXGmgkqlgUf55sAgLfrFZhXp5WrR9S6Xa20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:93:ad:7d:9e:a8:44:c4:36:2e:d0:01:4b:8a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Validity
Not Before: Apr 17 20:00:23 2025 GMT
Not After : Apr 18 20:00:23 2025 GMT
Subject: CN=d4a08165a7bc21271d5bd3ab1f21fb9424c456cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:8d:13:ce:84:69:48:0a:ce:03:9c:65:c2:
e5:e4:d5:98:02:c0:8e:e4:1a:b2:8e:13:72:42:02:
80:52:e7:f0:f7:bf:59:66:06:c1:22:07:8f:1d:29:
46:44:8a:9e:8a:73:18:cc:f3:4c:8c:95:c6:2f:96:
5f:47:3b:f1:29:f6:85:62:69:ae:1a:0c:db:8b:ab:
8c:47:a8:f0:34:77:af:86:9a:3d:32:71:3f:45:3c:
11:1f:69:82:bb:ff:70:7b:0b:22:e2:7e:df:54:0c:
ef:80:e4:96:de:97:fc:65:00:fe:43:c8:fa:37:87:
76:88:74:80:fa:30:36:ac:28:f5:04:d6:15:d3:4f:
ca:55:af:aa:32:fa:da:f3:cc:58:9a:c8:38:a1:aa:
1c:20:e4:9b:34:1c:0e:34:90:6b:7e:d7:33:51:d8:
d2:7a:6c:48:61:fa:77:f1:f9:f3:65:ec:c0:b2:20:
3a:0f:28:f4:50:9d:a5:d5:2a:1b:7e:de:b6:0a:b6:
8d:95:d5:2d:9f:3b:99:dc:60:c4:51:6a:87:33:94:
29:cb:c6:eb:b2:b6:da:56:bb:fd:8e:06:39:8b:e3:
4f:d6:1c:9e:a0:89:5c:c9:82:71:27:ea:4a:d1:f5:
79:ec:d9:31:99:6e:45:5f:cc:4a:1c:29:87:04:42:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:81:65:A7:BC:21:27:1D:5B:D3:AB:1F:21:FB:94:24:C4:56:CC
X509v3 Authority Key Identifier:
keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7e:d8:0e:60:0f:da:41:53:c3:42:40:91:64:be:14:df:7a:
03:85:56:ff:01:dd:79:a0:8a:2d:a1:82:ab:35:db:03:a3:53:
1f:9f:4f:fd:fa:e2:fa:c3:07:c5:dd:b6:75:6f:ea:5f:b4:b9:
12:ce:a2:0c:dc:7d:bc:33:d2:90:30:66:5c:fa:e7:ca:8e:4e:
fd:d8:0d:4e:ea:82:4d:c2:e5:f1:d7:ca:8c:30:e4:d1:f4:30:
b3:6f:8c:1f:65:e9:9e:44:5a:0e:32:e7:89:e9:4b:f4:8a:61:
2d:fd:22:b3:22:32:0f:67:2c:d5:df:db:62:8b:5d:2f:5e:9f:
ae:9c:30:7c:65:3d:1e:25:ef:7d:f3:7a:08:0a:62:06:06:16:
c4:d1:1b:47:7e:da:df:67:8c:23:8f:2e:ec:45:9b:43:2e:f5:
8d:38:67:ec:c9:ef:04:55:da:cd:a0:d4:c6:65:5c:ec:74:c4:
07:dd:00:f2:6b:d4:c2:3c:e3:ac:d2:c4:b6:a9:05:83:48:80:
61:5b:f9:2b:37:37:1f:1c:f8:10:d3:a4:fb:8e:8b:cc:76:a7:
21:8a:76:64:64:1f:c9:53:bf:84:f5:7c:92:b7:6b:66:42:f4:
51:5f:58:2b:cd:58:f6:3b:3b:e9:1e:ae:ea:fe:2f:6b:81:5a:
e4:2a:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:54:39 2025 by rpki-client