Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File: rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier: 6vpBH/Mu3eU9/LTCAA0m5+mUEBt//ztiqfy/XtynLVY=
Subject key identifier: F4:BF:B8:AA:67:E8:CB:23:AE:2B:24:23:E9:C2:92:01:AC:47:1D:33
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 0196439F50870DC5FDA892FAD445C9EFA111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 12:00:36 +0000
Manifest this update: Thu 17 Apr 2025 12:00:36 +0000
Manifest next update: Fri 18 Apr 2025 12:00:36 +0000
Files and hashes: 1: l7t2iScMgw_Vqqdey3zojLvCFAo.roa (hash: GElb5qawLmwlWjlnnhanimj+W7edI5MOyhH1UzXbSog=)
2: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: dSHrzI3qcUWUF2AoNqs+lftZwH6vVV+qokBsGHzF/w0=)
3: svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa (hash: hDRuttNUPmkUswD/PN5v7bjO2pBa9L/1t8q5gG/jwI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:50:87:0d:c5:fd:a8:92:fa:d4:45:c9:ef:a1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Apr 17 12:00:36 2025 GMT
Not After : Apr 18 12:00:36 2025 GMT
Subject: CN=f4bfb8aa67e8cb23ae2b2423e9c29201ac471d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:03:7d:c4:f1:d6:2a:7d:f6:6a:0f:f8:52:
45:51:2d:dd:34:06:3f:96:96:85:ae:ab:84:b2:b3:
da:5b:35:f3:90:a6:0f:46:5b:65:29:b6:86:8b:af:
87:91:54:13:4f:8c:fa:85:b8:60:25:cb:6d:fd:9c:
72:53:27:57:84:b7:ea:46:34:9f:bb:13:b0:cb:dd:
c1:2b:be:6c:af:52:1a:b4:f8:c0:31:ba:3c:8f:cd:
77:5f:1e:21:5d:35:0b:be:84:e6:2a:30:b8:50:f2:
ab:83:cb:f3:62:f2:63:cf:8b:ed:1d:81:a9:a5:e7:
3d:81:52:bb:03:57:17:76:f8:23:b8:91:22:43:89:
3b:73:b6:67:fa:13:20:08:81:cf:a1:76:41:77:00:
8a:2b:2b:ca:b8:34:8c:6d:93:2d:0d:e0:43:9d:f9:
fa:6c:74:5d:07:b0:95:fc:34:10:bc:1f:ca:53:61:
bd:a6:a2:eb:80:e6:02:a8:32:fd:55:b8:9a:92:79:
cc:5f:d6:1e:75:f1:3c:65:8a:f2:88:fc:5f:44:79:
25:22:7c:35:92:f1:ff:1b:25:74:8f:84:38:a5:31:
ac:d0:76:66:58:2d:f4:07:d1:e8:e2:d3:4f:ca:05:
7f:7c:c9:12:82:82:ff:8d:8e:2d:cd:e8:7f:47:bd:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BF:B8:AA:67:E8:CB:23:AE:2B:24:23:E9:C2:92:01:AC:47:1D:33
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:51:64:fa:64:cf:96:b8:1e:78:da:0f:48:5d:c4:4f:0a:2d:
a5:c1:67:22:64:c8:6a:9d:11:73:bf:b1:45:0e:f5:aa:ac:15:
77:50:90:e4:75:12:e4:46:f6:14:1f:91:7e:12:1e:ae:f8:62:
cc:18:f9:e4:80:18:a6:6b:a7:48:50:b7:54:4b:69:44:2b:dc:
15:5c:c4:6f:5f:e7:2e:2b:a2:6f:d5:50:13:79:47:1f:aa:2e:
bc:aa:ed:8a:26:90:4b:51:ff:b1:ec:74:80:c3:45:e3:46:fc:
10:cc:96:cd:d9:d1:28:24:24:e8:85:a7:8a:19:ff:e2:3f:35:
f9:c4:cc:36:7b:d4:ff:d9:96:a0:26:7b:a3:3d:bb:4b:74:9d:
ac:f7:42:a9:9c:a2:5c:94:d6:94:a8:44:4b:cf:8b:f3:1f:56:
8d:ac:01:f2:c5:56:8b:35:20:6f:ad:b1:b2:8c:c3:e4:c6:df:
95:18:5f:63:ad:e2:4e:3c:3e:b6:90:f6:09:2a:d5:4d:2b:b8:
ad:7e:b8:ab:1c:f9:c2:7f:cb:1f:e8:64:63:3b:72:39:dc:9e:
73:4f:f6:1e:bc:3b:e2:66:8c:f1:65:8a:08:d4:6a:ac:0f:c9:
9d:23:cb:ab:b9:c6:4f:1f:2c:74:f7:25:62:f9:b4:69:62:63:
06:b4:f8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:58:32 2025 by rpki-client