Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: NU99DUe/0BGMbljx5r4VpDTRzrLRhywz5UvBqN6QoVc=
Subject key identifier: B4:04:A2:40:E9:87:BE:0D:6A:F7:1E:20:8D:72:4E:C0:0A:BF:AC:CD
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 01958C294A8BE8553317C1B0BFA992F040D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 21:01:11 +0000
Manifest this update: Wed 12 Mar 2025 21:01:11 +0000
Manifest next update: Thu 13 Mar 2025 21:01:11 +0000
Files and hashes: 1: OcTgY_TxJBbWYUXl-r4CTTXUle0.roa (hash: 1c7PjEo1UgZPDis6XvL/mHlYibhzZZ7MfR0yuK8HcsA=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: fsLTSUtvy17GLRAiBYyUkDRU8nA7YZp9aFKvcFfOOCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:4a:8b:e8:55:33:17:c1:b0:bf:a9:92:f0:40:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Mar 12 21:01:11 2025 GMT
Not After : Mar 13 21:01:11 2025 GMT
Subject: CN=b404a240e987be0d6af71e208d724ec00abfaccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:57:36:53:a4:ee:15:6a:db:33:b0:11:ce:
42:70:f9:a6:f7:b0:a5:fc:64:25:60:99:49:8f:36:
d4:4a:19:f2:1a:74:78:c8:81:43:dd:f8:3d:dd:9c:
a1:a9:24:6c:f3:fc:5c:f0:7b:38:e2:cc:4b:da:c1:
21:b3:bf:fe:84:3b:45:05:ce:8e:1a:1b:d2:6a:84:
8d:48:72:c8:23:f3:6d:25:16:f0:bd:36:40:d6:46:
fa:7e:c9:bf:34:72:55:49:0b:a5:fd:a9:ee:9c:a3:
50:3e:45:a4:19:e4:93:34:6a:b2:ec:e8:7c:71:cd:
1a:76:07:f9:5c:d8:b7:f5:99:4a:6c:cc:7b:fd:f6:
55:db:b1:a8:00:7e:c0:26:fb:df:50:53:cd:b8:9e:
8e:47:ad:23:58:c8:d4:3b:8c:5b:27:3a:1f:75:b3:
f4:68:0e:86:4c:d1:10:ec:d9:a1:e4:73:e1:77:ff:
c9:55:64:26:59:d7:85:5f:1d:57:87:37:16:6f:8d:
d5:0c:85:a0:04:78:9d:75:1e:15:31:95:4f:04:5d:
23:3f:d4:f6:a7:c6:c9:e5:d4:80:8d:18:57:29:e2:
7f:a1:3f:87:ff:33:4a:37:13:b6:f2:ef:39:b5:ed:
75:16:78:ee:88:89:d6:d9:a8:3b:ae:6e:ad:61:b1:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:04:A2:40:E9:87:BE:0D:6A:F7:1E:20:8D:72:4E:C0:0A:BF:AC:CD
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bc:58:cf:26:12:57:d8:d7:80:9e:41:86:7a:7d:44:bd:a2:
96:c1:37:3e:6c:a3:50:97:af:26:e4:d5:af:a3:4e:b1:61:48:
9f:ca:5d:f8:ef:53:29:73:29:82:ee:cb:30:94:d5:4b:c0:0e:
75:12:d8:1e:51:14:e5:e4:d6:3f:e4:f0:d1:a0:fe:08:d0:30:
04:6c:c5:46:ee:8b:5b:86:08:94:b0:9c:ed:28:c6:17:7c:51:
aa:b2:1a:ea:dc:c5:d7:52:da:c2:2f:27:4b:84:fe:a3:cb:e2:
53:2f:e3:59:f5:c3:4f:08:d0:dc:be:65:77:0d:4b:ff:80:1a:
b1:89:e7:65:42:90:91:aa:a7:d1:c3:ee:c4:14:5e:34:8e:3f:
ee:c4:62:34:ed:ca:05:bb:ef:3c:72:0c:68:7e:99:5a:37:61:
fd:ba:45:76:38:1f:95:57:4a:13:7d:35:8e:0f:05:15:77:61:
aa:e6:37:b8:1b:9f:06:2a:a9:01:a8:f1:75:af:08:6e:31:b4:
b5:ee:af:b3:20:f4:a7:a4:aa:47:92:f2:e2:89:5d:8f:84:a1:
8a:76:15:d9:12:48:4a:57:a0:f7:7f:bb:7e:25:f1:10:07:b9:
7a:c9:52:70:b1:53:6c:d8:d5:c8:7a:18:7d:e7:6e:64:91:c5:
12:ae:aa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:14:31 2025 by rpki-client