Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
File: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft (raw, json)
Hash identifier: k/3xNO/y32jkLBIYd2iiqaAmnFtxyybnc53/7vvz8q4=
Subject key identifier: 69:CC:12:2F:9A:20:42:9A:14:AC:DD:92:F1:9B:0A:B8:ED:5C:04:F4
Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
Certificate issuer: /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Certificate serial: 019649D858A654F0BFA65F25165F00ABAAF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
Manifest number: 14FA
Signing time: Fri 18 Apr 2025 17:00:37 +0000
Manifest this update: Fri 18 Apr 2025 17:00:37 +0000
Manifest next update: Sat 19 Apr 2025 17:00:37 +0000
Files and hashes: 1: 27P-M6RaZradAhI02XRCxNJRajc.roa (hash: tTsvmnH5D7n+aX14SSx07+7ZXmYT0c1J8AfGLOoiThg=)
2: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl (hash: cIrcnW56aUvwGhU0jwLWxyeaMyfTNSLMuV4W4kCmq3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:58:a6:54:f0:bf:a6:5f:25:16:5f:00:ab:aa:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Validity
Not Before: Apr 18 17:00:37 2025 GMT
Not After : Apr 19 17:00:37 2025 GMT
Subject: CN=69cc122f9a20429a14acdd92f19b0ab8ed5c04f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:f6:ed:59:63:80:e3:f8:a8:18:8e:4f:a5:
ba:15:24:41:b8:1a:dd:58:49:36:b5:ff:23:b8:a7:
7c:92:0d:b5:0a:e0:59:a4:7f:dc:8e:1c:ca:cf:a8:
20:5a:14:7d:32:97:6d:01:cb:a9:30:e5:af:d4:0c:
c9:02:fb:7d:2e:89:80:d6:94:bb:30:04:0e:5f:bf:
c3:d4:9c:ef:ec:ee:b2:cf:42:a2:97:88:38:03:60:
a3:c8:35:3f:0e:41:e2:46:1e:e1:9a:59:99:cc:40:
e4:cb:49:6d:c4:57:b7:ac:a8:a3:dc:15:ba:c8:60:
79:2c:cd:5d:df:4f:91:99:d6:1b:64:00:d0:1f:89:
1f:5d:8d:4d:5b:27:5e:d8:d0:5a:f4:b6:1b:df:a3:
50:9a:79:51:ae:5b:4d:ed:34:04:99:02:fc:9d:06:
19:93:bb:2b:bb:7e:d0:31:30:3f:67:4e:c5:94:73:
fd:ae:4a:8a:ee:39:3f:c8:d6:d7:65:ef:d8:95:24:
9f:39:87:6d:4d:91:85:71:76:4e:86:9d:63:a3:66:
da:fa:27:64:90:79:a5:77:b8:7b:28:80:9c:42:77:
81:be:6e:2a:58:81:cc:ae:c2:25:fe:4e:1c:f6:79:
16:c3:ce:0c:7d:c9:9b:bd:c0:65:6b:b9:6c:37:a1:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CC:12:2F:9A:20:42:9A:14:AC:DD:92:F1:9B:0A:B8:ED:5C:04:F4
X509v3 Authority Key Identifier:
keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cb:b7:80:f7:72:4f:be:e5:82:97:06:e8:82:c2:b9:05:3c:
65:9b:08:f1:ee:95:d3:de:52:8a:49:40:32:c3:d5:62:98:20:
d0:73:01:e6:56:01:7f:ca:3f:fb:26:4c:5b:20:40:cd:21:42:
ae:db:d5:a6:12:c2:41:6f:3b:72:74:83:c4:bc:cd:54:84:53:
d3:5b:4e:f1:e8:09:bc:45:68:6b:35:b7:38:30:1d:07:d4:39:
59:1e:b6:b8:b7:47:84:9f:cd:6a:e8:4f:e2:46:3f:14:c1:a0:
76:0d:a9:bf:f4:d2:60:fd:bd:f8:fe:4e:c9:db:a3:28:56:21:
38:f5:eb:d9:e1:2a:5e:31:2e:b7:e6:6b:1e:04:47:8d:35:c4:
51:22:7d:34:83:23:5c:34:31:cd:9f:69:fe:54:31:2b:f6:73:
b0:82:92:66:c5:4d:42:ed:96:32:51:a1:54:b9:da:0b:14:67:
88:dc:2d:32:f0:d5:49:3f:20:4a:56:93:68:86:8a:3b:c8:c2:
44:50:32:30:c4:b6:51:5c:07:73:df:ee:ed:5a:dd:8a:8e:d0:
28:fb:ab:7f:4c:b7:bb:f5:46:0c:7e:8b:89:33:8d:33:22:9c:
16:c1:58:f6:7f:63:61:34:01:9b:74:02:11:59:a1:55:7a:c4:
ac:8c:a7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:40 2025 by rpki-client