Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: MZAwZmYuM87uHhtbrbJUs0TUmeVrm2xCg6u+YMs17CA=
Subject key identifier: 69:3A:84:1F:73:44:D8:48:F4:CA:0D:3F:47:DB:2A:D1:98:D1:E7:A3
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 019602649CEC2D5338F96CD1013AB757F840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 14D1
Signing time: Fri 04 Apr 2025 20:01:10 +0000
Manifest this update: Fri 04 Apr 2025 20:01:10 +0000
Manifest next update: Sat 05 Apr 2025 20:01:10 +0000
Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: F/r5iUnIstFP16Z4hDmC1m700ddVuZS0Y3zeBakfugA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:64:9c:ec:2d:53:38:f9:6c:d1:01:3a:b7:57:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Apr 4 20:01:10 2025 GMT
Not After : Apr 5 20:01:10 2025 GMT
Subject: CN=693a841f7344d848f4ca0d3f47db2ad198d1e7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:45:f9:4a:a7:54:36:8b:68:94:11:3d:b0:
ef:6f:42:0c:41:11:b3:19:d8:8a:3f:d3:00:fd:f6:
72:29:f2:91:16:f3:98:46:4f:54:14:10:f5:f6:e0:
16:77:38:53:63:7c:27:cd:eb:b3:96:60:3e:83:fc:
d9:40:51:86:4a:fa:a3:e8:2d:9f:f0:55:fc:c7:94:
a4:7f:52:6a:e5:05:0a:19:5d:b6:7b:c0:7a:f8:92:
34:03:bd:c3:08:db:75:62:b8:08:10:d0:b9:bf:aa:
a7:74:86:f2:0a:ae:04:bb:83:5d:51:af:a7:e5:9d:
7a:88:a1:c5:7f:3c:78:df:ff:c2:93:6f:f4:3a:d7:
ee:1f:cf:d9:de:5f:8d:21:a7:22:52:3a:3c:d0:46:
3b:be:46:61:33:f3:ac:c2:d5:28:83:6b:ec:85:2b:
bb:07:a5:0d:07:36:3c:ee:be:02:76:2c:0c:f6:89:
2d:d1:e0:c7:b9:59:9f:39:69:cc:08:42:c8:ab:33:
c0:f2:d9:d4:27:7c:80:b3:e7:47:40:0d:76:a4:08:
f9:2f:ba:51:58:cf:4f:d4:ff:03:d7:e7:7a:a2:22:
70:88:46:cd:ff:81:25:2b:f6:da:00:03:f1:6a:bf:
89:50:38:6d:bb:67:ae:b7:07:3b:fd:02:ff:b2:da:
dd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:84:1F:73:44:D8:48:F4:CA:0D:3F:47:DB:2A:D1:98:D1:E7:A3
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7d:1f:9e:bb:62:d2:eb:eb:f5:c7:84:f0:d5:da:75:7e:84:
f8:c8:b5:65:f7:14:53:ef:bb:47:60:09:e7:b6:e2:3b:2d:a3:
9c:1e:62:d9:d8:c1:95:cf:17:8b:06:cc:70:59:96:5c:1c:31:
62:44:6f:0f:d1:88:fe:9f:9d:d7:2a:bd:dd:57:40:11:72:03:
7e:3d:f8:18:48:23:89:bd:f8:87:08:f4:95:c2:62:36:d2:83:
de:1d:59:99:f4:7e:a7:b0:42:d5:a5:c6:75:3d:81:9f:39:e5:
fe:be:7d:79:f3:06:c1:42:85:a5:48:57:6c:cd:85:38:e9:70:
ac:78:7f:b0:e4:a7:bc:d6:13:b9:3a:03:13:51:c4:4e:b5:6b:
fd:57:bc:dc:3e:8a:bd:33:90:45:a6:13:e4:be:11:a9:86:cd:
82:d3:c1:6f:a7:f1:0f:17:1b:49:97:6c:7d:e9:1b:c6:76:2f:
ab:f7:f6:4f:fe:18:4b:be:5e:c2:b6:d2:9e:01:52:66:97:6a:
03:5c:07:0c:9a:e8:68:21:2c:7c:0a:bc:16:93:75:f7:5a:d6:
04:a2:c0:d8:b7:61:71:db:38:42:aa:29:d5:7d:c1:35:81:1f:
7a:a4:44:57:85:6b:6c:63:2e:0f:5c:c0:8c:f4:c7:fd:3f:15:
64:83:0c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:27 2025 by rpki-client