Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: NK4iL2O/tnLKdfMEYpeKsfrEYMTtBApJCoT9Dda8F+U=
Subject key identifier: B7:3E:10:EF:3F:35:F2:4C:FD:FB:40:23:AE:A5:3E:7F:BB:F1:5A:21
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 01963CC11F6018E4882DD982AAB6222EDD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 0607
Signing time: Wed 16 Apr 2025 04:00:11 +0000
Manifest this update: Wed 16 Apr 2025 04:00:11 +0000
Manifest next update: Thu 17 Apr 2025 04:00:11 +0000
Files and hashes: 1: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: qvrSTVX+g1EMr8uMsszcHKc6gKu//X+Y53cqIXXvtOM=)
2: dHoLxhcoAEUuRvCDtuAMppchNpk.roa (hash: u7XKc4RK1KVYd/fCuO1odA9687+dNJirNjEcVK4j3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:c1:1f:60:18:e4:88:2d:d9:82:aa:b6:22:2e:dd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: Apr 16 04:00:11 2025 GMT
Not After : Apr 17 04:00:11 2025 GMT
Subject: CN=b73e10ef3f35f24cfdfb4023aea53e7fbbf15a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:f9:88:0b:19:c9:94:d5:f5:b1:06:3b:71:
2a:db:d1:6a:34:cc:20:58:f0:fa:3f:b6:87:1b:fc:
b7:89:d2:65:20:ed:8e:af:d1:46:5c:30:ac:3f:42:
4f:a8:7a:f4:4f:48:e6:5b:51:ff:bb:f8:aa:c2:fd:
04:f7:ff:02:8b:f5:7b:bd:73:fb:1d:8d:a1:a8:ee:
46:23:5b:7f:b8:af:57:39:cd:0e:3b:65:4a:ed:cb:
20:5e:21:22:24:5e:7c:cc:a6:f8:87:ca:57:3c:57:
8d:43:c7:5d:df:d7:56:10:1d:17:4b:36:f6:32:77:
55:09:d6:02:87:7f:7a:13:13:b4:90:85:e4:02:51:
64:90:60:3e:d3:34:d2:35:ad:e9:42:84:b8:fb:77:
39:57:97:fb:31:16:f6:ff:3b:60:b9:03:43:0c:46:
d6:de:0f:33:54:d9:4d:9f:0d:14:93:40:e5:c4:16:
71:19:de:35:9f:c5:c9:e4:c8:1c:5c:b1:b2:e7:f0:
af:09:4b:9b:dd:c6:1b:13:12:f3:0c:ff:40:ad:e2:
53:93:9b:ef:49:f5:0b:d1:9d:eb:ea:31:1e:b9:af:
89:44:1e:3a:1c:c8:e8:28:ef:6f:55:11:77:90:79:
25:88:8c:2c:ca:52:f8:a0:73:82:3d:2a:7f:0c:80:
eb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3E:10:EF:3F:35:F2:4C:FD:FB:40:23:AE:A5:3E:7F:BB:F1:5A:21
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a9:30:b3:a9:7f:16:8c:00:d8:88:97:da:9e:fe:73:eb:ce:
f1:64:1c:55:81:89:aa:bc:45:7d:c3:0e:d9:7f:e9:66:76:78:
85:5a:6e:6f:9b:d3:43:25:ee:33:48:49:c1:42:a0:89:e4:1d:
3a:da:90:20:38:41:f7:ec:79:dc:6f:98:c4:c3:9f:cf:ef:28:
eb:73:90:ec:e3:06:28:da:51:ad:f7:b4:57:3f:f6:4c:6f:ab:
61:bc:98:65:e5:33:6a:48:6d:c2:25:3c:93:78:0f:2a:c2:da:
ff:cf:bb:67:e3:e3:d7:11:bc:8a:31:05:2c:40:34:ce:f7:87:
fa:dd:99:97:c4:1c:3c:53:f2:cd:58:3a:78:ec:73:d3:89:10:
2a:9c:9b:e4:f0:78:f0:05:70:12:64:33:bc:63:fb:ea:21:0e:
c0:e5:60:86:d6:7f:f9:b7:a7:a0:5a:2c:ce:b2:a1:0f:14:44:
c3:01:65:4e:80:87:43:f1:64:8b:5d:61:3e:e7:61:2f:ce:d8:
10:70:30:97:b5:d9:b8:d1:71:a6:1f:3a:7f:61:6f:4b:30:fc:
10:46:53:ce:1f:47:04:26:2e:d4:7d:27:20:a7:34:62:d8:6b:
13:76:bc:20:3f:e4:50:de:47:72:62:b4:9e:a2:5d:a8:d5:64:
e1:8f:6b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:53:28 2025 by rpki-client