Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
File: dHIvFqh8_9eP15BQVoobTJWbEiQ.mft (raw, json)
Hash identifier: ms4JaYyJSPbxIV+Ycf9nHIlCY0kZJHLhQpb0EnN+aCA=
Subject key identifier: BE:D1:02:6B:C1:BC:15:04:50:A9:FE:19:18:29:EC:D1:BF:36:86:A3
Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224
Certificate serial: 019654C9DF4269FC02D3F7E4F49863B05403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
Manifest number: 04A3
Signing time: Sun 20 Apr 2025 20:00:38 +0000
Manifest this update: Sun 20 Apr 2025 20:00:38 +0000
Manifest next update: Mon 21 Apr 2025 20:00:38 +0000
Files and hashes: 1: 7ZY1Q8mS5q8z2UfLPJc5K6uKZQo.roa (hash: jj4WM2xy5po+h+orIYLAd72AyCd84wAZcTm4AiOOtow=)
2: dHIvFqh8_9eP15BQVoobTJWbEiQ.crl (hash: 0WYwO/zxIx3pCPpFalgzIoN08yHXnP6IHJpfEBgSnAc=)
3: umqBfoDDAK3jbRiLn4CC-iVGvHg.roa (hash: XnoyZYelLC2MdNI+4AYsdN08BX8Cvr0ms42chjRPStA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:df:42:69:fc:02:d3:f7:e4:f4:98:63:b0:54:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224
Validity
Not Before: Apr 20 20:00:38 2025 GMT
Not After : Apr 21 20:00:38 2025 GMT
Subject: CN=bed1026bc1bc150450a9fe191829ecd1bf3686a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:26:d8:d1:97:16:66:b1:05:44:92:82:4c:
a9:11:b3:4e:7c:c5:5b:23:a6:2b:d4:2d:9b:ba:9b:
7c:06:7d:fe:aa:80:e1:49:27:96:42:5c:df:a0:2d:
fa:f7:c2:51:70:24:4b:cb:a9:c1:7e:29:09:2a:b8:
6c:29:b8:43:e4:44:96:d6:fc:dc:c4:60:b4:f2:cc:
0e:55:a3:d6:21:3e:9e:27:dd:91:f7:ee:ed:90:f9:
0b:eb:27:cd:80:84:13:b5:0a:1b:33:f1:c1:b2:d8:
3e:d6:5c:11:bd:17:32:0d:fe:ae:67:4e:50:3d:ee:
f8:8a:19:dd:0d:b8:aa:79:11:74:3b:dc:91:76:6c:
bf:5a:6c:4d:61:63:7d:e6:98:69:6b:64:19:3d:d8:
49:35:b0:5f:1a:f4:23:ee:f3:e8:77:5f:6d:7e:61:
8e:d5:4a:29:34:38:4d:8e:1c:0c:f6:af:4a:62:86:
51:f2:51:9f:71:ed:60:23:f5:ca:c4:d1:fb:e2:09:
98:d0:6c:e2:5e:e8:4b:67:11:ff:3e:8a:19:52:d9:
a7:3e:65:cb:02:ba:7f:3e:c3:14:a8:a2:fd:1e:06:
33:5a:57:9d:ea:41:98:12:53:da:89:b8:aa:f8:81:
74:1c:14:9b:78:f0:86:13:f1:d7:4e:fd:11:32:72:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D1:02:6B:C1:BC:15:04:50:A9:FE:19:18:29:EC:D1:BF:36:86:A3
X509v3 Authority Key Identifier:
keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ed:27:d2:88:a2:70:1f:66:c2:76:2c:9f:cc:e8:67:11:ca:
b0:75:1e:65:08:55:d5:4e:00:a5:e0:5a:75:e3:62:8c:21:15:
8c:4c:9f:62:d9:00:2d:ea:a3:0e:b6:ca:e6:bc:5a:27:e7:bd:
c8:5c:f1:1a:c2:ec:21:94:d6:43:55:83:0a:63:bb:38:bf:a3:
da:73:84:76:1f:b4:d8:72:85:d7:a6:23:2c:16:cb:74:ad:6f:
39:0f:95:0a:44:86:a2:0a:32:f7:4b:e6:8e:26:f7:35:0f:c6:
49:a8:ac:5c:08:c7:31:be:3a:11:be:ab:24:8e:78:33:0e:77:
d6:65:f4:e2:ef:87:b6:88:33:d2:17:15:22:e1:e4:cb:07:e5:
3b:bc:28:9f:b7:1b:24:b8:bf:6d:fe:ae:30:ee:79:d6:d2:e0:
b6:fa:3a:09:d6:6e:2d:fa:c2:6a:d3:68:1e:a8:15:46:c1:f5:
bf:99:2a:5b:50:f0:8d:89:c0:1c:07:d9:87:cd:16:39:6c:ee:
88:32:88:1b:7b:fd:2d:a5:eb:42:53:a7:ab:4e:c7:7e:e3:e4:
1b:93:27:3d:b3:a2:14:04:b8:bc:01:11:a5:b8:0b:e5:85:17:
d6:fe:8f:03:27:c6:ce:cc:18:bf:87:f2:60:97:13:df:ed:a2:
4c:20:9d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:34 2025 by rpki-client