Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
File: DWutPz3QrFVvP3qA0cabn9lk3Ww.mft (raw, json)
Hash identifier: q9etyrUhv+JNcXBJvxAA3Wu9OSD2BguZmm+yQbpEasM=
Subject key identifier: 43:F4:B5:6F:8F:75:4F:5F:1F:9F:59:F4:5C:92:02:80:75:9A:58:F7
Authority key identifier: 0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C
Certificate issuer: /CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
Certificate serial: 01965BDE91B4EF5FB54B9B7D067AB341EECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
Manifest number: 0EFD
Signing time: Tue 22 Apr 2025 05:00:35 +0000
Manifest this update: Tue 22 Apr 2025 05:00:35 +0000
Manifest next update: Wed 23 Apr 2025 05:00:35 +0000
Files and hashes: 1: DWutPz3QrFVvP3qA0cabn9lk3Ww.crl (hash: Or6jnCg9iv4ZgV+RPdwNSVWh2dn+16yhddKXn/M+7Qw=)
2: clB1f_NiIoBJs06I1N2ua9KcprY.roa (hash: Hc2uBMDIF+2ALpimHYsk+DChTWTq8OrIlMci+ZWtnyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:91:b4:ef:5f:b5:4b:9b:7d:06:7a:b3:41:ee:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
Validity
Not Before: Apr 22 05:00:35 2025 GMT
Not After : Apr 23 05:00:35 2025 GMT
Subject: CN=43f4b56f8f754f5f1f9f59f45c920280759a58f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:a1:29:f6:77:73:a8:df:9d:5e:a3:13:c2:
ed:f7:6b:e4:9e:bd:58:10:2f:04:54:14:c7:1c:27:
83:e9:2b:47:e6:9d:fe:a5:d7:3d:3e:aa:72:3c:6e:
1f:bc:03:e6:a7:11:e8:b5:9b:34:79:bb:43:79:4c:
c1:84:56:43:82:c8:51:f5:f5:af:e3:2a:fb:a4:1d:
dd:ff:27:be:6f:78:26:63:4f:36:59:d3:91:bc:d3:
44:9e:13:f2:fc:02:d7:8d:d2:3d:44:10:05:5f:21:
ed:c4:d0:7f:60:07:a1:33:e1:a5:81:75:f9:40:3c:
7d:a2:ab:06:93:4b:d9:17:3f:87:0d:0c:45:6c:db:
d6:71:52:dd:fa:f0:d0:94:b5:d0:42:56:f0:d0:c8:
aa:2b:08:c4:9a:12:6f:ca:96:fd:54:c2:a1:3c:26:
e6:25:22:9d:40:aa:88:89:f0:ba:9b:b8:e7:c4:3b:
b9:05:07:c5:7d:89:03:73:72:56:8a:bc:e7:b7:64:
ec:5d:c6:2b:63:05:71:74:a7:70:d3:69:d9:c2:5e:
db:b8:b5:39:c7:84:c7:bc:fa:2f:6e:f6:6b:23:da:
6d:a8:f9:12:79:a0:ee:96:7d:c6:c5:80:8a:9b:32:
19:c7:34:05:a0:c0:35:7e:ce:9b:1e:06:5c:6a:ec:
95:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F4:B5:6F:8F:75:4F:5F:1F:9F:59:F4:5C:92:02:80:75:9A:58:F7
X509v3 Authority Key Identifier:
keyid:0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:42:f7:ff:ad:43:b6:bb:e2:28:c2:4a:48:1d:8c:7e:b4:c6:
f7:bd:fb:52:ee:be:d4:33:f7:49:cb:32:e3:4f:53:bf:ae:f6:
9d:fc:65:9d:8a:10:18:65:fe:c1:9d:97:ca:69:21:7e:fe:b8:
bf:e5:b8:63:a2:ee:ac:b7:8b:fe:9a:2e:df:44:d2:85:59:f9:
f2:1b:03:9d:6c:10:4d:77:9d:18:4b:56:7e:d5:a7:35:d7:01:
c3:d4:46:3a:94:fd:8b:4c:97:82:e0:20:2d:54:e5:74:e7:2a:
11:bd:19:e6:5f:ca:88:7b:ef:e8:95:87:2a:41:50:cd:c6:09:
12:c0:48:7e:80:d8:66:57:c9:f4:0b:78:cc:b4:6b:f6:d2:ef:
36:b5:a6:d7:57:ae:08:ce:3a:0e:69:6e:02:7e:ef:fc:01:2d:
88:ff:3a:64:dc:9e:3b:8d:3d:85:d3:aa:10:70:19:34:6a:db:
c5:f8:0a:31:84:56:10:1a:16:cd:f9:a5:31:b2:fb:1a:4f:bc:
10:21:67:67:c2:1a:c6:48:93:65:52:6e:c4:2f:0e:68:f4:d5:
f3:ae:11:41:09:8c:81:52:85:8e:6e:03:43:3e:c6:b3:9f:14:
d0:5f:db:61:1b:38:2d:77:0b:1d:0a:33:ac:aa:78:1a:90:f6:
12:b2:3b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:02:14 2025 by rpki-client