Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
File: aDjbfmmRJ9pMHFpek_RPMCtihjs.mft (raw, json)
Hash identifier: Xjy0oh7dyVfa6oD66PpyH+fS3GNc+tgegTUGJuFB1Bg=
Subject key identifier: 78:90:F7:90:F0:2C:DA:CE:18:AE:E4:3C:E9:6B:43:40:BC:CD:88:DF
Authority key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
Certificate issuer: /CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Certificate serial: 019613FD5E949842DCD4DC5271DA2A19E805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
Manifest number: 14DB
Signing time: Tue 08 Apr 2025 06:01:33 +0000
Manifest this update: Tue 08 Apr 2025 06:01:33 +0000
Manifest next update: Wed 09 Apr 2025 06:01:33 +0000
Files and hashes: 1: aDjbfmmRJ9pMHFpek_RPMCtihjs.crl (hash: KG1npCoDZTU0x86zFt99u1b+In/VRV8mycYvM5HyuUY=)
2: ndozZxXsqqvoYlnvn2R8eG6q9WM.roa (hash: J/bxB2F1VD9ABMhf1I4cZo/1cjeHrt4Cto7ZdYkPM28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:fd:5e:94:98:42:dc:d4:dc:52:71:da:2a:19:e8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Validity
Not Before: Apr 8 06:01:33 2025 GMT
Not After : Apr 9 06:01:33 2025 GMT
Subject: CN=7890f790f02cdace18aee43ce96b4340bccd88df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:b9:3a:66:24:5e:13:bc:f5:2e:e8:00:f6:
78:c5:ad:79:85:f1:56:4d:c2:36:ad:7f:3c:b3:c5:
9e:d2:b4:42:6f:e3:62:c5:5a:f1:ad:2c:be:f1:5a:
b9:cf:72:a1:62:ee:ea:c8:2b:9c:7b:48:08:0f:d2:
2a:8f:b1:97:58:5a:b1:c5:17:13:75:3e:a9:4a:98:
f0:95:83:b3:f3:40:ce:a5:be:04:21:ac:cc:24:da:
99:6d:70:3d:fc:57:cc:20:0f:fe:e2:b0:dd:d9:ac:
ca:a4:99:3e:9b:b1:14:ef:01:84:b3:6f:a3:88:90:
cb:40:93:f5:ed:5a:ca:36:d8:2c:69:e4:3d:b1:c9:
ed:3d:74:08:0e:26:ef:31:37:e4:f0:4e:db:23:f2:
e4:07:49:55:06:83:75:70:c9:2f:91:a2:70:7a:49:
26:de:6d:09:9d:e8:5a:7f:9e:95:5f:cb:48:60:98:
0f:74:4f:5c:dc:32:9a:b3:99:38:70:db:7b:65:58:
34:8d:50:d9:12:8f:8e:85:a9:e1:5b:51:f5:00:d6:
45:77:27:9e:b6:d0:46:c8:55:9b:42:a9:4c:2d:20:
f3:c0:57:26:4a:00:01:e3:4d:45:d4:3a:79:77:58:
1e:41:43:70:91:23:d8:55:76:78:fd:6d:d9:5a:ce:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:F7:90:F0:2C:DA:CE:18:AE:E4:3C:E9:6B:43:40:BC:CD:88:DF
X509v3 Authority Key Identifier:
keyid:68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e3:dc:ef:9b:eb:19:ec:9f:f7:58:54:a9:d5:fe:74:c5:60:
44:69:9a:0e:25:42:80:ef:cb:80:f8:11:4f:49:73:82:fe:91:
f0:4b:66:5b:b2:82:90:ca:25:3b:70:2a:17:b2:fc:ed:1d:67:
00:52:1e:36:64:c2:a6:9f:19:35:03:f6:90:98:b1:c4:86:b6:
dd:c6:13:ca:58:bc:f2:7a:57:5a:12:2c:98:5d:f4:89:99:93:
8c:fb:b0:e9:da:91:51:5c:55:bc:a0:28:83:5e:f0:62:32:05:
ec:f5:0f:26:8f:e1:e3:03:30:b1:93:87:34:7c:39:50:46:3f:
db:7a:c5:ac:3c:5f:7c:92:50:5a:2e:c8:f9:c0:82:49:84:79:
72:3c:1d:86:f3:8f:d3:82:8d:f3:16:94:e1:4d:da:58:bd:9a:
df:3e:58:51:be:74:e5:8e:94:26:95:33:ef:82:69:f5:d3:b0:
ad:04:9e:03:49:14:a5:fe:20:0e:ea:75:7d:0a:c1:10:9d:28:
26:1c:1c:75:2e:e6:3b:46:9d:69:1e:50:8c:42:8a:8e:a0:48:
cf:e0:de:3f:4f:5c:a6:3b:c7:de:40:73:0f:04:f2:9e:55:2b:
d5:7f:7d:01:b8:7c:4f:d9:96:94:62:e4:31:3b:43:05:00:14:
06:cd:80:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:32:45 2025 by rpki-client