Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
File: DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json)
Hash identifier: 2L1K9k9OnpYp3CdX1T9TFwPbVMF1KE1QnwStjgOIYQ0=
Subject key identifier: 3E:EF:74:53:0C:EE:76:2A:14:F3:73:96:BC:11:9A:BD:6D:C9:84:77
Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
Certificate issuer: /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Certificate serial: 019611A1C81158A2DD17CDCB734902FC77D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
Manifest number: 142C
Signing time: Mon 07 Apr 2025 19:02:17 +0000
Manifest this update: Mon 07 Apr 2025 19:02:17 +0000
Manifest next update: Tue 08 Apr 2025 19:02:17 +0000
Files and hashes: 1: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: xojPLQe/+KXu2S/L3WAES/7ajzHsZ7QJLGPg7mLCdrM=)
2: zD8lanFfCKcjzXb5ZLkO_uI8Eww.roa (hash: FP/b4ehPHpPPt6ISCHNjh4J5r42QMToe0aZbLviIqX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:c8:11:58:a2:dd:17:cd:cb:73:49:02:fc:77:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Validity
Not Before: Apr 7 19:02:17 2025 GMT
Not After : Apr 8 19:02:17 2025 GMT
Subject: CN=3eef74530cee762a14f37396bc119abd6dc98477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:09:ae:ad:3a:8a:61:1c:99:6c:09:5c:6e:88:
be:7d:7d:6f:da:64:c8:6b:01:67:29:f1:ae:24:ca:
2d:9e:60:6a:d5:39:28:92:28:e0:be:7a:63:3a:ec:
48:b9:c0:88:20:9a:61:b3:38:3f:b7:af:fa:0f:2b:
1b:53:b5:7f:64:38:f1:28:03:c0:2d:d4:28:e2:00:
86:06:69:f2:4a:df:f2:d5:0b:7c:f6:c9:6c:18:d0:
5d:31:98:2a:3a:bd:cd:f7:14:d7:5a:8b:99:8c:3d:
1a:d1:77:38:0e:3b:54:b8:7e:e1:97:82:4f:b0:34:
0d:f3:f7:83:85:59:d1:26:7e:7e:bc:f0:75:c0:98:
5a:c6:39:70:2d:be:0c:9a:90:92:ba:95:6a:3b:e3:
35:ac:01:74:b8:6f:31:14:ad:cf:99:c4:2a:b0:8f:
c4:05:79:e8:4f:18:35:68:b4:e9:75:04:6d:dc:b4:
91:4a:d0:ef:21:44:37:6d:84:b2:cd:f0:24:d4:06:
2f:ab:cf:53:18:f9:83:03:71:24:35:a2:60:b3:a1:
60:be:3c:ba:b0:c0:aa:b7:95:7a:01:26:98:3b:2a:
b3:89:f0:25:03:51:37:d1:db:81:43:2d:e8:bf:3f:
71:c4:69:e7:9f:04:c4:4c:37:da:e3:27:4a:71:cf:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:74:53:0C:EE:76:2A:14:F3:73:96:BC:11:9A:BD:6D:C9:84:77
X509v3 Authority Key Identifier:
keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e6:3b:fd:cc:a5:9d:05:e4:ac:71:fe:09:0a:ee:6e:ca:a5:
49:03:58:f2:32:c4:be:f6:04:95:19:ae:f4:d9:24:68:55:03:
9f:4b:17:b4:29:19:32:db:5a:53:ae:5d:da:25:fa:db:5d:32:
af:26:ca:f9:5b:75:6f:08:24:b3:35:74:7f:dc:a6:56:d9:77:
d2:04:b2:f1:1e:c2:19:a5:2e:11:99:12:d4:23:54:e5:68:db:
8f:37:0e:a0:5e:36:73:46:09:ac:74:9d:0b:38:50:58:96:81:
cf:30:3f:47:53:f3:fc:c3:9b:2e:cd:82:0e:97:d7:d9:c6:2e:
cd:da:af:4d:11:f1:f2:75:84:7c:ab:ae:86:fd:28:55:e1:6c:
42:1c:ea:e4:42:39:5b:ce:32:dd:a4:b4:62:6e:a0:48:29:bb:
6f:70:52:50:88:75:e5:40:cf:fa:b0:0c:99:67:55:12:44:1e:
b7:8c:18:02:d2:15:da:71:1a:93:25:fc:ff:b0:65:fa:5c:7d:
56:a0:72:92:fb:a0:7f:f1:5f:48:3e:3d:8d:ac:24:7a:a7:e2:
e6:18:7e:fc:f6:83:9c:8f:06:31:cd:e7:1e:f1:49:1e:09:82:
76:37:6a:e0:1b:94:9c:00:0c:4d:c8:b8:4a:72:23:5d:48:1c:
ba:89:0b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:35:23 2025 by rpki-client