Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier: Emb/WOMgmRP6N0G3dfFsVMg2RW8W3wNnDt0TLXPSXPc=
Subject key identifier: 49:2F:46:CC:2A:39:A5:5D:1F:B3:84:A2:C1:99:50:D0:33:05:CF:1A
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 019653B70D0F88909DD512EA6E74543D9D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 15:00:27 +0000
Manifest this update: Sun 20 Apr 2025 15:00:27 +0000
Manifest next update: Mon 21 Apr 2025 15:00:27 +0000
Files and hashes: 1: 00qMnebnoQ1q-0QpuHNtB2jC8kw.roa (hash: eM8vkjcd9zZftIcrd2HQLTAzDHkkoGlg8veiHLYFAc4=)
2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: DEI2ZelpO4pNs/Q/Etrtn4wjTCNibE4R+ENorRihr/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:0d:0f:88:90:9d:d5:12:ea:6e:74:54:3d:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Apr 20 15:00:27 2025 GMT
Not After : Apr 21 15:00:27 2025 GMT
Subject: CN=492f46cc2a39a55d1fb384a2c19950d03305cf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:03:c8:73:e9:c1:8a:2b:2f:7f:1e:da:a8:
92:85:e1:5d:d5:e6:97:11:13:29:49:b7:7d:7c:4b:
36:db:11:6a:28:59:65:a7:3f:22:68:81:ad:65:51:
f2:c4:b2:84:fc:99:7a:93:8c:43:c1:27:c4:68:b5:
93:69:9f:e4:67:9f:e5:36:4c:32:45:aa:fe:01:e2:
c9:93:db:2d:52:ed:51:b7:37:66:4f:ca:9c:2a:08:
dd:a0:5f:2f:2e:99:a4:7f:54:65:7c:49:21:a6:1a:
96:85:ff:ea:a4:18:f8:77:43:f0:de:47:4c:27:66:
ac:05:1f:8c:b6:e2:0e:ac:e3:d1:d3:05:db:33:75:
20:5e:8f:07:b7:24:5d:be:6a:fd:08:c0:52:72:42:
2c:bc:24:68:57:9c:2f:c5:88:6a:39:90:89:b2:c0:
1f:b5:d3:1c:8a:48:50:ff:ed:1b:f7:91:8b:95:da:
e5:4c:b0:21:d0:50:4e:40:0f:8e:f8:2f:a8:8c:2b:
4b:e6:e9:7c:68:3c:1c:8b:28:b3:ab:4f:f6:4d:33:
84:f3:d6:94:07:2b:6d:e7:30:93:0d:e0:b5:ba:da:
5e:74:5f:f5:96:07:5b:ee:30:9b:e9:63:cc:05:24:
b7:44:3a:cf:71:de:75:47:bf:9f:69:4b:5c:df:77:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2F:46:CC:2A:39:A5:5D:1F:B3:84:A2:C1:99:50:D0:33:05:CF:1A
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8f:a7:d6:3b:5e:cf:a2:f7:7b:36:89:d7:43:07:7d:07:31:
cb:74:d6:92:e7:49:31:f0:be:97:6b:a0:af:59:5e:66:68:ec:
c8:59:15:70:44:e4:45:23:5e:df:2f:f8:e8:37:ac:59:86:18:
ba:e3:ba:e0:79:d2:99:cf:85:78:74:2f:f5:13:39:a4:15:3c:
42:ae:22:eb:11:82:79:be:cc:bc:3f:5f:8d:b7:8e:9e:17:bb:
b2:49:2f:8c:ab:05:a7:48:46:e1:ac:f6:e7:78:db:e8:ca:1c:
6f:00:d5:1d:48:c8:83:a5:15:ff:9b:b2:17:ed:2f:97:cd:a5:
06:ac:b5:f4:5e:48:f1:9e:e1:c7:e4:01:52:aa:24:5f:e3:c0:
19:8c:44:81:04:36:9f:c2:a7:59:4d:3d:b9:a2:36:80:4f:97:
ff:47:d2:09:3e:35:09:48:b1:e1:c7:0b:df:56:d1:99:c0:c4:
e5:20:fd:8e:8f:75:11:9e:0e:65:ff:3e:5a:a9:cc:f9:81:11:
76:db:4a:d0:86:1a:07:29:c6:e9:28:44:1d:93:de:9a:3e:f6:
a8:f6:29:ab:68:fa:43:fe:18:fc:69:5d:72:b5:88:87:3d:1d:
b9:67:d7:ac:0e:f5:0f:3c:61:2e:b6:73:5e:a7:04:a0:da:9b:
17:53:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:11 2025 by rpki-client