Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
File: duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft (raw, json)
Hash identifier: yyexAozmC6bKBl61QgThvWfL8TWS81lGB+N8l4ILHmE=
Subject key identifier: 6C:14:DD:C9:03:5E:5F:14:87:19:49:7F:E2:4E:7D:9F:8C:35:6D:2B
Authority key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
Certificate issuer: /CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Certificate serial: 01964A7D37D3043FE364DB04902512B4ED52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
Manifest number: 14F6
Signing time: Fri 18 Apr 2025 20:00:42 +0000
Manifest this update: Fri 18 Apr 2025 20:00:42 +0000
Manifest next update: Sat 19 Apr 2025 20:00:42 +0000
Files and hashes: 1: duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl (hash: bTNNeeVZULSQjo+XNzOmD1/IIf5+cWieOLwLtIXh1yU=)
2: x6TyoeiDznZ5SRtqywkNMGfQA5k.roa (hash: 1tj6LlfsRsB/tYIfqw9rOc/KrLH+6NOSUXP1XdEdR5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:37:d3:04:3f:e3:64:db:04:90:25:12:b4:ed:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Validity
Not Before: Apr 18 20:00:42 2025 GMT
Not After : Apr 19 20:00:42 2025 GMT
Subject: CN=6c14ddc9035e5f148719497fe24e7d9f8c356d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:e0:2b:f9:05:ca:bf:47:b3:54:64:8b:97:
6a:3a:c5:d6:c4:32:da:3c:8a:6e:3e:79:a3:c5:86:
63:d4:92:ab:de:43:d2:21:12:ff:4b:b9:0a:5e:85:
97:8a:62:b1:ef:14:2b:65:65:ba:8e:be:99:da:97:
39:92:d6:ed:0c:31:c9:fb:f4:42:4a:53:2e:13:d6:
c4:2d:e1:35:02:61:7f:7c:91:a8:a1:b0:f4:66:63:
8c:e9:55:1d:b8:63:ba:bc:4e:f6:f6:90:b8:e2:67:
36:fd:6b:13:2d:82:cf:89:8e:75:18:ec:16:2b:f1:
46:8c:88:5e:2d:af:3e:08:cb:a1:94:18:93:7c:cc:
71:0a:93:42:1f:39:72:0b:42:63:7a:ab:ff:c6:73:
d9:4a:0c:bf:74:3c:2d:75:4d:17:1f:9f:0a:20:f3:
c0:b1:fe:0a:8f:0d:f8:e7:c1:ef:64:e4:34:93:81:
fc:0e:3f:5e:3a:5c:ac:83:65:3c:da:f9:d6:1c:05:
41:ed:d9:79:92:cf:85:19:5c:17:f2:06:ef:ed:49:
87:2b:c7:0b:18:73:14:d6:89:59:7a:06:ef:0b:91:
eb:55:0c:7e:bc:99:3e:23:7e:70:36:fe:f9:65:ec:
46:ff:8a:b7:0e:69:4b:f0:22:f7:6c:55:9f:50:5b:
86:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:14:DD:C9:03:5E:5F:14:87:19:49:7F:E2:4E:7D:9F:8C:35:6D:2B
X509v3 Authority Key Identifier:
keyid:76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:43:96:01:81:09:ef:23:0f:a5:d0:46:ad:09:04:27:93:41:
f8:ec:0f:85:e9:6a:64:93:e0:7d:6a:e7:21:fa:8c:23:c9:54:
94:b3:26:2e:49:fe:96:c4:dc:b9:91:74:4a:c0:c3:99:c9:58:
ae:8e:83:bf:56:02:ad:cf:04:64:e5:6b:8c:27:43:60:0b:00:
16:6c:4c:8c:1e:c9:64:c3:67:88:9a:75:05:a9:9f:92:ca:24:
7f:6a:d6:5a:ba:92:4a:51:7a:bd:d6:bc:89:a8:e1:e1:e5:60:
45:db:68:d7:62:f4:a4:87:f9:13:25:41:e5:65:00:a9:a1:b8:
4f:a1:45:12:d2:91:52:ad:ce:c4:26:be:36:aa:00:c7:96:40:
3b:dd:57:73:f5:ac:94:09:4d:34:47:08:b1:2d:32:8a:38:1e:
e4:09:de:47:e5:ae:ca:58:e8:2d:84:b3:7d:f9:0a:0e:63:32:
b1:da:e3:05:1e:f6:d4:ea:6a:ac:52:ae:c5:de:69:fa:de:6a:
48:e2:b7:24:a0:35:74:a5:b3:0d:f5:02:71:7d:b9:6c:b0:68:
07:e6:17:4e:c5:4b:4f:cb:f3:3f:49:c8:84:29:57:67:e4:9e:
d9:eb:9a:48:80:74:31:17:3a:58:81:08:1d:6f:de:66:10:ca:
47:03:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:12:10 2025 by rpki-client