Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: Dr8xnV0g5G/zfRrK39qouDdxmdYQqVUc+JbR/CZFv9E=
Subject key identifier: D5:75:29:17:9C:39:AC:5A:2E:CC:33:C1:D6:EB:CB:A2:DC:11:00:06
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 019659F0591EE9A9211E60F0513BF5049398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0B93
Signing time: Mon 21 Apr 2025 20:00:45 +0000
Manifest this update: Mon 21 Apr 2025 20:00:45 +0000
Manifest next update: Tue 22 Apr 2025 20:00:45 +0000
Files and hashes: 1: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: aYzbz4VJnq55y7g/OsFY06Rh2DoQds3hqJucDslfxzA=)
2: oOmlEIPuZj-euGQgaSJSIdcSgws.roa (hash: 4HVEBIShSrKuBB15YN2IPkpfbl2tZhoTqa30YNiE+ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:59:1e:e9:a9:21:1e:60:f0:51:3b:f5:04:93:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Apr 21 20:00:45 2025 GMT
Not After : Apr 22 20:00:45 2025 GMT
Subject: CN=d57529179c39ac5a2ecc33c1d6ebcba2dc110006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:b0:d3:94:4f:d8:fd:bf:a9:81:18:c1:5e:
ef:28:5c:51:69:39:a3:a0:8a:13:8c:e5:3d:9a:67:
77:92:72:f0:fd:11:b4:de:9f:49:5b:50:65:64:23:
d3:bd:ef:4d:7a:73:ed:8f:c3:d4:7e:d3:9d:b2:aa:
52:90:6e:b1:3e:34:7b:fa:1f:4a:31:bd:ed:f5:30:
6f:0c:bd:58:b6:7d:10:dd:aa:77:b1:4e:6e:a2:4e:
73:e2:af:42:e0:98:40:bd:79:b1:c2:23:fc:4d:ec:
de:56:ae:37:e6:f4:ef:76:ac:2b:d5:db:78:dc:f9:
44:c6:18:0c:b5:87:bf:44:d8:01:20:d1:fe:f1:e2:
ee:fd:5d:7c:6b:2c:04:13:92:5e:19:7d:58:97:02:
c8:a5:3b:31:e9:df:8f:6b:dc:95:69:d7:c8:d6:c7:
db:0f:86:1d:09:a0:6d:20:22:41:04:b6:90:66:0f:
43:a7:e5:ff:c5:de:4c:28:84:96:ed:d3:a4:43:4d:
6b:a9:f3:c1:6a:db:3e:99:d0:5e:56:0d:fb:45:ef:
eb:cf:87:34:18:21:bd:c8:9f:30:88:91:d7:91:0d:
d0:97:b4:53:24:60:2b:10:80:22:f9:9d:54:a7:38:
6e:a6:da:67:34:63:3b:de:f5:a8:1f:ae:90:fd:70:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:75:29:17:9C:39:AC:5A:2E:CC:33:C1:D6:EB:CB:A2:DC:11:00:06
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:b0:a5:c5:97:40:76:0f:32:4d:3f:be:78:9d:95:7e:29:e4:
e4:67:2f:20:8e:31:51:e7:bd:e6:af:74:d6:1c:71:47:84:60:
ae:95:3c:25:fb:44:17:53:09:91:0e:c4:ec:9f:2d:19:57:83:
db:70:39:df:71:00:1d:31:9e:06:8e:6e:d3:a5:3f:64:84:b8:
b5:bd:7c:5e:5d:14:79:f2:fe:c4:6d:bb:b7:44:5a:4f:dd:41:
ca:97:2a:f8:37:85:d0:be:13:6b:74:7e:e6:61:fe:3b:b1:89:
5c:23:90:71:27:c9:f2:39:d7:1f:71:45:94:f1:05:d0:b1:3e:
54:31:b9:a2:1a:e3:5f:2e:5d:8a:44:f4:10:75:66:32:15:e6:
ff:12:fc:10:87:48:8b:1b:2b:5f:08:b1:27:e0:a9:eb:b0:cb:
aa:0e:70:43:a9:79:0e:7c:c3:1b:51:67:7c:90:98:b3:05:b8:
e1:39:69:07:73:96:73:dd:e2:4a:5c:fa:e5:ed:cf:41:9b:4c:
4b:8f:99:80:5f:8d:5f:65:b4:5f:b4:4a:b9:84:27:59:fc:b0:
7c:06:a6:fa:30:9f:28:16:21:9e:89:0f:43:3e:93:6f:b5:72:
e3:a8:74:d6:e6:33:dc:6b:09:94:6b:31:be:df:1d:86:1a:16:
4a:74:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:15:09 2025 by rpki-client