Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File: V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier: /C+4z2k5OQEpczMw6p4KdAUOe/80XMrg/4hOWWdji60=
Subject key identifier: 1B:6F:DA:07:71:AA:41:31:B0:97:34:7D:DC:A0:8E:E5:60:66:AC:9B
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer: /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial: 01964556B8BE7166ECEC3F16AB54270F76CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number: 021E
Signing time: Thu 17 Apr 2025 20:00:33 +0000
Manifest this update: Thu 17 Apr 2025 20:00:33 +0000
Manifest next update: Fri 18 Apr 2025 20:00:33 +0000
Files and hashes: 1: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: p7qsBk8UQIkBbkpkYgmcjueKG97h+OfVdNCNIOVu48Y=)
2: Vsy2tppwZlto33QPcfaHiVfHozM.roa (hash: 18caMVQ1E5BJKp7FjnT6unU3mICAktVVg2IQqu7LHxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:b8:be:71:66:ec:ec:3f:16:ab:54:27:0f:76:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
Validity
Not Before: Apr 17 20:00:33 2025 GMT
Not After : Apr 18 20:00:33 2025 GMT
Subject: CN=1b6fda0771aa4131b097347ddca08ee56066ac9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:1d:1d:0e:04:de:47:d5:82:7e:9e:4f:59:
77:c3:54:f2:83:8a:c4:8b:29:67:63:df:24:9b:91:
aa:7c:e5:c0:56:0e:bd:af:39:e1:ea:b3:85:4d:90:
ba:f1:dc:48:45:fa:39:0b:e8:4b:d6:3a:84:4e:e7:
e6:31:cc:c2:9c:f0:78:85:91:bf:b8:63:a8:28:84:
f8:5a:49:7e:06:7e:ae:94:2c:55:65:f8:8c:5c:a3:
ad:9b:3d:f8:f7:ed:e6:65:66:1c:5b:d3:b8:8a:78:
61:30:ef:1d:68:f9:6d:55:a8:73:37:e4:47:a0:f1:
75:b9:7f:38:02:48:dd:bc:46:1b:6d:95:e8:d1:da:
b8:df:5f:69:da:93:a3:5f:51:7e:b2:5c:0e:fc:b2:
69:4e:24:12:cc:65:e4:6b:e3:36:e0:19:2e:4e:fc:
3d:d5:24:e4:a1:aa:8f:c0:3c:34:71:95:2a:8b:8c:
d0:98:83:7c:78:70:0a:11:7e:67:7d:da:f1:24:eb:
0c:3e:d5:c0:91:43:ec:e0:d2:bc:8f:66:48:1d:79:
02:a9:96:f1:db:ca:c9:82:62:55:1e:b1:08:41:55:
ad:c1:e5:06:e4:65:c0:e5:b7:f8:5b:0d:52:d7:f3:
fe:9f:c6:19:a4:9a:90:cd:bd:39:b3:1b:c6:61:76:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6F:DA:07:71:AA:41:31:B0:97:34:7D:DC:A0:8E:E5:60:66:AC:9B
X509v3 Authority Key Identifier:
keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5e:1c:3c:11:17:f2:4c:64:e1:ba:3d:e9:0a:a4:ac:3c:20:
cc:33:b5:6e:d0:f3:b1:79:e1:e2:de:cc:7d:4d:f0:a5:60:88:
ca:6c:2e:0d:07:a4:74:17:70:f0:5f:ec:bb:29:0a:87:03:3c:
6a:31:a9:a5:8a:f1:1d:1f:69:5c:66:17:ca:2f:c5:da:05:1c:
b5:cb:7d:87:e4:b9:7b:d0:ed:ee:a1:4d:5d:ea:a3:c2:35:cb:
85:38:7b:ce:1f:42:e0:fb:b5:f0:92:da:85:44:8e:c8:e3:b0:
07:97:b3:70:3d:3e:e6:14:99:60:3e:ea:3e:04:51:d4:9b:a4:
6d:a0:27:68:2b:4c:54:7d:06:0e:19:45:03:25:16:38:f1:94:
cc:c1:27:2e:9e:9b:47:d6:6b:8e:7b:59:bb:16:ce:87:ac:39:
f5:6c:29:27:f7:1a:c9:58:42:22:a5:8b:39:70:91:0d:28:76:
4b:68:a8:6d:6f:bf:ac:ce:2b:a1:9c:f6:d9:c8:70:9e:74:07:
3c:93:81:06:f2:fa:35:f2:fe:e0:7e:95:1d:26:89:fc:ba:2b:
11:b2:e3:d5:e5:15:d4:0b:b8:fc:c7:44:0e:b8:be:11:21:60:
8c:4c:24:9d:16:78:1f:af:19:2e:29:6e:93:61:2c:85:bb:28:
26:32:78:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:52 2025 by rpki-client