Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: WrSbrpfGLmITSEHt/24GXV8nRwuH7+UXQ9f8Gpsylb0=
Subject key identifier: EF:95:86:15:2D:D5:4A:B6:B3:52:F6:26:4B:5C:5C:05:5E:A5:71:74
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 01965A94A54BEBD6C22D1E94698B182E9D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 1400
Signing time: Mon 21 Apr 2025 23:00:13 +0000
Manifest this update: Mon 21 Apr 2025 23:00:13 +0000
Manifest next update: Tue 22 Apr 2025 23:00:13 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: iQHSOEy/N6sUg7PsZCgbx+ZBvv/qM4A6hBr3tOFOFQQ=)
2: Eer6xNymX3hjdLEe5t0VeQLmAtQ.roa (hash: tC0bkcDHkroTK3NaBXSh9RDfJ1UlKylYr53Yt+96KUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:a5:4b:eb:d6:c2:2d:1e:94:69:8b:18:2e:9d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Apr 21 23:00:13 2025 GMT
Not After : Apr 22 23:00:13 2025 GMT
Subject: CN=ef9586152dd54ab6b352f6264b5c5c055ea57174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:6c:a4:ab:b9:57:ea:ae:da:ec:da:a7:5f:
2e:64:2d:79:c1:7b:23:8d:c8:e7:00:fb:11:9b:26:
9c:79:9c:b8:c7:93:20:0d:51:1d:1d:5a:f3:a9:5c:
46:72:49:52:6e:e8:8d:ce:42:99:04:ce:66:1b:7c:
dc:53:23:f6:8f:bc:3d:aa:2a:ed:2d:e3:40:b2:df:
0d:3b:d8:be:90:5e:5a:92:09:44:5d:9f:48:c2:f5:
9f:53:a4:bf:7f:0b:48:bc:75:af:91:ee:55:cb:1f:
80:cc:f5:33:a2:0a:bd:3c:0e:40:09:89:3c:1d:96:
a6:51:fa:d7:20:34:2f:7a:f2:62:59:37:81:66:32:
54:98:04:7d:39:36:58:a4:a8:a1:cb:6a:ce:93:5f:
6f:c9:04:96:c5:b0:27:7f:7a:01:fb:54:7b:e4:13:
f4:7c:cf:0d:dc:76:de:95:87:21:5a:08:c5:5c:13:
cb:bc:fa:40:36:5a:f2:ba:ec:c9:22:8e:3b:f3:03:
99:d7:4d:53:d8:2a:d4:5c:b1:c8:ca:5f:f9:57:30:
56:d2:ee:bb:a9:d5:ff:fa:e0:15:38:bd:fc:79:88:
1c:1b:ec:2e:43:e8:54:3a:34:aa:5d:e7:9b:4c:cb:
5f:1a:a8:a5:e1:12:ba:59:39:62:b7:a8:12:82:6f:
cd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:95:86:15:2D:D5:4A:B6:B3:52:F6:26:4B:5C:5C:05:5E:A5:71:74
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3a:98:99:bf:42:d0:83:e9:ca:20:7e:0a:cf:70:a6:28:a6:
62:d0:8f:07:21:fb:b8:53:d1:05:9f:75:1a:b8:54:d6:5c:3c:
e1:b9:ed:a4:49:18:79:ff:5c:01:0a:be:c0:4a:dd:67:0c:db:
63:5f:13:c0:e0:d6:eb:f5:59:93:ee:2a:43:d8:ed:db:9b:7a:
2d:31:ca:68:37:31:f8:56:23:82:40:92:fa:4a:b5:13:05:d5:
fd:bd:90:19:be:7b:7c:bf:7a:88:cb:7e:86:59:66:21:c6:39:
bc:93:50:d3:a9:d5:76:a9:c6:cb:16:f8:93:fa:63:da:c5:91:
a0:4a:9c:e0:2f:f0:35:d3:d5:90:a3:0d:72:47:eb:37:b8:58:
d7:23:af:0e:72:a4:4e:a9:8a:33:67:de:04:3e:b3:52:8b:3d:
53:14:8e:39:1c:e7:68:7f:d5:db:ea:01:5b:59:a4:c5:16:f0:
d3:d9:da:56:c0:6c:a9:72:e9:19:59:80:a1:01:7c:99:95:2f:
bb:1d:91:d9:e0:d8:cd:2f:a3:7d:b4:2b:5f:81:d0:05:4d:94:
c0:d3:c5:3f:8c:51:93:b1:c5:54:39:a5:50:d0:2f:6a:ff:7d:
eb:00:a8:a2:3c:1e:54:4b:52:ea:e4:4f:9a:61:c0:e6:54:97:
35:a2:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:40:42 2025 by rpki-client