Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: xj1fhKXLL4NKadrqFQwzaq7FbVfDKXBM6Kt7cxB422U=
Subject key identifier: 60:E8:56:77:45:A3:8C:AE:EC:49:F3:06:EF:09:A0:8C:80:C2:8F:FF
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 01964CD92453EFB894B56F9D005402838990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 07:00:21 +0000
Manifest this update: Sat 19 Apr 2025 07:00:21 +0000
Manifest next update: Sun 20 Apr 2025 07:00:21 +0000
Files and hashes: 1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: xNGCP9fUyDWof0XiGpN5RoLn06Wjo6pRYa3cJn9pPxs=)
2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:24:53:ef:b8:94:b5:6f:9d:00:54:02:83:89:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Apr 19 07:00:21 2025 GMT
Not After : Apr 20 07:00:21 2025 GMT
Subject: CN=60e8567745a38caeec49f306ef09a08c80c28fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:f9:78:bf:00:76:09:ee:df:2f:3e:59:56:
80:a1:fc:c4:19:30:a4:47:18:97:e6:7f:2d:61:6d:
92:44:09:ed:00:1d:4e:d5:5c:22:3c:53:b0:56:e8:
0b:9c:c9:e8:86:7f:6e:d6:da:7d:86:a2:65:2c:33:
8c:5a:cf:07:3b:73:7a:aa:ae:7a:bc:ba:26:ff:8a:
8b:f0:c8:28:8b:4b:17:91:50:b9:03:c4:28:bf:c9:
f0:37:f7:09:0c:e6:99:81:36:d8:05:cd:54:37:74:
bc:4e:52:86:69:ca:2a:00:d5:b8:9a:a7:ab:0b:96:
15:fb:0d:9b:39:2e:63:db:ba:94:1d:89:5c:6c:7b:
80:1f:ae:a9:a3:1a:e3:ab:d2:d6:65:57:b7:ab:fa:
53:3a:57:35:95:ce:cb:9f:8d:e8:d6:d9:81:43:0c:
98:d5:83:56:71:04:53:c0:5b:c8:ae:5f:50:d5:5a:
eb:df:5b:61:a8:a6:d7:4f:82:88:dd:40:5d:15:b8:
9e:db:90:3d:d6:d0:2c:7b:9e:77:00:47:5f:66:c2:
76:87:98:82:96:26:0e:aa:cb:de:af:d4:79:bf:d4:
14:c5:ad:01:bb:31:78:34:38:b0:45:07:54:22:3a:
60:ea:22:6b:03:8d:ce:65:d1:a6:62:5c:47:77:1f:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E8:56:77:45:A3:8C:AE:EC:49:F3:06:EF:09:A0:8C:80:C2:8F:FF
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6a:4f:25:f2:84:a3:db:28:34:17:59:d7:c6:54:0e:9b:f8:
d0:16:be:93:2c:9b:c9:3b:80:8f:9c:be:44:e5:88:b2:18:c2:
69:95:28:af:dc:7d:05:a0:07:8e:9d:87:d2:fb:d4:e7:c9:03:
bf:80:91:c1:a0:bd:f5:cb:37:f6:d2:79:d0:c0:47:66:78:dc:
34:8d:2c:a2:48:d9:51:3e:0b:c0:a9:2f:58:ca:4e:fa:21:9c:
77:a7:3b:d9:29:17:3a:6f:e3:a1:18:f9:d4:08:3b:39:74:36:
b8:2a:7c:16:6b:22:a0:a1:f1:a9:b1:e5:09:18:47:00:09:76:
57:6d:2d:a5:76:44:8b:50:63:3b:5f:be:fa:90:d8:ed:fd:63:
e4:c5:18:61:6c:ea:8c:18:e5:16:20:d9:f9:83:33:fe:82:ee:
9d:4f:02:6d:83:99:5d:d7:f2:67:ba:0c:75:7e:73:3e:7a:4c:
4d:29:4b:90:9e:5f:da:21:29:b3:a3:7a:47:1d:8f:c4:e7:18:
ed:6a:a3:c3:5a:65:f9:46:95:85:5e:25:4c:3f:5c:68:53:7f:
cc:ef:d4:2c:e6:b8:91:ee:83:83:35:a6:f2:25:4a:91:6b:b9:
c7:e9:98:29:e1:33:2c:19:ab:1c:7a:30:6f:83:f5:22:39:3d:
97:72:4c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:38:52 2025 by rpki-client