Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: BP/gUCxvdfFt3WSg3W8KZGEGKQqNNha3z1tzFpYTsMA=
Subject key identifier: FF:6D:A3:64:6F:97:BE:F2:63:A0:C3:0D:6D:D0:06:37:05:2F:FD:64
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 01960F7BAFA81D86F54595451F307B46FF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 0565
Signing time: Mon 07 Apr 2025 09:01:26 +0000
Manifest this update: Mon 07 Apr 2025 09:01:26 +0000
Manifest next update: Tue 08 Apr 2025 09:01:26 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: UdIubd8uRdu9SDtP4Yu5ufDrR37RJQAJnNI2YrhjMjs=)
2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:af:a8:1d:86:f5:45:95:45:1f:30:7b:46:ff:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Apr 7 09:01:26 2025 GMT
Not After : Apr 8 09:01:26 2025 GMT
Subject: CN=ff6da3646f97bef263a0c30d6dd00637052ffd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:c7:ea:14:30:74:58:9d:ef:70:27:76:66:
9a:98:0e:45:ed:35:91:de:db:88:15:21:e1:a6:de:
6d:71:ed:ad:ed:57:1e:1f:95:0b:3c:2c:99:00:04:
38:dd:71:e1:cf:6d:f1:67:f0:ed:56:59:2f:a1:72:
2f:cf:25:36:16:fd:55:ad:ff:a2:bf:89:59:b3:2e:
d2:ed:5e:4f:1d:dc:5e:5a:00:7c:93:47:e2:75:1d:
c6:6a:b7:1e:59:32:09:e9:72:40:8e:68:78:76:10:
8c:83:d9:ad:f5:aa:6a:24:77:c0:89:12:4b:26:85:
8a:77:a4:94:30:f1:87:ec:92:ed:f7:4c:45:96:e4:
9b:f6:1a:02:2d:53:a3:65:b4:11:de:3b:67:92:4b:
69:10:82:84:f7:55:27:b6:c2:6d:e7:4c:2d:60:7c:
15:fb:97:5b:46:34:13:dc:a6:47:ae:b2:c4:5f:9a:
60:78:e0:d0:0e:8b:47:3e:f0:ae:d0:0a:c7:83:88:
a7:da:68:5a:22:5d:64:2e:26:09:00:77:95:5b:04:
9e:54:38:44:37:b1:a3:09:93:13:85:2f:f0:d8:08:
3c:78:9b:d1:73:90:61:d2:3f:36:be:09:b9:f2:76:
17:f5:78:31:bb:81:0f:21:a3:91:7e:cf:30:05:3a:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6D:A3:64:6F:97:BE:F2:63:A0:C3:0D:6D:D0:06:37:05:2F:FD:64
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c6:f8:33:89:c7:36:ae:5d:e9:f9:65:46:a3:f0:05:44:22:
45:06:08:14:1c:a9:24:7d:ab:b2:ea:78:8d:12:89:22:43:a5:
22:f8:dd:4a:43:82:e2:31:34:39:db:e9:4d:b7:15:21:84:ec:
ae:9d:38:f5:82:63:7f:80:98:bf:22:cf:9c:52:d0:a5:2b:64:
0f:5f:bf:06:b9:a4:25:7e:60:21:53:d5:f9:4e:74:de:6b:73:
9d:99:3b:4a:d1:ed:37:20:18:5e:01:3a:ca:d7:df:44:d5:81:
05:c7:15:2a:e7:de:de:fe:14:b2:b6:15:26:de:08:13:a3:b3:
ca:7e:61:3d:cd:4a:1c:fd:0d:47:71:e9:2b:bf:02:a7:d8:bb:
33:0d:8f:ac:e8:7c:ad:52:31:bc:e8:6e:ef:3d:8d:e5:c4:8e:
93:db:2e:2a:bc:8a:c5:ca:32:98:53:c4:d2:96:d3:74:3b:5f:
10:84:54:0a:f3:1f:49:5e:59:86:f6:7a:7a:5b:43:c3:8a:fa:
a8:99:73:7f:e6:a7:f1:af:af:bd:b0:f3:91:8f:fc:dc:8d:97:
51:4c:ea:fd:dc:91:c0:4d:5c:5a:97:ec:8c:bd:25:d4:ca:71:
56:af:a7:58:3a:cd:bf:5a:97:58:41:7c:0b:9c:76:b3:ab:70:
87:63:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:11:20 2025 by rpki-client