Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: d18ozOVaIzZQBW/wAA3rHiVfQDtNN5iSAZqcs2tJ+Co=
Subject key identifier: DD:97:1F:1D:97:2C:C2:5E:86:4A:5E:7F:23:FB:28:A7:99:EF:B6:00
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 01965E040285EAD74074816A03A6CC3E4ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 1325
Signing time: Tue 22 Apr 2025 15:00:43 +0000
Manifest this update: Tue 22 Apr 2025 15:00:43 +0000
Manifest next update: Wed 23 Apr 2025 15:00:43 +0000
Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: EfUuWdZf7ObHG2/b5SXanLzpJkzSdZ6h4ZbyP/USy5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:04:02:85:ea:d7:40:74:81:6a:03:a6:cc:3e:4a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Apr 22 15:00:43 2025 GMT
Not After : Apr 23 15:00:43 2025 GMT
Subject: CN=dd971f1d972cc25e864a5e7f23fb28a799efb600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0a:89:05:83:c5:58:b4:e7:6a:9f:5f:fe:de:
a8:1c:f0:b8:08:3e:98:02:5b:57:92:b5:48:bd:13:
c9:7e:26:3a:79:69:a5:b2:6d:6a:5e:ca:34:7a:60:
76:87:5b:f0:70:03:a2:1a:08:41:32:75:49:bb:ef:
cf:82:4e:c4:60:15:cd:c8:37:19:82:4e:07:cb:a0:
9c:b5:1a:65:c3:08:e8:8d:be:c5:c4:dd:f1:89:a7:
0c:19:ed:19:f3:e2:ae:65:0a:fd:50:87:b1:1b:10:
8c:63:51:62:d7:87:76:bf:ab:4c:44:84:cd:da:94:
ac:88:a4:25:9b:be:bd:ad:26:8f:67:c5:26:40:f5:
2d:de:0d:75:2d:bf:bf:c5:1a:5e:82:2e:e6:4a:af:
79:4f:64:19:e4:ee:dc:67:af:a7:14:20:ce:ec:33:
68:8b:7c:d9:a2:1f:4f:ad:8d:fc:e5:00:ae:a7:f3:
f2:58:25:c5:bd:ec:32:c3:de:86:2e:27:33:33:e4:
3b:7a:aa:79:8d:e2:1c:c5:29:1a:76:40:47:31:a2:
ed:2b:ac:7e:87:d5:51:68:4a:bb:84:c3:89:8b:d9:
4b:14:a2:99:f8:db:eb:16:83:9a:96:c1:86:8e:d6:
35:fe:3c:ba:91:99:26:60:6d:76:1f:72:cc:91:0d:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:97:1F:1D:97:2C:C2:5E:86:4A:5E:7F:23:FB:28:A7:99:EF:B6:00
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3a:e3:c8:f5:c4:f2:88:a8:97:40:8a:ac:42:c1:21:64:b1:
27:71:42:60:80:a4:e4:02:04:bb:57:e9:82:2c:7b:32:cb:2d:
b6:c7:ba:67:11:ee:1c:80:15:af:70:c9:2f:3d:52:25:fd:6f:
d6:b4:8b:04:77:ca:99:aa:2f:21:04:8a:72:d9:4e:2e:28:33:
32:7b:98:4e:ac:c1:a8:83:50:42:03:8b:1c:0b:f9:ca:fb:85:
f7:6d:03:fd:d2:bf:90:c0:5e:89:ab:f1:42:74:2e:b1:65:5e:
bb:83:36:24:6c:66:82:7d:ee:3d:c8:cc:ff:ce:ee:a8:6b:9f:
88:2d:37:20:d4:77:75:db:96:61:35:c3:bb:35:71:98:42:ab:
34:39:9c:10:a0:22:3f:89:40:0d:51:09:93:4d:a6:52:f4:ae:
a4:40:a7:fc:71:76:ee:cd:41:9f:36:4a:18:3f:59:4e:0e:32:
d8:52:07:73:3a:ce:7d:94:95:9c:3b:40:b1:3c:6e:e7:05:d2:
4e:ff:99:cb:ca:82:0d:7a:f8:0a:9d:84:9f:8e:83:88:ae:9e:
4a:5d:c6:27:c0:aa:77:8f:d8:92:c7:0e:ff:23:61:e7:3f:40:
80:ec:6c:e3:67:0a:51:4b:a8:59:69:1e:16:31:43:ec:95:ba:
23:62:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:03:25 2025 by rpki-client