Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: CZfQy1dzUv5CYe/9hZtgEwXDBPtIYi7nEepVr2xoBx0=
Subject key identifier: 42:17:AB:79:F6:0A:A5:37:61:9B:AD:33:04:04:11:6D:15:32:78:EF
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 019646A06DA53D3312430651CC2FB8C2A1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 0E1F
Signing time: Fri 18 Apr 2025 02:00:41 +0000
Manifest this update: Fri 18 Apr 2025 02:00:41 +0000
Manifest next update: Sat 19 Apr 2025 02:00:41 +0000
Files and hashes: 1: 12Zahr8ypxTDNrQSGTJX87wf4FU.roa (hash: 1xnPEzPjKosfERE7d2w2vVj9bJxLTdzPRRY8ixKvDnU=)
2: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: jobGyb4sb6phnTFZM/T/FpmJfaVC3JbyeQdv4uuBxvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:6d:a5:3d:33:12:43:06:51:cc:2f:b8:c2:a1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Apr 18 02:00:41 2025 GMT
Not After : Apr 19 02:00:41 2025 GMT
Subject: CN=4217ab79f60aa537619bad330404116d153278ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:e4:da:64:a1:68:85:6a:31:6f:3e:53:3e:
7a:b7:45:db:8e:6d:6b:70:5a:6e:11:88:e0:ce:e5:
b7:39:a5:d7:5c:c8:d1:fb:1e:80:90:0d:21:22:6a:
0b:ab:f8:1c:f4:a7:16:f9:9d:aa:8d:bf:05:27:4e:
cd:da:ae:36:e2:0c:05:18:fe:87:44:23:b6:08:47:
66:f3:e2:94:83:07:37:7a:b7:c3:46:4e:70:0a:37:
56:2f:b3:0c:9c:4d:18:a3:43:68:5f:c5:f1:ed:0a:
8f:1d:f3:92:bf:1a:c6:ef:43:83:79:2f:7c:a6:41:
5b:38:b4:20:83:64:00:32:e6:10:dc:9f:bd:c6:45:
68:55:c1:9b:ee:c4:60:3f:03:64:b9:60:a0:91:f9:
03:ad:c0:91:b0:b5:97:a5:a9:1d:62:55:76:60:16:
fe:53:b6:a4:cc:75:a2:5a:26:43:85:48:9d:5c:fa:
10:3a:22:a9:35:5a:73:44:c6:21:0e:ec:97:ff:45:
f5:32:f7:ca:7a:64:68:29:6c:a6:52:d3:21:0c:4f:
77:5f:c2:d9:76:1c:48:79:dc:f9:88:d0:74:3f:4a:
ca:c2:01:54:9a:17:5a:85:a8:1e:48:06:fd:ae:f0:
67:b8:f7:9b:7b:42:4e:b6:3f:93:c5:bf:d4:64:e0:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:17:AB:79:F6:0A:A5:37:61:9B:AD:33:04:04:11:6D:15:32:78:EF
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7c:d6:1f:8b:b3:23:d1:23:79:da:6a:af:b9:85:17:ff:31:
d9:d4:b1:54:31:29:01:42:1d:2d:37:36:5e:56:c4:16:9d:c9:
61:27:7b:65:b4:58:78:3f:ae:bc:95:fa:f5:8a:d2:3f:eb:87:
7e:98:ff:bf:6c:c1:0e:ed:39:9b:6b:09:ba:59:af:cb:e7:b2:
0c:ad:be:f4:90:f2:f8:37:28:31:ec:7c:06:68:44:19:9a:ee:
53:8d:cc:00:09:52:97:5c:d0:db:7d:32:df:8b:cf:da:e8:cd:
fa:7d:1f:4c:b1:13:13:61:ec:69:09:0a:88:ec:97:c1:36:d5:
c0:cc:dd:71:6c:0b:19:58:0f:c0:6a:66:fb:d8:e0:fc:22:9d:
03:4f:e7:1c:51:b8:15:43:da:cb:e4:90:ce:66:ba:af:5d:72:
1d:48:8f:f0:f7:e1:d6:40:5f:3b:ca:49:84:4c:f9:19:5c:aa:
31:0f:39:f1:eb:ce:33:ba:ad:4e:58:fd:1f:63:1d:10:7d:d0:
3f:0f:3c:49:d5:0f:cd:30:52:0c:10:da:7f:68:7b:02:fe:51:
b5:7c:db:20:42:4c:bc:99:14:ca:2c:9c:b8:af:5b:f8:14:6a:
e7:f3:6c:eb:d1:2e:35:de:50:55:fb:61:0b:05:ef:db:69:06:
b7:3a:fb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:30:17 2025 by rpki-client