Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
File: do75wQS-IihL97J1bSqBc5RqOG4.mft (raw, json)
Hash identifier: DHzebsd2j9PJDN5/VS3Y82MvfUMwNjmCcbC1CGvgtQE=
Subject key identifier: 34:4B:AB:58:03:27:83:0E:CA:2F:72:49:5C:AC:EA:A5:8A:91:08:F1
Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
Certificate issuer: /CN=768ef9c104be22284bf7b2756d2a8173946a386e
Certificate serial: 01964CA2A111A3482E5E78B683854C62B372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 06:00:48 +0000
Manifest this update: Sat 19 Apr 2025 06:00:48 +0000
Manifest next update: Sun 20 Apr 2025 06:00:48 +0000
Files and hashes: 1: EJkcDznOKKWRmaypi-0UVjmIciU.roa (hash: 0CzgDka1v9BOwLuN51gJ8uTArmQf+fKvMJ7KbWRZMSo=)
2: do75wQS-IihL97J1bSqBc5RqOG4.crl (hash: gUlyIva2/GcQ4lOXy/grRqJwyGHr4lDkb9kK3vEGhV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:a1:11:a3:48:2e:5e:78:b6:83:85:4c:62:b3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e
Validity
Not Before: Apr 19 06:00:48 2025 GMT
Not After : Apr 20 06:00:48 2025 GMT
Subject: CN=344bab580327830eca2f72495caceaa58a9108f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:5b:55:6c:59:67:41:84:cf:71:a8:6f:12:
24:72:56:b5:6e:16:7f:53:8e:c9:32:cb:5d:c1:89:
56:fd:84:f6:1e:45:8d:a0:cd:58:3c:39:c0:4b:50:
6f:eb:9e:c9:21:56:42:db:bc:f2:cb:85:1c:ac:95:
f0:18:95:28:5c:21:d5:d2:91:c1:73:9e:a4:ac:63:
78:88:ef:f6:59:49:a5:0e:73:c1:00:98:38:c5:9b:
01:85:7b:66:6d:e0:77:1e:f9:f2:03:53:45:1c:e9:
68:ab:06:3c:6d:2d:0b:1f:df:cd:75:dc:86:5a:49:
34:17:47:d8:5b:0f:bd:ca:37:c6:ae:25:f6:94:53:
18:28:6c:01:8c:85:06:47:bd:4f:e4:80:1f:6b:51:
dd:cf:75:a7:1b:cb:92:f5:b7:85:2e:d3:c2:e8:64:
57:92:b3:d9:f7:ae:49:e7:b8:c4:01:bf:7d:d4:aa:
ab:b0:93:5b:00:e3:51:eb:a0:7d:19:83:5f:ef:08:
81:83:a8:63:09:46:e3:dd:ef:9f:98:db:60:a3:81:
d9:a7:dd:f7:99:70:93:54:54:69:25:d0:d7:d8:bc:
6a:5a:51:a8:79:3e:6f:5d:dc:d4:11:25:c7:94:2a:
00:df:1a:22:c1:05:2a:12:c0:72:e5:d0:68:05:7c:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4B:AB:58:03:27:83:0E:CA:2F:72:49:5C:AC:EA:A5:8A:91:08:F1
X509v3 Authority Key Identifier:
keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9f:3b:01:c9:43:2a:07:2f:d1:88:99:10:b0:c5:5e:1b:49:
fb:91:85:29:31:79:71:30:b4:59:18:10:ca:ae:68:f6:28:a6:
88:b6:8b:66:6f:2e:b3:bd:c0:c8:41:d2:1d:36:ab:f8:5d:ee:
12:70:2b:1e:4e:2b:a4:cc:db:62:f1:26:f7:fd:d5:d8:40:89:
fc:30:94:49:a6:69:4e:30:d2:90:c8:06:3c:8f:76:a7:66:15:
5c:da:86:5c:f2:c8:fa:cd:0c:30:a5:4b:44:01:89:f1:6f:a2:
02:18:bc:04:d5:2c:79:c8:0b:b0:05:3e:a4:46:66:c4:aa:69:
27:f7:07:6f:90:57:06:b2:cb:ef:f7:f6:1c:6e:b2:c6:5e:f1:
b9:93:44:22:6c:6f:18:b9:56:a4:f1:13:6a:29:65:2d:ec:4e:
90:47:d9:7b:c7:87:1e:43:64:6a:84:3d:5d:66:a4:f2:18:ff:
4e:28:73:5f:f4:fd:c7:22:7e:18:4a:a8:59:e1:5e:62:9e:64:
b2:10:57:a1:46:af:fa:12:84:b7:30:a4:94:9b:00:c3:80:a1:
5c:73:1c:27:56:7d:17:2a:cc:87:32:df:3a:e1:27:7c:bd:f4:
d0:3e:f3:56:3c:31:c8:fb:e7:34:41:e3:b0:30:62:40:a8:f1:
f8:5d:a9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:04:10 2025 by rpki-client