Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
File: dB4rNVUHc-BTeX92TS4h1l5kKMc.mft (raw, json)
Hash identifier: 0pPYoNVKXM2WA0jDJytvnhsu7bmSR4BfRvapVjzVNWM=
Subject key identifier: 3B:FE:28:17:E2:4A:2A:70:CF:FD:4E:83:39:69:74:9D:A6:C9:09:D1
Authority key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
Certificate issuer: /CN=741e2b35550773e053797f764d2e21d65e6428c7
Certificate serial: 01964DB4DECE240250471326F3D97D5B1972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
Manifest number: 5A
Signing time: Sat 19 Apr 2025 11:00:21 +0000
Manifest this update: Sat 19 Apr 2025 11:00:21 +0000
Manifest next update: Sun 20 Apr 2025 11:00:21 +0000
Files and hashes: 1: F9mCTEFo2VHLyLNCvGdkZm7NM54.roa (hash: 0GDWpQx7XDKg8YLSvTng54oqtSqIqPi0Fb+po6xzWT8=)
2: dB4rNVUHc-BTeX92TS4h1l5kKMc.crl (hash: 67ngOnQhD1H/O+xCexaDvGrBWMUW3U+aPGlhP6tH2z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:de:ce:24:02:50:47:13:26:f3:d9:7d:5b:19:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741e2b35550773e053797f764d2e21d65e6428c7
Validity
Not Before: Apr 19 11:00:21 2025 GMT
Not After : Apr 20 11:00:21 2025 GMT
Subject: CN=3bfe2817e24a2a70cffd4e833969749da6c909d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:1a:08:f3:37:ff:53:26:55:2c:a2:52:7e:
c7:7d:82:18:84:13:e6:53:83:82:18:37:e1:01:3b:
1b:5d:d3:5b:35:3d:69:cb:c7:c1:3f:17:ba:a6:94:
4d:0a:bb:8e:f9:0c:73:cf:08:ef:60:21:99:76:4a:
3c:c8:f3:41:64:ab:68:9c:ec:0f:84:88:77:bf:f1:
17:c6:c9:ff:d7:0f:ac:dc:9b:69:2f:88:75:1a:94:
fc:17:91:cf:22:8d:de:5b:3e:d3:e2:4f:54:6a:3a:
21:2a:d7:39:e7:a6:1e:68:c4:41:6a:9f:52:e4:bd:
a9:1c:31:21:a1:67:ed:6f:45:6d:e0:9e:99:b4:c6:
c1:33:7a:c0:2c:66:87:9a:0b:a7:f5:7e:e1:f5:cb:
12:6f:fb:27:01:5c:46:11:f0:dc:82:0b:7f:bd:8b:
87:06:00:2b:16:cb:f4:c8:a8:fd:c4:bf:05:8f:53:
af:d6:f3:40:3e:d2:6c:6b:28:35:fd:c6:61:74:9e:
0c:06:50:95:34:47:02:1d:43:3d:67:8f:25:a4:c8:
bc:77:51:a7:a4:e7:8a:e9:b2:e1:3a:43:16:ac:84:
1d:97:4e:1f:e8:87:b9:94:36:71:db:5d:55:ec:21:
01:6e:66:e4:2f:8e:46:e0:0c:ba:97:33:e6:37:cf:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FE:28:17:E2:4A:2A:70:CF:FD:4E:83:39:69:74:9D:A6:C9:09:D1
X509v3 Authority Key Identifier:
keyid:74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f8:f9:be:14:56:03:c8:ff:f3:84:ea:8a:52:84:eb:fa:b6:
a3:ac:4f:7f:e6:cb:c7:fb:82:28:5e:96:cf:00:7c:9a:d6:c1:
cb:ab:c5:d8:26:5e:74:9d:16:ad:9f:e2:42:91:5f:e9:c8:61:
03:5b:79:86:1f:4b:7f:68:48:dc:1c:55:0b:94:90:73:70:73:
a5:c4:a7:cf:e7:1e:3c:8c:06:d9:d4:3c:ed:4a:e3:04:1c:77:
d4:a4:01:a8:69:f8:27:02:bf:92:77:a1:8d:f5:b3:61:34:e8:
f9:cd:f6:96:e9:a4:c5:ea:53:1c:4c:69:e2:0a:83:b9:eb:dc:
27:64:e5:3d:67:70:ef:c3:d5:08:50:5f:33:33:c2:b3:8a:0a:
9f:62:65:62:3d:49:2f:78:1e:28:eb:fa:5f:5f:5a:5f:86:61:
9d:33:65:22:34:cb:44:45:45:d3:50:d0:5f:3c:cc:9a:70:43:
2b:56:d2:9d:7e:a8:46:ca:16:6a:b7:d3:3f:92:6d:61:e8:c4:
ca:04:0c:bd:9d:87:81:57:80:0c:4c:47:e7:30:75:3a:66:89:
74:11:c3:d6:de:de:a8:68:3a:8b:be:ba:a7:c9:46:1b:d8:18:
82:d1:85:e5:32:62:ae:03:db:68:97:57:ec:b9:3f:94:b7:53:
30:9a:5f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:58 2025 by rpki-client