Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: gfiMj72c4nZmpf4UDvZfXplc4db9hnC7RFeUlpSDFEw=
Subject key identifier: 91:23:BD:EB:D5:7B:ED:0C:64:DC:F5:73:2D:A0:E3:E9:D8:79:9F:98
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 019655DD31EA67C409CFDB6E1D746430F9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 0DE7
Signing time: Mon 21 Apr 2025 01:01:21 +0000
Manifest this update: Mon 21 Apr 2025 01:01:21 +0000
Manifest next update: Tue 22 Apr 2025 01:01:21 +0000
Files and hashes: 1: HO5kHHVnIPEFaMxltsULzo8s2Vc.roa (hash: Pi2xNmIKaW+pbH3+gTOC2OW0sYYGJ1NWu+Za1hJg9Rk=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: PnkrNUfwAeYwo6Z//mTtmoLmlMpZI+j6t+ubBxM+COs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:31:ea:67:c4:09:cf:db:6e:1d:74:64:30:f9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Apr 21 01:01:21 2025 GMT
Not After : Apr 22 01:01:21 2025 GMT
Subject: CN=9123bdebd57bed0c64dcf5732da0e3e9d8799f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:53:64:7c:f8:ff:38:e8:9f:57:9a:fb:d7:
b1:d7:89:76:b6:6a:e8:df:16:09:55:29:54:2c:49:
dd:c7:a2:99:8e:2e:eb:75:ec:ee:0c:af:5f:9d:58:
01:ce:91:9c:5a:14:cc:a4:8a:d7:a7:e1:54:4a:c8:
06:64:21:7a:4e:18:45:1c:bd:42:fb:29:67:89:7a:
05:54:d3:e8:19:81:7c:95:e2:3f:2a:f7:a7:72:8f:
55:2e:9d:c2:f0:9e:eb:c4:df:a8:be:37:29:aa:c7:
2d:d7:f9:55:60:3b:be:cb:53:7d:f5:f1:63:ae:e3:
cc:69:be:ea:fb:61:59:c3:64:26:74:23:b1:cb:38:
b2:3b:b5:a3:8f:c3:5c:9c:15:7f:de:ba:bc:26:a6:
d6:79:7a:df:38:5e:e0:c1:d3:eb:7c:21:ad:cb:fa:
ff:e8:d4:a4:0a:28:9e:ba:09:e1:28:a4:36:93:5b:
86:e2:b5:13:f6:3e:a0:3f:28:0c:90:d4:ca:32:fc:
cb:d0:83:c6:63:0d:62:67:68:38:de:69:31:c1:15:
e1:ad:3e:19:3d:df:3d:50:64:7d:9e:9e:c5:04:96:
ec:f7:09:eb:de:be:af:48:32:3a:26:58:c3:68:26:
e8:30:cc:6d:09:fd:3f:8c:1f:72:4f:5d:80:36:37:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:23:BD:EB:D5:7B:ED:0C:64:DC:F5:73:2D:A0:E3:E9:D8:79:9F:98
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1d:d0:b6:3c:a9:24:53:44:a1:01:a5:dd:a4:7a:55:6e:46:
e2:92:4f:40:72:db:e5:1e:fd:1c:7b:ce:af:76:b5:84:3d:91:
7e:48:e2:c9:3f:bd:11:c3:42:c0:fd:40:00:75:ea:8f:7b:e0:
45:12:43:4e:12:20:a0:a6:65:99:5f:e9:4b:ab:34:fa:ca:e4:
71:91:b8:04:16:12:d3:ee:96:e6:76:21:e7:b0:4c:7c:15:7e:
7b:2f:5e:f3:58:53:6e:59:bd:2b:4b:e3:b9:7e:4a:40:e6:7a:
ec:fb:e0:2c:e2:3c:05:86:61:45:4b:b6:01:22:e5:7c:54:89:
5d:e4:40:82:45:16:ab:8c:79:f1:95:c4:be:a0:f2:40:93:dc:
13:30:13:9b:43:b0:48:8a:a6:d1:f0:42:90:f4:47:41:64:e3:
47:04:26:b4:f2:94:1c:ad:d9:75:6f:65:f1:9b:33:93:1d:fd:
2e:e5:4d:37:8a:d1:6f:de:ba:94:1d:de:47:8e:cd:fa:e0:ee:
66:bf:a1:7a:6f:d2:1b:04:36:d5:c3:6b:73:b7:a4:43:ea:04:
20:3e:2a:34:ae:34:64:6e:fe:ce:8e:4e:4e:6c:b2:1a:4c:5b:
47:58:dc:07:5f:a2:84:cc:b9:1b:cf:d4:10:e8:9c:f0:8c:0b:
27:3b:c6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:12 2025 by rpki-client