Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: eWqZcTC1bxFs58OyPscRTAz3oJFHOyvnsw8d9bFAYmk=
Subject key identifier: 22:75:8A:F3:95:4D:D3:B3:31:33:19:31:56:9B:6C:53:E3:F2:BA:95
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 01964C34A9DCB4B439071BF5CCE26234B3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 0EE2
Signing time: Sat 19 Apr 2025 04:00:41 +0000
Manifest this update: Sat 19 Apr 2025 04:00:41 +0000
Manifest next update: Sun 20 Apr 2025 04:00:41 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: ZCXyCmJ0gOOr9LnqE2FIsyt8UHOTDyR0FKxBN8QZYSE=)
2: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=)
3: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=)
4: qjem72uO7DgkEP8SDk6XnjOnFt8.roa (hash: oYe+IghrANew49oUvqDKOy68qs0Z1UKOAqVvGxaiu7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:a9:dc:b4:b4:39:07:1b:f5:cc:e2:62:34:b3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Apr 19 04:00:41 2025 GMT
Not After : Apr 20 04:00:41 2025 GMT
Subject: CN=22758af3954dd3b331331931569b6c53e3f2ba95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:20:e5:91:24:76:42:70:47:0e:da:b5:89:
40:ea:8a:48:c5:d7:c9:de:63:16:60:3c:fd:60:51:
89:a2:a9:63:9e:52:83:af:fc:04:57:38:ae:07:e9:
9e:f3:c2:3e:ba:97:bc:6d:c8:d0:b6:3b:9a:0a:8d:
c6:04:0c:f2:a2:17:2a:d1:62:5c:d8:56:b7:7a:b9:
ba:bb:79:1d:55:36:ff:fd:6a:03:54:57:23:5f:ed:
56:1d:48:60:2c:11:89:8a:cb:93:54:b1:fe:57:f6:
9c:19:a5:bd:b0:f4:e4:61:7f:09:74:4e:74:ad:72:
ee:34:91:52:86:36:31:71:ff:26:21:a4:5b:6b:c6:
d6:90:56:12:b1:75:fc:51:3b:ff:6a:12:68:1f:8f:
49:26:0e:7e:66:1a:f6:a0:87:00:ec:96:62:18:8e:
23:78:ab:5c:4e:e3:d3:a0:11:03:15:19:f8:da:d8:
8e:2b:f7:28:2a:88:03:39:5f:2c:1c:d9:e6:90:6b:
c9:6d:aa:24:ea:ed:47:21:38:81:ce:06:6f:22:61:
22:3f:7b:be:1a:44:c4:4c:80:a8:18:85:06:6f:3b:
be:c7:6a:fe:5b:b4:41:ab:7f:b3:78:79:cf:39:d9:
66:2f:21:d0:8d:97:39:6e:c2:91:a1:6b:b5:92:da:
0e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:75:8A:F3:95:4D:D3:B3:31:33:19:31:56:9B:6C:53:E3:F2:BA:95
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ee:b6:4c:d1:a4:a6:1d:09:01:67:41:09:5b:98:28:2e:82:
9c:76:58:7d:c6:b4:40:d1:d5:cd:96:44:ad:3d:ed:d6:ea:50:
38:8d:8e:b2:b2:bb:21:36:a1:d7:81:26:2f:5f:bd:26:10:84:
af:8e:e5:1e:a2:9b:37:0e:34:90:bf:31:9e:5a:c6:d8:b3:ce:
09:25:08:77:f9:10:99:6a:f1:b3:7d:a0:55:6d:fd:aa:ab:ec:
2f:72:30:fc:6f:28:04:7e:2f:42:68:2f:0a:68:b9:0a:b9:06:
90:2a:32:ab:8b:da:7b:51:ca:44:73:82:40:03:c1:74:0d:37:
17:da:1d:be:84:5b:14:51:c1:e5:8c:7f:a9:0b:ed:cf:ba:d7:
df:5a:50:e0:47:77:3c:2a:18:68:9b:b4:b5:31:59:1b:24:35:
5c:e8:01:77:5b:23:fe:4d:5c:9f:6d:66:e9:25:07:a5:2e:85:
40:90:11:73:53:18:3c:eb:fd:d0:37:dd:b3:46:94:f5:1a:e8:
5f:bc:31:1f:8c:46:32:cf:4b:d4:94:3d:e6:14:c7:f0:c5:30:
fb:b0:e3:94:4c:3d:9f:5e:7f:85:1e:d6:26:a6:0c:6d:0f:22:
4c:ed:7d:b8:43:a2:83:6f:eb:62:fe:67:44:29:53:20:38:ce:
ed:1b:dd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:47:14 2025 by rpki-client