Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
File: 10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json)
Hash identifier: 4eSaX9hFEHdQgkwL+IJWmV9NZXo4HhmQVFtUVOG73jI=
Subject key identifier: A3:C2:5B:F3:D0:3A:28:52:91:C4:9F:0A:4F:3F:B6:C9:85:83:C4:90
Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
Certificate issuer: /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Certificate serial: 01958C6125FA9E7712DF508AB89A737185AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 22:02:11 +0000
Manifest this update: Wed 12 Mar 2025 22:02:11 +0000
Manifest next update: Thu 13 Mar 2025 22:02:11 +0000
Files and hashes: 1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: Wf4xDV837Ww41SkRMfaGA1EjPPLRdh7zQn5giOkhg9M=)
2: DIiJmhkGPOYoFSzKU5OJGHxPZv0.roa (hash: wVFQMX+v03An5N7stfoX0LOfftlraoV2nDd1HWqmadg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:25:fa:9e:77:12:df:50:8a:b8:9a:73:71:85:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Validity
Not Before: Mar 12 22:02:11 2025 GMT
Not After : Mar 13 22:02:11 2025 GMT
Subject: CN=a3c25bf3d03a285291c49f0a4f3fb6c98583c490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:9d:eb:e4:17:c6:0a:2a:c5:03:ca:5d:89:
cc:6f:9f:b3:a1:4a:37:7e:ab:f6:8f:69:65:3c:81:
c7:6d:d1:f2:e7:1d:eb:d1:e8:21:82:ef:42:c8:b8:
e4:8e:54:d1:59:dd:ed:d3:2a:64:0b:63:c9:20:2e:
e8:50:53:ed:62:dc:d6:ca:f5:89:cd:9a:aa:9c:4a:
87:b6:5b:9b:f8:bb:ab:19:6a:17:30:41:11:4f:b1:
6e:49:03:71:c0:64:d6:96:c7:25:28:15:0f:03:f4:
74:6a:3c:29:0c:d5:22:c1:45:10:c1:d2:64:5f:46:
1a:29:dc:ee:2f:03:c2:e0:cf:74:af:c8:c3:1b:66:
44:76:eb:58:99:1a:8a:ad:8f:9d:0b:a2:21:d5:5e:
f0:78:b6:6d:7c:02:bd:22:ce:c1:99:47:4e:7b:bf:
25:5c:61:1d:00:cb:e9:3d:3c:0f:39:0a:c8:81:eb:
2d:6b:36:07:0d:ea:48:38:f1:4d:eb:45:31:6d:7d:
dc:cc:4b:67:6f:f0:2b:a1:73:18:27:f9:8a:c7:c8:
9b:c9:65:cf:a2:c7:94:83:ee:03:71:81:97:20:1b:
f1:87:39:9b:80:98:bd:b8:5a:cb:b2:1e:9f:fe:f2:
6d:8b:c2:c5:7c:fc:2c:01:09:45:1a:3a:d7:77:b0:
d7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C2:5B:F3:D0:3A:28:52:91:C4:9F:0A:4F:3F:B6:C9:85:83:C4:90
X509v3 Authority Key Identifier:
keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e9:78:7b:2c:24:a4:70:1f:2a:51:15:6d:b5:c4:45:59:05:
94:8e:96:25:00:24:b0:63:20:80:9a:4e:0c:a1:f1:e7:78:2a:
77:4e:86:84:56:f1:5b:db:e1:b7:b5:cc:3c:30:be:38:46:d1:
05:a9:17:62:d7:7c:eb:72:08:52:81:2b:e0:3e:89:5c:68:14:
05:f3:aa:23:d8:fa:bb:0d:45:b7:a3:86:61:14:13:0a:91:60:
8a:44:7f:94:4e:2a:bf:b9:c3:12:38:97:64:ff:94:db:05:db:
19:15:14:15:dd:47:3a:d3:f9:df:fa:c8:94:5a:81:2a:18:dc:
eb:68:52:5b:9b:e8:37:b6:31:42:db:31:db:51:9c:72:3e:3a:
37:05:07:d3:8f:ff:88:64:01:3a:7d:68:64:07:c8:79:00:e9:
8b:a9:e3:e6:f2:56:e4:e0:fe:79:32:d5:02:e4:ab:c4:b7:42:
ce:69:8c:4e:32:cb:14:8a:78:12:30:27:b8:97:6b:f0:be:3a:
4c:41:f5:34:45:2c:8e:1e:e4:03:2d:2b:a6:16:9d:21:71:80:
54:5e:e5:7c:97:60:00:47:e6:ec:94:1e:1c:4f:31:ab:d9:70:
9f:96:17:c0:3e:fa:e3:76:be:fa:6f:d0:60:7f:2a:4b:58:21:
f8:3e:65:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:48 2025 by rpki-client