Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier: BBxHuhglyOsEJVCcMvaCr/SHMVTOmrfR6V1ksIdhdG4=
Subject key identifier: 60:A3:FC:FC:43:46:2F:55:06:42:F4:58:AD:F8:92:AB:A5:50:F1:53
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 01958C292A43E5ECF71B892D1C50B5651DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 21:01:02 +0000
Manifest this update: Wed 12 Mar 2025 21:01:02 +0000
Manifest next update: Thu 13 Mar 2025 21:01:02 +0000
Files and hashes: 1: 6x14Tr1KvbGHug5B88Kt5ILNIuQ.roa (hash: TGutJ2mIJk6NG98vs/RUqYq5wAmvywBgw3u1JfM1+58=)
2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: 12ivFWA3lK+cSx2rhiVy4Q7sW2HsYnPTuyz1tB4ORGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:2a:43:e5:ec:f7:1b:89:2d:1c:50:b5:65:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Mar 12 21:01:02 2025 GMT
Not After : Mar 13 21:01:02 2025 GMT
Subject: CN=60a3fcfc43462f550642f458adf892aba550f153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:15:5f:03:7e:03:ca:a3:a2:fb:2c:1f:3b:
fd:c2:6c:22:1b:40:e0:a7:37:33:42:66:06:2f:2f:
c4:6c:d1:97:3b:cf:46:bd:15:62:2f:33:48:a2:a0:
ca:40:b9:c7:54:da:42:26:d0:27:f3:ee:74:c2:15:
e9:02:0a:b2:51:0b:43:15:5b:ed:18:be:5e:54:8a:
b2:a4:a6:e6:50:ab:66:06:c6:01:66:7b:6d:6c:14:
0a:c0:e5:dd:a4:bb:46:7a:8a:30:bd:a6:74:e2:07:
30:42:cf:19:2a:c6:30:71:c8:81:72:b6:5a:fa:58:
f1:79:0d:74:b2:4f:e7:0b:d5:af:0b:cd:30:30:03:
21:78:6c:d0:f8:98:2b:b3:7a:a8:ae:65:f2:96:d9:
08:12:85:a4:2c:c4:a2:73:07:65:09:f5:96:d2:ac:
e4:fe:64:ae:54:15:20:1c:b3:fb:6d:e0:35:8a:5f:
ef:17:b4:26:a6:18:10:5c:0b:fe:37:71:cd:2e:4d:
7b:53:1d:f4:73:ee:cc:b0:74:59:19:f6:9c:77:3b:
ac:73:d9:59:e4:bb:67:e6:73:eb:ed:ae:36:51:0d:
6d:f5:72:49:16:7e:bd:fc:b4:9a:7e:3c:be:45:47:
6e:4d:d6:42:be:bc:dd:08:1d:86:aa:1c:9e:48:38:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A3:FC:FC:43:46:2F:55:06:42:F4:58:AD:F8:92:AB:A5:50:F1:53
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9a:2e:25:46:e3:73:74:de:69:73:78:b2:5b:d2:ab:50:2b:
3a:81:f4:8f:25:9c:f2:dc:9d:a1:97:14:dd:c6:24:54:3c:10:
ab:53:a1:2d:8b:58:27:5c:84:16:b5:4a:92:ff:77:77:5b:6b:
e1:d2:a2:24:dd:49:10:35:00:89:bc:a3:cd:ce:41:4d:34:22:
78:ed:b9:96:25:48:4d:72:d7:93:82:06:d8:70:63:af:e7:d3:
bf:8d:23:b3:0f:50:ec:e8:28:1c:57:49:db:b6:81:ec:f7:ac:
1d:98:e1:aa:75:1e:7f:4d:8c:8d:ee:fa:41:a6:a2:42:31:a1:
6b:f8:2e:f8:13:e0:19:32:f1:28:f1:51:39:20:5e:88:56:e7:
dd:9b:24:54:c6:11:97:9f:a6:e4:96:77:aa:aa:80:e6:0a:be:
ba:73:0f:64:d2:66:b4:14:fa:1f:8c:0b:f7:a0:f5:5c:51:85:
a4:3a:5c:b7:4d:d8:31:0d:24:32:29:01:21:56:a2:04:d0:d0:
9f:56:c8:5a:d2:6d:3c:d8:f8:d8:2c:79:a3:b1:3e:48:e3:6a:
2e:f8:b4:01:fe:91:a3:49:b2:36:36:31:fa:20:6e:8f:40:03:
ca:b8:78:48:c4:a5:f5:fe:47:0e:0f:5a:11:a2:0f:5f:93:10:
e4:d6:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:07 2025 by rpki-client