Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: buuG7vCvvFpk2PkZIeko9maG/Zf3hVyw35Utih9/K/4=
Subject key identifier: 75:A7:C0:A0:12:09:2D:71:30:C5:3E:12:F5:3F:C8:29:1E:AC:E4:D2
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 019652A496C5ABDEE36C55421627C89EC630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 10:00:40 +0000
Manifest this update: Sun 20 Apr 2025 10:00:40 +0000
Manifest next update: Mon 21 Apr 2025 10:00:40 +0000
Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: qB5R5EeM96g3DiWUzDNzMaebar9NwrsKO6Oa9ngcLHE=)
3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:96:c5:ab:de:e3:6c:55:42:16:27:c8:9e:c6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Apr 20 10:00:40 2025 GMT
Not After : Apr 21 10:00:40 2025 GMT
Subject: CN=75a7c0a012092d7130c53e12f53fc8291eace4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:db:b2:70:93:5b:ac:46:59:24:42:9a:9e:
3e:59:a2:44:eb:ee:4f:98:4d:0e:7b:f0:60:a7:94:
df:8e:65:73:1d:da:0e:0e:f7:52:e2:b6:49:81:9e:
ad:a3:1f:8b:6a:a7:43:61:25:ef:c8:04:1d:6b:75:
34:00:f0:39:e6:0a:ce:b5:2d:ae:2a:43:8b:2e:30:
99:0e:23:7c:25:49:14:63:ee:b7:ef:2a:93:67:1e:
98:a0:d5:08:bb:52:d1:c4:54:f3:03:5f:f0:cd:1b:
5b:66:50:b8:82:40:63:f3:4d:a7:5d:b3:fe:1e:30:
bc:67:d0:0b:26:f2:1c:01:8b:d8:f3:b0:0f:df:09:
73:61:d7:99:72:8c:3b:7c:b5:a6:5d:f0:7c:9c:71:
0f:c2:ad:df:67:34:68:f2:6f:35:4b:41:3f:bf:6e:
88:75:79:57:c5:f6:f9:12:1e:b0:99:7c:94:b6:0c:
3d:99:89:2c:92:29:93:e7:2a:74:3a:b3:b5:0a:34:
ad:70:6a:a1:e4:1a:f0:59:e2:60:39:63:f9:0a:33:
0c:f7:56:58:ad:ad:00:89:5b:bc:0f:80:71:f4:76:
f2:27:07:bb:7c:03:bd:95:e6:b9:ed:b3:7a:68:3c:
b2:a0:38:91:9f:53:13:f6:92:7c:64:5b:c2:0a:ca:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A7:C0:A0:12:09:2D:71:30:C5:3E:12:F5:3F:C8:29:1E:AC:E4:D2
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6c:b6:c2:45:a2:dc:14:31:f6:5d:bf:12:1b:ce:0a:36:e7:
9f:f3:19:3f:4f:ca:4f:73:96:22:ce:06:27:60:db:cd:a6:bc:
8e:dd:64:46:13:1c:28:b7:e8:e2:d0:0f:d2:a9:d5:44:29:9b:
76:5a:fc:1b:df:03:a8:89:c8:6f:54:4a:a5:c2:d0:73:de:11:
44:7a:4d:85:ad:fb:82:f0:97:17:40:a7:d1:74:a4:55:00:a1:
ba:d9:0c:ea:ad:f0:c1:3e:93:6b:ff:1f:e4:a7:95:32:24:3f:
59:f3:c2:ac:94:75:11:33:d7:90:80:47:f6:b8:0d:c2:51:ab:
c7:38:d4:96:5a:09:41:81:2a:6a:e0:8d:65:3d:64:f1:4a:a0:
7e:c0:44:4f:50:e6:50:1c:85:1a:4e:58:a4:9d:3c:42:13:08:
e1:6c:fb:d7:78:b6:60:36:07:b5:67:2a:cb:91:87:4f:1c:e3:
32:63:81:32:d8:41:fe:e5:c5:ce:c9:85:43:0d:a6:43:71:a2:
16:ab:54:02:94:cd:fc:60:8e:fc:e3:60:ec:b7:6d:80:be:ec:
a7:f2:0d:ed:75:e1:41:1f:62:a5:d9:65:22:4a:73:ef:17:dd:
85:7b:92:d1:44:36:67:c9:ec:c5:9f:f7:bf:76:1f:ea:da:61:
25:ba:c3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:18 2025 by rpki-client