Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: l4It/7yXmy9PYXA71CM6Dufmm++qhJRNNLfFx/ZFFaQ=
Subject key identifier: A9:5E:8B:FC:34:9C:8D:10:C3:D8:5B:A9:CC:71:E4:D6:89:5A:7C:0F
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 019687DB7328DAFB98A64DA414B1BCDB46D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 03A7
Signing time: Wed 30 Apr 2025 18:00:27 +0000
Manifest this update: Wed 30 Apr 2025 18:00:27 +0000
Manifest next update: Thu 01 May 2025 18:00:27 +0000
Files and hashes: 1: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: 3m+pa7CdL5F7QOhUXSG8ZqLn5K+k7hux0rfYdtFBlD0=)
2: VDPfxaZNYgN6f0mgtDD2wmc6NUg.roa (hash: 0dxJ0L7unUdYddqR9bLGYECF59D15vEhelIex1V/ecQ=)
3: sllzpkHFh9mOLjlCML4tbQK0pwU.roa (hash: E6feljoCdpMR0hz/J2bpGEFeQDlLz1z/a780M0tQTGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:73:28:da:fb:98:a6:4d:a4:14:b1:bc:db:46:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Apr 30 18:00:27 2025 GMT
Not After : May 1 18:00:27 2025 GMT
Subject: CN=a95e8bfc349c8d10c3d85ba9cc71e4d6895a7c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:17:38:2c:ec:cf:12:49:27:14:d3:2f:54:
f6:28:e1:eb:41:a1:5e:dd:7d:73:26:2a:a1:d8:51:
54:21:12:91:3b:38:8a:0a:8d:6e:cc:ba:c7:cf:98:
f3:71:c5:47:73:f0:cf:4d:6c:19:1a:f8:c5:93:f2:
47:86:45:50:d9:aa:1c:10:ef:42:a1:f1:8d:fa:b2:
65:5b:e0:f8:ea:0f:b0:f4:ff:de:3a:4b:f9:28:19:
7b:9d:71:29:21:a5:d8:54:8e:f4:fb:4f:97:ed:2f:
68:62:03:23:ff:9d:e0:a8:c9:86:74:c9:fa:98:07:
a2:95:b3:61:e9:2b:d0:ea:d2:04:12:4b:d1:cb:a2:
66:21:d6:de:9f:c2:ba:19:61:2a:b6:6a:bf:db:82:
53:12:2a:64:14:12:6f:48:6b:18:92:dd:c9:e0:5b:
fc:54:a5:f7:20:1c:fa:71:99:70:5b:68:1d:c7:25:
db:f5:1c:20:8a:ad:8d:39:00:32:8f:74:d6:05:c0:
20:79:29:a5:5e:d1:ec:27:93:9a:03:d1:0b:71:de:
a2:ed:92:da:96:84:a8:03:fd:c6:f8:bc:65:4e:22:
ba:a1:64:7b:12:21:2a:24:ea:a4:9a:46:20:76:76:
e2:d5:f7:3e:6d:bf:d7:7f:cd:55:7b:86:b8:f4:29:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5E:8B:FC:34:9C:8D:10:C3:D8:5B:A9:CC:71:E4:D6:89:5A:7C:0F
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a5:35:e7:f2:fc:7a:c6:50:de:99:8b:a9:d9:25:b3:2c:2b:
57:3c:97:74:ca:1f:bb:91:41:79:66:33:f8:1c:ed:b5:43:73:
d5:9a:9a:c7:bd:a6:16:b6:61:d8:b8:a7:c0:b8:1c:76:5a:08:
83:f0:53:66:8f:08:b4:5b:6c:0d:4a:3d:b9:43:75:eb:df:fb:
38:c7:94:49:02:c6:6a:1f:9b:59:fb:8f:7d:bc:17:5a:36:0a:
aa:37:ee:a1:cb:42:e8:73:d4:7d:e4:d8:d9:98:a4:97:6a:d0:
d9:1c:b9:91:9d:70:d8:78:9c:f0:24:fb:84:19:29:94:68:f6:
37:e3:ff:de:9f:68:a5:ff:cc:eb:64:76:36:86:d3:40:01:a8:
cb:42:02:ea:43:9e:0f:14:b9:f7:1c:77:24:3e:12:c4:f2:b6:
ff:e2:94:1e:3f:18:2f:93:6b:26:9c:ea:49:02:66:2b:16:f4:
02:66:30:70:2d:8c:24:c6:14:e0:ea:a6:07:56:86:fe:e1:06:
c5:5f:e1:65:12:d5:85:49:46:7c:d5:2b:c6:48:6b:64:46:3a:
ee:bd:a2:c7:89:c4:35:a3:e5:cb:e1:7f:b6:0e:c6:51:a6:0b:
a6:b2:28:30:88:0c:fb:4e:0a:5f:ba:eb:c3:8b:d3:70:82:2f:
24:42:c9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:58:25 2025 by rpki-client