Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: BWBF9ici/GY0YeuxSnIJyFOeCfVvk/AEtAhOEuuJxMI=
Subject key identifier: C2:62:79:09:84:7C:B9:40:67:19:98:5B:2A:E7:09:BE:E9:A1:0D:7A
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 01967FEAF7FB854F3C92DB11E9768FDFF5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 0E53
Signing time: Tue 29 Apr 2025 05:00:27 +0000
Manifest this update: Tue 29 Apr 2025 05:00:27 +0000
Manifest next update: Wed 30 Apr 2025 05:00:27 +0000
Files and hashes: 1: OTybeQSqUNtNYhW7lIqMu8Xbs9U.roa (hash: qhQfPgHQL0RGn7gt2AnYjMV/XyhTZwosQOVt3JjZawg=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: wDvCGaIqwM7sF9vDDYCdPYNNzE/PWrBj6xNIYj6Y3K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:f7:fb:85:4f:3c:92:db:11:e9:76:8f:df:f5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Apr 29 05:00:27 2025 GMT
Not After : Apr 30 05:00:27 2025 GMT
Subject: CN=c2627909847cb9406719985b2ae709bee9a10d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:c7:e1:76:fc:42:43:9b:90:09:f4:6d:39:
46:1b:a1:95:c5:4a:49:58:46:00:36:50:b0:a3:90:
6f:ee:6d:a8:19:00:19:d0:ba:ed:2f:ad:41:41:e8:
b0:e1:41:5b:85:2e:18:35:a7:98:8e:50:49:d2:78:
3f:b4:4b:c5:d5:66:ad:58:07:11:9d:a0:44:b3:0a:
de:64:58:e9:9f:3d:d8:b7:1e:aa:d6:60:01:8a:10:
d8:26:e7:5b:c3:96:2e:53:46:02:28:42:17:b7:26:
f0:52:17:1f:ed:b9:45:f9:19:ec:ad:12:ba:5b:29:
bb:f2:c1:b2:09:81:07:7b:b2:a0:5b:45:f7:c3:7d:
2f:94:a5:6c:6c:11:1c:99:99:62:a5:af:85:e0:ab:
77:c4:56:66:5b:b8:ba:24:d6:e4:6e:6a:2e:8f:16:
ad:91:1b:2a:c2:39:42:85:b1:6d:8c:7f:f8:2c:7e:
f2:e1:fc:57:47:dd:a9:31:63:42:16:80:f6:e2:0e:
11:21:39:05:f8:d1:f7:1a:5d:6c:59:13:c6:8a:0d:
03:d7:bf:8f:fe:da:b4:b4:4d:6d:04:72:0d:77:09:
7d:01:c4:01:44:44:de:05:03:a1:b0:2c:a3:3b:64:
4a:19:40:65:86:b0:d0:b6:9b:1f:a7:81:7a:e7:7c:
e1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:62:79:09:84:7C:B9:40:67:19:98:5B:2A:E7:09:BE:E9:A1:0D:7A
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:71:f7:13:c0:00:1f:ac:3a:e7:b9:20:73:d6:f3:bb:34:24:
76:56:50:b7:fd:8b:fc:20:a2:54:33:3f:a8:b1:13:1a:a5:db:
59:52:ca:4e:67:ae:2c:8d:a2:2c:8f:9b:a4:4e:82:be:bc:ae:
17:a5:9f:bd:eb:bd:51:2b:5c:d2:dd:55:81:29:a8:cd:8b:f8:
67:7d:57:25:53:16:ec:b9:ba:71:8d:e2:87:c2:0a:0b:ba:6e:
72:8f:4f:c4:ec:d1:a8:69:22:26:6f:0f:39:ad:d3:7e:af:96:
62:db:74:86:e6:c8:80:a2:85:e5:62:92:39:15:0d:78:71:ff:
bc:bb:3b:f2:a3:74:27:69:9f:dd:e4:f3:01:a7:25:bf:ce:45:
bc:fa:cd:9e:a8:06:c1:89:e7:a1:e3:73:4a:a0:23:9c:ab:0e:
c5:c9:a0:f8:ed:6e:0d:d1:1b:7c:28:34:82:48:10:56:79:30:
8e:5c:62:91:bd:9f:4c:5c:eb:98:97:3d:57:79:c3:c6:9c:4d:
d4:ce:91:34:60:e2:e2:70:d8:5c:3c:b5:ad:5f:60:e0:03:71:
e5:ab:45:85:ae:b1:24:df:80:bb:7b:ae:8f:74:05:e8:91:72:
d9:75:89:b8:c4:82:08:ba:37:89:93:09:0d:ce:ae:84:23:d1:
fa:41:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:35:27 2025 by rpki-client