Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier: qz9XIfAItj97Fq5dZUjHxo6363mb6CuRewo3ltJRqmE=
Subject key identifier: D9:94:80:96:A2:5C:52:76:B9:E7:79:A6:FE:70:36:85:64:B1:23:14
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial: 01967E33AA8EE69DE91D12B46A1DA3CF7638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number: 1443
Signing time: Mon 28 Apr 2025 21:00:37 +0000
Manifest this update: Mon 28 Apr 2025 21:00:37 +0000
Manifest next update: Tue 29 Apr 2025 21:00:37 +0000
Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: u/wa5Hq6LB93VKZZ0lCXS7TcWrC03tZWtPgJC4dWRQY=)
2: TfrRwUaFRxR1FQrq_o-pK2cFrHM.roa (hash: II597D7xa6PgwHa7AFUqvd8eYmaRnt2cxxVqhwKEKzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:aa:8e:e6:9d:e9:1d:12:b4:6a:1d:a3:cf:76:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
Validity
Not Before: Apr 28 21:00:37 2025 GMT
Not After : Apr 29 21:00:37 2025 GMT
Subject: CN=d9948096a25c5276b9e779a6fe70368564b12314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:51:74:27:82:48:c3:d2:70:f6:4a:2f:f1:
64:2c:40:0e:d4:75:b5:06:e2:76:3c:50:db:d7:b0:
d8:72:13:e0:77:26:8c:35:5b:89:7f:a8:89:12:26:
68:54:7c:7e:0b:81:e9:91:93:bb:99:d7:41:25:a9:
4e:b2:6f:82:cd:96:9b:f8:47:1c:c4:30:93:76:9c:
df:56:3e:f3:a2:9e:a5:0b:15:4f:dd:74:03:62:a7:
12:f4:be:cb:1f:6f:11:c0:40:36:ab:86:c7:dd:58:
60:af:13:70:c5:c5:d2:c3:35:d5:fd:3d:b3:2a:b7:
d4:a6:41:0a:aa:29:38:48:e2:83:51:59:1b:fa:c5:
d0:5b:60:3f:3b:0c:db:5e:a5:4a:95:9c:26:fd:64:
f4:ff:2f:ca:18:31:0d:7e:a2:bb:2b:d7:ed:8e:8d:
5c:37:52:60:66:0a:00:78:4f:a1:21:a3:72:2a:0c:
9c:ed:76:09:92:a6:e4:0b:06:64:1c:90:bf:fb:2c:
f8:14:6f:ff:9a:fc:03:ac:fc:9f:9d:19:c9:e4:36:
be:5d:30:76:b2:71:07:28:16:23:b1:5f:61:40:21:
c8:e2:c9:37:e9:18:f9:df:88:e6:da:c5:36:c8:fa:
e8:ca:22:3d:44:28:08:fb:5b:2e:52:27:54:71:89:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:94:80:96:A2:5C:52:76:B9:E7:79:A6:FE:70:36:85:64:B1:23:14
X509v3 Authority Key Identifier:
keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:94:25:af:58:83:e2:b1:be:cc:ab:d8:af:25:30:7b:60:6b:
df:5e:6c:58:9a:a3:c9:a9:e4:f3:89:3a:48:47:91:b1:24:f1:
1b:ec:36:b4:00:54:aa:52:34:22:bf:aa:1e:24:90:30:ad:bb:
25:00:25:6d:ce:f5:d9:0e:14:c3:36:39:8b:a3:43:3d:45:aa:
3c:10:08:d0:b4:c3:00:20:75:c4:ca:91:dc:0d:49:b0:5d:9c:
be:fc:b4:1f:22:c4:67:14:59:fc:06:5f:88:b2:51:43:e3:d5:
2a:22:f4:00:e7:71:24:ed:86:7d:61:70:73:d4:63:60:1d:ed:
86:52:33:e1:d6:c9:eb:98:e2:2e:94:35:03:fd:74:d6:da:89:
43:86:08:24:23:6c:2a:19:e3:7e:67:77:15:4b:2d:c2:90:d6:
35:6d:cb:1d:ba:fd:ec:6d:e1:94:12:99:7c:e4:fa:c8:2f:ef:
31:e7:41:2e:53:63:a6:35:21:03:7d:ea:1e:9b:68:69:cf:d1:
a7:97:0d:0d:25:4b:c8:2d:38:15:9f:e5:7a:fb:38:63:b1:ec:
fc:e7:bd:55:c5:de:cb:9d:07:00:34:b6:0d:17:c5:7a:90:0d:
2a:52:1b:44:15:d6:3f:e2:a8:e0:4c:1e:0f:47:3c:50:15:13:
e2:a7:45:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:07:26 2025 by rpki-client