Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: Aoqxnh0QSUtfYfKOZTalOAYSPzlrZ3C3CsZVo9rUQtw=
Subject key identifier: 11:F8:85:D8:F9:4D:EB:65:43:65:1C:37:EA:60:9E:CD:48:69:E1:58
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 0196741E45CB59860A4F9B698F460E9F3D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 1511
Signing time: Sat 26 Apr 2025 22:01:03 +0000
Manifest this update: Sat 26 Apr 2025 22:01:03 +0000
Manifest next update: Sun 27 Apr 2025 22:01:03 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: iv3XaZ6o9sc/xu5xDkrTBdE75JiUuqi/Xxx9PtgoLlM=)
2: kX-VdRHtzW1CfMS8g0O9lVNrN34.roa (hash: 1YTwpLO8F8/c72ElMFw6a0YxOTA0MMlnVtuXBy93WMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:45:cb:59:86:0a:4f:9b:69:8f:46:0e:9f:3d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Apr 26 22:01:03 2025 GMT
Not After : Apr 27 22:01:03 2025 GMT
Subject: CN=11f885d8f94deb6543651c37ea609ecd4869e158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:5a:73:c9:0a:1f:94:4e:d4:55:29:a9:50:
79:60:5c:bd:b4:31:db:41:e5:12:0d:df:91:a9:d0:
c1:9e:21:81:dc:49:db:37:ca:69:7c:4b:9d:be:79:
8a:2c:d8:1e:54:09:75:c8:6e:aa:d0:95:5b:f8:d9:
eb:12:58:8d:63:b4:da:12:44:6a:08:7e:b5:b3:1f:
ef:66:3e:60:bd:5a:9f:d4:01:d5:0c:02:c6:84:d2:
d0:50:72:30:10:4d:57:02:c3:37:91:5f:dc:77:57:
0a:5d:a5:f8:af:ab:77:90:71:8a:b5:d8:b2:ee:75:
2c:cb:e5:8c:1e:79:4a:57:f5:59:7d:4e:8c:42:a9:
e8:52:3f:f3:30:a8:25:bf:6c:aa:8e:57:1f:f0:ea:
30:7b:75:dc:63:1a:c6:5b:d8:66:a6:67:dd:06:3f:
1f:91:50:d5:8e:90:25:3b:16:84:ea:14:3c:28:0a:
7f:28:65:e8:66:3c:b4:29:09:f1:a7:37:58:10:ed:
39:dd:13:01:ce:c1:ee:f2:8c:7c:9e:73:07:b9:c0:
20:51:cd:42:0f:5a:06:00:45:48:2d:24:93:8c:fb:
65:b9:5a:93:b6:44:87:4f:c5:f8:a4:f2:e7:b6:c3:
73:a7:bf:14:00:79:be:e7:d9:7a:ad:f7:00:a5:3e:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F8:85:D8:F9:4D:EB:65:43:65:1C:37:EA:60:9E:CD:48:69:E1:58
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d4:2d:58:55:89:8f:12:25:fe:5a:7c:df:f6:36:0e:e5:4f:
93:a6:4d:d8:2e:25:d4:a4:59:29:07:12:42:9f:5f:50:9a:4e:
bb:11:9c:34:8a:64:a6:c3:0a:5e:36:80:fe:1c:e0:45:32:eb:
37:23:ec:93:e9:ad:d5:55:56:75:aa:6a:b3:8a:b8:2a:94:d7:
6c:ab:ab:cd:e6:22:fc:29:75:0a:13:db:b3:70:8f:7f:d2:9c:
48:e6:17:26:e5:0d:ae:00:22:12:7f:1d:c2:15:05:3b:a1:7e:
60:1a:b1:62:23:78:c0:c0:2d:e3:a2:99:2a:36:6e:9f:2c:be:
d2:5f:80:a5:01:f0:3c:98:65:5d:6e:36:c5:59:4c:67:b3:22:
b0:7b:23:b5:4a:6f:f9:54:0b:90:90:35:40:54:2d:04:18:9a:
17:2a:98:fb:1c:82:dd:10:c1:c1:06:a1:c1:c0:26:72:3e:c3:
c2:ac:d6:6c:b3:d6:bd:74:bd:84:b8:10:75:ae:a2:8d:d6:81:
04:a8:05:13:78:e9:fc:89:5d:35:db:ce:18:9f:d2:f8:b2:d4:
aa:9d:4c:81:14:61:b3:63:b7:90:a0:14:e0:84:b2:aa:c4:1b:
74:66:0d:10:0f:40:f2:81:99:c4:cc:ce:a3:ab:52:7c:8e:96:
60:c3:93:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:34 2025 by rpki-client