Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File: IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier: IxIUoG8tpDizPBYPq3CU1fKKaXgyAbxKjvIxb4G6S8U=
Subject key identifier: 1D:3C:C5:2A:97:68:A4:F0:39:A8:53:F9:7E:0D:8F:6E:8E:81:C2:9D
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer: /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial: 01967AC5231B71F47E639251993823EDE88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number: 06CF
Signing time: Mon 28 Apr 2025 05:01:01 +0000
Manifest this update: Mon 28 Apr 2025 05:01:01 +0000
Manifest next update: Tue 29 Apr 2025 05:01:01 +0000
Files and hashes: 1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: PjQBgtSA8ZwI7jOGS5LXVihQO3DX+36j6bQV/GQruF4=)
2: tKV7ZxqGnJTtEa2_ye8Y1d8JNh0.roa (hash: 8oiml4GgGUwThCKHUcnZfuIG0l8a7ZiiCuW4RZzZ3cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:23:1b:71:f4:7e:63:92:51:99:38:23:ed:e8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
Validity
Not Before: Apr 28 05:01:01 2025 GMT
Not After : Apr 29 05:01:01 2025 GMT
Subject: CN=1d3cc52a9768a4f039a853f97e0d8f6e8e81c29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:c8:90:e6:0f:5e:53:8a:9a:df:6c:79:c2:
59:f2:d6:cd:08:23:c9:66:e5:39:65:71:f2:ed:61:
31:91:e7:7e:27:f6:79:66:59:d6:ea:83:ef:dd:31:
7a:89:11:26:db:78:e6:ea:48:a5:79:02:7c:86:4b:
79:74:30:a4:9c:85:78:43:be:bf:72:24:0d:1c:22:
3e:d5:06:ca:84:e0:47:43:d0:6d:30:01:a7:75:78:
87:70:6b:4f:b7:47:b2:9d:8e:28:36:6b:5a:14:63:
52:60:47:39:30:9e:56:8c:b7:05:42:da:31:2d:f2:
23:bb:22:fd:43:12:6a:1c:46:6e:1a:84:d4:1b:01:
59:26:17:ea:a8:dc:f3:57:2b:c8:b4:7a:48:8b:9f:
7e:00:1a:b2:28:c1:2b:66:7c:eb:8c:13:56:cc:76:
b9:05:c9:47:a9:8a:d1:f7:f2:93:34:10:d6:57:1e:
33:09:a5:12:f9:b1:98:92:84:82:5f:58:b1:35:e7:
3b:23:62:85:d0:c8:be:16:26:2b:fd:d5:4a:60:23:
5c:64:25:70:a9:e2:58:8c:d3:63:0a:10:03:52:4c:
36:c9:20:cd:63:88:e2:e2:25:20:5a:77:dc:56:6d:
c9:f0:ac:99:0d:ca:fd:e2:5c:1e:fa:8a:d8:7c:f5:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3C:C5:2A:97:68:A4:F0:39:A8:53:F9:7E:0D:8F:6E:8E:81:C2:9D
X509v3 Authority Key Identifier:
keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:56:22:0f:35:04:75:75:80:df:36:0d:37:2b:d6:cf:50:61:
f3:31:6e:63:82:b7:fe:c1:75:f0:51:e9:c8:a3:c1:b4:5a:d4:
00:a4:fc:b3:cc:31:83:0a:ab:9d:21:2d:8e:1e:4a:f6:40:cd:
b5:0c:de:38:ec:fc:c4:9a:c3:8a:6a:47:07:5b:72:77:42:32:
10:24:c2:2a:ca:31:a0:67:4b:99:38:d4:6a:5e:0d:a4:4a:29:
2a:cd:2e:ed:de:1c:9f:0d:6f:34:0e:c0:b8:b2:60:0d:71:a5:
57:77:05:89:f6:b6:c9:6e:66:f4:68:9a:fe:09:22:00:b3:4c:
9a:02:73:50:66:54:a2:ab:3f:41:81:48:7e:82:59:70:01:e8:
bd:a7:2f:fa:35:fa:60:5c:a4:28:c3:3c:4f:3c:0c:38:b3:a3:
06:8f:38:9f:e7:be:a2:cf:46:e8:ac:0c:84:ca:bd:26:d9:a9:
2c:7f:fd:4f:a2:5e:2c:7c:d3:47:f6:bd:36:a9:22:ee:aa:01:
c9:61:eb:1b:a1:e9:d8:75:1c:ad:4b:07:06:87:41:c7:c8:5b:
72:c2:fa:c5:11:30:60:ec:e2:ea:6a:b5:d0:3c:74:9f:f5:58:
ea:0f:ec:3a:d0:8b:cf:46:e9:59:e6:d9:c9:03:34:9a:f1:07:
a5:91:9b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:37:43 2025 by rpki-client