Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier: ONJXIWHSBBUNSi30zc6CstFKZH1l1hfRTkeXoMddUow=
Subject key identifier: 62:F3:65:0C:A5:8F:27:9D:F9:C8:B5:95:F5:73:07:9B:2C:48:6F:BB
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial: 0196786908957F80BFF4251A13BCE32FE577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 18:01:11 +0000
Manifest this update: Sun 27 Apr 2025 18:01:11 +0000
Manifest next update: Mon 28 Apr 2025 18:01:11 +0000
Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: f/8NNqtln3McWYw8sEYisMwSO92Q/6hXlIfhCzUzj9Y=)
2: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (hash: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:69:08:95:7f:80:bf:f4:25:1a:13:bc:e3:2f:e5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Validity
Not Before: Apr 27 18:01:11 2025 GMT
Not After : Apr 28 18:01:11 2025 GMT
Subject: CN=62f3650ca58f279df9c8b595f573079b2c486fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:dc:13:49:5a:04:de:86:1f:d5:a3:28:fb:
e0:ba:05:06:3f:17:45:c8:fa:c9:0a:7f:f1:11:02:
af:a9:e3:01:44:18:a7:cb:e5:b5:e1:cd:dc:65:a6:
53:f9:97:6d:a4:85:03:1a:3b:e0:f3:76:c4:fb:37:
54:97:01:1b:b6:48:09:cd:c1:8e:17:7e:4b:16:ec:
ca:0b:dd:9e:cb:e1:28:85:52:4a:f4:86:f1:37:7d:
fa:92:af:86:56:6a:57:ee:61:20:78:25:95:2f:41:
a3:c5:eb:e2:33:de:c5:65:a5:c6:16:dd:25:b3:20:
c2:dc:ee:f0:66:05:85:47:c5:69:eb:ba:32:48:d4:
c6:c6:d1:c5:d9:58:a9:44:74:24:e7:39:ad:08:7f:
58:eb:15:ed:bb:53:9f:0d:48:4b:6e:74:50:f6:d5:
d1:ba:26:2b:d0:df:b0:e3:4a:4b:7b:78:4d:d6:80:
d1:43:55:40:4e:b2:67:70:9e:ab:aa:e7:93:21:dc:
3f:df:66:30:c3:55:ad:93:90:f3:43:4a:86:d5:8a:
00:5b:6e:b5:49:e9:41:a7:70:51:64:a8:f9:04:fb:
f8:10:53:7c:7c:9f:fd:55:c8:a1:3f:e7:a1:32:1b:
2f:d9:d2:44:23:d7:26:83:6a:9a:7f:a6:df:e8:5a:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F3:65:0C:A5:8F:27:9D:F9:C8:B5:95:F5:73:07:9B:2C:48:6F:BB
X509v3 Authority Key Identifier:
keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:50:b4:6c:d6:fe:3d:f6:dc:93:2a:95:05:67:05:37:1d:15:
5b:1a:17:ae:f7:71:59:cd:af:82:1d:31:0c:46:77:de:f5:ef:
e5:1f:38:42:a9:ad:6d:e4:46:55:ef:da:08:b1:6d:b9:c1:b0:
32:d7:81:d6:9d:5d:b8:46:1b:92:f0:54:fc:f4:1a:ed:f3:da:
9c:04:9e:de:ed:b3:50:2e:99:fc:e1:10:09:48:32:2e:8b:06:
3e:8f:b7:bb:6c:02:18:28:6f:ba:69:27:a8:45:a8:37:df:52:
58:3b:90:39:02:81:4c:a5:ae:03:b4:37:ac:37:95:48:95:2a:
59:90:80:54:02:9c:74:aa:d0:01:17:ec:a4:60:9a:55:34:a0:
f3:0a:5e:35:95:36:71:e5:14:60:49:09:04:35:40:93:a2:0f:
b5:c0:00:e5:8c:22:eb:e1:75:53:b9:96:da:57:81:a9:f2:e1:
ff:5c:18:17:9a:b2:38:66:2f:32:da:d4:32:91:aa:9d:3d:59:
f8:79:c0:d9:0f:7b:b1:d7:fe:20:39:ef:27:f9:55:59:bb:72:
06:85:e6:e6:2f:e0:27:33:75:1a:b4:3b:b0:e6:af:6c:09:67:
d5:57:1f:dc:83:d1:69:e3:de:98:15:70:9d:0f:5c:22:10:42:
b6:59:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:22:44 2025 by rpki-client