Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: 6py/BrKsA4qTcZBtehaqHHhw0bhy3liBhyFoLj7nn7g=
Subject key identifier: 30:74:A4:AA:F1:58:07:30:73:C9:FF:22:81:67:53:5F:95:03:C6:01
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 019674F9F9D6BD0FD83512FB23BC9597FF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0A18
Signing time: Sun 27 Apr 2025 02:01:01 +0000
Manifest this update: Sun 27 Apr 2025 02:01:01 +0000
Manifest next update: Mon 28 Apr 2025 02:01:01 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: lPO/YtYTFEKCez65yEVqPNCyssDzmOLUA5JPfENl5L0=)
2: wEdGwXpwYmsgP9g00gzYyHwBX_w.roa (hash: xXn4YaJmCyamPKNCyA6d81IZAPpAi8iJdAjjF+NkEPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:f9:d6:bd:0f:d8:35:12:fb:23:bc:95:97:ff:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Apr 27 02:01:01 2025 GMT
Not After : Apr 28 02:01:01 2025 GMT
Subject: CN=3074a4aaf158073073c9ff228167535f9503c601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:38:a9:3f:9d:6b:57:69:9e:ed:8f:6a:93:
14:a9:31:9b:71:03:5c:f7:49:8b:33:e0:8f:9c:db:
50:1b:11:ba:dd:fc:e3:57:45:4c:aa:ce:20:35:b5:
9e:86:65:6f:8c:2d:48:a3:ad:ce:98:2e:68:81:28:
b8:6d:ca:6d:26:18:bb:73:5a:b3:84:13:e0:ed:a2:
26:c7:9d:96:07:49:82:83:2e:d2:9b:8c:43:f4:58:
a1:c7:93:39:2a:56:39:db:5a:54:0f:98:d6:10:31:
f6:24:0a:9a:a1:26:2a:75:79:a9:3f:85:a8:90:02:
57:b4:f5:41:76:5b:20:47:97:67:61:be:70:08:3c:
8b:f5:e9:24:1a:af:b8:48:73:a2:bb:23:7f:97:04:
b6:be:96:87:02:22:ba:0c:35:52:60:c3:b4:8b:60:
50:63:82:58:1a:7f:db:78:7a:07:bd:84:d7:fc:d9:
3d:7c:70:0a:9d:a7:b7:aa:23:84:d3:a4:03:4b:9c:
a0:0b:88:5d:12:fe:c3:b1:42:0e:a8:0d:b1:b4:27:
b6:15:7d:99:10:00:0e:f1:03:0d:cb:40:3e:94:e3:
f3:ca:59:aa:72:9e:8d:22:ec:ff:3d:fa:25:0e:66:
95:b0:09:03:38:3b:3b:c3:de:18:7c:f6:fb:90:21:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:74:A4:AA:F1:58:07:30:73:C9:FF:22:81:67:53:5F:95:03:C6:01
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b0:c0:95:9d:f9:07:f8:5f:05:15:23:40:2e:81:c2:9e:39:
d1:26:cd:ef:0b:95:03:c3:aa:30:cc:33:b2:c6:4a:72:7e:62:
a3:49:47:bb:2d:0a:2f:cb:86:c6:59:1e:90:17:29:51:35:c9:
45:2a:34:8f:23:a6:9d:82:65:0c:94:ec:66:02:31:12:3f:27:
7e:5e:bf:58:e8:bd:72:21:0d:ae:b8:60:09:4b:a6:ff:6f:c5:
20:be:9d:d4:17:bc:89:8c:11:2e:81:a5:e8:da:00:7b:e4:9c:
33:58:59:24:d1:71:c4:09:be:a4:23:bb:b4:23:98:51:0b:b9:
27:8d:49:0b:23:68:d0:57:18:7f:c6:dc:36:d9:7a:3c:bd:a7:
ce:0e:79:21:bf:52:c5:20:4c:4b:72:59:39:99:76:46:03:9a:
5f:06:f0:51:1a:6b:eb:6c:1b:ae:11:57:79:5d:47:05:ca:3a:
52:08:d0:95:4b:bf:25:b5:ca:27:d3:4d:d0:eb:32:4c:33:dd:
f3:e4:25:28:4e:5a:f9:11:c5:f3:c0:81:f9:ce:d1:08:c2:7d:
55:15:d9:ad:e4:c0:56:87:30:09:41:fc:00:33:e0:da:2a:9f:
c3:42:46:5b:f7:ee:27:c2:ac:69:15:0b:7a:76:ed:e4:0a:a6:
56:30:8d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:44:14 2025 by rpki-client