Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: SwROM7VyJmpwEHPgCYcAhMe3DBLBd6Jflr7lsClp+7c=
Subject key identifier: B5:22:DC:09:4F:73:1C:42:BC:CB:70:ED:3F:B1:74:77:36:BA:ED:1B
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 01967ED8D7C4B68D2F55BC209D1378057AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 056F
Signing time: Tue 29 Apr 2025 00:01:02 +0000
Manifest this update: Tue 29 Apr 2025 00:01:02 +0000
Manifest next update: Wed 30 Apr 2025 00:01:02 +0000
Files and hashes: 1: 23TVA-2OL8ERCOX_dzgjoyDr7ic.roa (hash: HMZHd+55+IMt+Dclhou8M1RYJTwGL8XVXHQpPA4hFCU=)
2: 4-TbcXFa8SESUNpbTLtHqKnqP4k.roa (hash: rfh4ZMQFADgVlOUe/tULyDtfhvBafCEIjiEbbsuqihs=)
3: NndyVqvy3vcxCnZsIK2_Uyxv0lk.roa (hash: cAwKtSP7N0kxacGJxtWaLz9RZYIS8hQUwg7TB0bpnnY=)
4: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: TmpD+AArnMi34mhwHDYYxHaA2Xt02HPEJ59yW04MdsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:d7:c4:b6:8d:2f:55:bc:20:9d:13:78:05:7a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Apr 29 00:01:02 2025 GMT
Not After : Apr 30 00:01:02 2025 GMT
Subject: CN=b522dc094f731c42bccb70ed3fb1747736baed1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:47:ef:a9:1c:f9:91:75:c5:fb:c6:b7:3d:
1f:1b:99:6c:d4:35:cf:9c:2f:7e:21:4d:13:a2:48:
1a:5b:c2:e7:ef:56:34:59:aa:5a:1d:c9:80:cb:bd:
ca:67:65:51:7a:1b:a3:6e:08:c2:a7:55:c4:f4:f3:
6b:80:b1:6d:a2:0c:7b:f1:2f:6c:35:3e:4a:13:82:
93:9a:90:73:eb:2b:eb:68:08:30:f7:eb:21:d4:07:
68:f2:d8:14:7a:f6:64:e0:34:23:98:f4:03:d8:47:
f2:53:07:32:0e:e3:13:ae:6c:33:9a:6e:17:1c:2c:
2f:1b:a0:61:e7:83:f9:ab:6d:af:92:17:d8:b1:77:
c7:8b:3b:6c:07:bf:fa:ea:21:f7:54:74:1e:36:b3:
35:a1:31:ac:2b:94:70:2c:b1:55:e5:5e:35:c0:73:
1f:5f:24:15:09:45:51:11:43:a7:ca:7f:41:60:9b:
39:a5:08:9c:d5:d9:92:b1:db:d9:2d:b2:29:a2:b6:
65:c2:09:c3:6b:87:e1:99:84:57:d9:89:f3:2c:12:
90:b2:a2:18:e2:3c:55:9a:f4:c0:db:99:3e:bf:be:
b0:f5:cd:e8:b4:7f:a8:23:a4:bc:c7:e3:a5:32:3f:
9a:3c:97:48:eb:d8:4e:6d:71:1d:20:45:8d:c6:72:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:22:DC:09:4F:73:1C:42:BC:CB:70:ED:3F:B1:74:77:36:BA:ED:1B
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5a:e0:8e:e4:b5:f9:44:ce:c5:8b:36:1b:9d:db:4e:55:f5:
7c:ea:cf:4a:b0:4a:2e:f6:55:f0:01:0c:16:c0:52:c5:6e:da:
9f:77:39:f3:47:f2:76:c5:c4:f0:1e:8d:90:47:ea:f5:c2:7d:
36:fc:e8:53:62:d2:b3:e8:57:db:0a:3d:c7:ab:83:24:6e:61:
be:15:29:4e:ea:21:34:7d:a5:23:93:99:68:7d:c8:79:8f:2a:
cb:95:22:ec:fb:50:c0:ba:cd:e5:6b:16:b6:8b:8e:89:2a:2d:
f6:27:cf:89:1a:3a:58:81:24:49:1c:16:ce:db:91:8f:7d:53:
e4:c5:78:87:c9:c3:bc:09:4a:46:74:23:b1:3a:36:b6:ba:41:
d8:a7:e8:82:7a:d1:5e:2b:07:89:54:9e:e6:0b:ae:82:27:d6:
8c:bb:db:a8:64:26:b6:a3:fe:b9:e4:05:e7:57:f9:8e:c7:69:
5f:82:fb:46:41:03:1d:8a:bf:a2:e7:ac:2e:eb:e0:a3:f0:13:
c6:03:49:6c:1a:25:2a:95:34:df:0d:ca:65:18:e0:d4:c6:e8:
0a:f7:e8:8d:89:54:9b:74:51:27:f7:4d:eb:fa:ec:c2:25:93:
5b:61:a1:7f:1c:09:0d:2a:d1:8e:d3:75:b0:40:c7:38:4d:fd:
84:19:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:44:41 2025 by rpki-client