Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: PvwZuXwkgBHqg8nUEIomWgJ+0f9MeMF7FtYqvEWp0UQ=
Subject key identifier: F3:96:E9:DC:D2:59:64:45:66:86:38:B2:0A:A3:98:EC:62:0F:FB:ED
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 01967F0FA01F8CDB5EBEF6D20B57B0424A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 0CB1
Signing time: Tue 29 Apr 2025 01:00:52 +0000
Manifest this update: Tue 29 Apr 2025 01:00:52 +0000
Manifest next update: Wed 30 Apr 2025 01:00:52 +0000
Files and hashes: 1: aRphps94ueev9_cb0Fbr1t6EWos.roa (hash: qY/6yr4D72wfd0je0UgbA5pXBnLSwy4IbEDXkYKHi6c=)
2: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: Kss+PrQs2snJVBu/5qE9chjqZvbqVGo2WYs7oUx5Z7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:a0:1f:8c:db:5e:be:f6:d2:0b:57:b0:42:4a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Apr 29 01:00:52 2025 GMT
Not After : Apr 30 01:00:52 2025 GMT
Subject: CN=f396e9dcd2596445668638b20aa398ec620ffbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:3f:5d:cd:17:e9:e5:81:cf:47:6f:d1:f7:
7f:a0:ec:10:fc:fb:61:1c:4f:5b:97:ce:54:ca:88:
b0:6a:89:cd:1d:ce:5c:35:9b:4b:dc:2e:f7:96:da:
d5:17:fe:c5:a2:46:e5:b6:27:73:5c:54:31:44:97:
a0:39:d9:06:f6:c4:91:66:f8:68:6b:c3:3b:4a:78:
e9:6d:a3:5f:0a:0a:88:e9:3b:27:fa:a3:cf:e4:27:
da:d7:ef:ba:2e:e7:44:15:50:88:4f:98:9b:4c:03:
86:39:b0:9f:14:9e:53:a3:60:52:12:77:d2:40:ef:
98:32:d3:6f:d8:43:33:03:8e:8c:23:26:4f:67:e6:
64:88:d6:53:82:94:cc:e1:7c:7b:a7:52:51:3f:33:
24:1c:37:58:e1:2a:c6:02:5f:16:7e:99:f9:35:2b:
70:76:53:b1:8c:bc:8d:7f:60:46:a4:dc:d4:90:06:
1b:71:f6:21:74:59:ee:8c:bc:16:30:f1:61:87:d0:
07:65:4e:96:db:57:d6:1f:4b:e5:fb:fb:8e:be:ce:
5f:41:9d:a0:64:7e:c0:9b:cb:2a:89:5b:64:36:e9:
c2:21:d8:77:34:d9:92:9b:46:3b:fc:de:d0:30:15:
0e:06:f9:8a:24:a8:71:6e:97:7c:30:69:b8:38:4a:
cd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:96:E9:DC:D2:59:64:45:66:86:38:B2:0A:A3:98:EC:62:0F:FB:ED
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:82:79:64:72:3a:25:79:92:20:71:41:6d:7f:f6:5a:4a:6e:
52:fa:6a:57:8f:56:f9:7f:05:12:ec:e9:b8:52:a5:75:65:80:
9e:39:e3:42:80:8e:47:99:e7:ca:88:5a:8f:cb:33:37:26:ff:
56:ca:f2:d7:4b:d1:ea:4c:01:5a:41:b9:60:00:2a:7b:fc:c2:
54:70:49:3d:f0:50:b5:26:c2:7e:d9:85:ba:95:71:82:a4:79:
5b:d8:e9:df:b7:ea:ba:ed:a0:cc:4f:69:a7:21:1b:cb:21:4a:
2c:4f:71:fc:ca:07:93:52:7c:2e:7b:34:22:48:9f:31:7a:42:
fa:31:9c:da:77:6e:7b:ad:17:28:05:5c:75:f8:d8:80:32:d4:
90:2e:eb:50:1a:ba:c5:c5:0e:c9:ea:9f:90:df:f4:a1:fb:c6:
e3:90:43:08:88:5d:85:40:83:81:a6:ce:50:7d:a0:e9:98:88:
52:c9:b6:0e:14:36:ff:da:30:d8:e9:df:dc:c9:32:27:2c:da:
df:bb:dd:7f:92:60:56:4f:86:bd:3f:64:3c:1d:ae:38:81:4c:
19:e3:82:07:46:3d:55:b7:53:0b:73:12:95:6e:39:77:80:55:
19:e6:b4:01:f0:ff:0d:9f:c7:92:9c:01:1d:37:3a:8c:f3:33:
7d:83:4a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:15:57 2025 by rpki-client