Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: JyjrDOactaz5I7ZAPw8vvc16r+8THJ3OQn7GkeRkyBE=
Subject key identifier: 33:D4:56:04:24:FF:39:64:ED:80:03:40:76:66:41:6A:6D:10:2F:37
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 019680FDFB362B08C61CE2C371BF14378EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 08A7
Signing time: Tue 29 Apr 2025 10:00:50 +0000
Manifest this update: Tue 29 Apr 2025 10:00:50 +0000
Manifest next update: Wed 30 Apr 2025 10:00:50 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: hHFwjPCnbB8wsQ7SfeuMtfJ4uf9m0J71UKICiL6KPWQ=)
2: kQI24cv0NZjcs-NoEtkNWQr945M.roa (hash: lv4kdfvUyBf5e1wmjHgM1hbCJlTmhLUys8Yvw75WiAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:fb:36:2b:08:c6:1c:e2:c3:71:bf:14:37:8e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Apr 29 10:00:50 2025 GMT
Not After : Apr 30 10:00:50 2025 GMT
Subject: CN=33d4560424ff3964ed8003407666416a6d102f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:d3:2b:05:5a:6a:2f:d3:0e:8a:2d:a2:a7:
f3:19:29:47:60:53:29:d5:79:e9:30:53:12:df:ca:
44:f7:0a:e8:fc:56:49:c5:e4:6a:7d:ec:fd:80:bf:
35:11:48:ce:e9:1a:cc:f4:b0:df:f6:11:bc:da:d5:
da:b3:cb:d4:d7:76:58:df:63:e4:e5:10:59:19:73:
c8:94:f3:d8:85:1c:a3:23:aa:ca:2f:35:6d:f2:eb:
c0:fc:d2:70:99:6f:8e:99:bb:c9:f4:f3:b0:ec:3c:
42:d1:cf:0b:84:74:2b:73:da:0b:93:51:13:90:89:
ef:29:f9:d5:7d:cf:6a:22:eb:91:7e:a8:34:a8:71:
61:05:fa:67:bc:40:58:b5:f3:cc:bd:05:d7:0f:35:
19:5c:94:04:57:2d:a9:f8:5b:6b:f5:5b:ad:e6:17:
7a:69:8a:4e:d0:d9:bf:d8:10:2b:f6:61:8e:59:8c:
8c:34:72:7d:1a:3c:de:32:22:ea:00:84:75:ab:c9:
c7:c7:1d:60:94:30:07:3d:36:e2:31:4e:6f:44:e3:
a2:5c:e6:6c:cb:2e:64:1e:88:6d:b0:9e:0f:da:08:
a8:2e:2e:5d:bc:58:08:1c:63:ed:4e:3e:72:39:59:
12:77:4a:8b:41:e2:9c:63:55:72:07:de:66:24:09:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D4:56:04:24:FF:39:64:ED:80:03:40:76:66:41:6A:6D:10:2F:37
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cc:5a:c3:35:07:ea:b6:ea:6b:ad:ca:41:7f:7e:94:91:cb:
1d:df:fb:4a:7a:53:39:70:5a:cd:d5:53:ea:67:ca:2f:13:a3:
47:fc:0f:cc:25:ca:72:59:4f:5b:fc:01:84:7e:9e:5e:49:69:
d9:3e:8b:e7:a6:46:ed:20:a0:c2:9d:2f:2a:3b:97:6f:a2:1c:
34:34:14:7b:3f:b7:1e:42:91:12:e5:f5:4a:d4:be:5d:2e:f9:
24:7a:43:23:17:d3:22:4c:7b:06:dd:c7:38:39:0d:98:f8:e1:
98:72:35:14:74:27:3d:61:e4:d3:d2:7d:11:0d:83:94:d0:6e:
45:ea:d0:37:3a:82:3f:6f:f7:05:fa:f9:7c:d3:57:96:61:57:
61:1f:dd:5a:af:99:1c:84:a1:0d:d3:ef:65:bb:47:ce:86:c5:
9f:90:d4:4f:72:3a:cd:99:fd:ef:94:9d:bd:b8:7f:f3:13:59:
6d:d0:ad:f0:c9:cf:97:c7:79:f9:41:ce:3f:a7:46:d0:6d:aa:
a9:e6:72:be:28:65:4f:16:e4:a5:63:93:9c:22:ad:97:31:f5:
13:38:69:c7:be:a2:99:18:07:0c:ac:ae:03:20:19:61:15:b3:
a2:86:e0:ca:39:85:7e:bb:81:73:0f:46:c8:87:c5:21:38:f3:
af:a4:2d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:23:34 2025 by rpki-client