Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: upA7PTS6tXeYnOAvgyJuMWbcPVxb1VZGdjtIqEnoIfE=
Subject key identifier: 2D:8C:14:88:A4:66:70:6F:E7:A2:90:2A:AB:87:59:DF:F7:E4:09:B1
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 0196759E8CC35C26F6EA1801C6B2666AEF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 1254
Signing time: Sun 27 Apr 2025 05:00:47 +0000
Manifest this update: Sun 27 Apr 2025 05:00:47 +0000
Manifest next update: Mon 28 Apr 2025 05:00:47 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: vBGevrX4r3p4NWvUXBZpz0N/2eMENBwLik9u2mNEIWI=)
2: Qhw2m_H5wgy1bU1_w7tg_sEon00.roa (hash: OI2KiRz3XriFCi8yNAm0vl8e78xAWnDgkIja/W4YfWk=)
3: ss1gihVVToicSpjIll9T_OSx9gU.roa (hash: FhBaaNRK7eLkeLLuE6sWEDb9sN1AQ9CWDHvMeiUHSs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:8c:c3:5c:26:f6:ea:18:01:c6:b2:66:6a:ef:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Apr 27 05:00:47 2025 GMT
Not After : Apr 28 05:00:47 2025 GMT
Subject: CN=2d8c1488a466706fe7a2902aab8759dff7e409b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:f0:7d:5a:0d:d4:0f:1a:97:7c:f9:2c:6e:
a5:a4:69:70:25:7b:89:34:c0:ad:db:2f:26:f1:b1:
64:ef:1c:53:49:d6:90:48:bf:ea:71:f3:40:5c:9e:
ef:36:08:d8:a0:7a:f4:1b:bf:25:e9:4e:9d:09:4e:
04:a5:af:e3:52:5c:bc:55:b6:11:79:fd:f8:80:3e:
54:97:82:e3:ad:9f:ca:71:1f:b4:30:93:ab:d9:ee:
ef:77:09:4f:bb:c9:6e:22:3d:d8:08:7a:0b:10:f6:
50:66:ff:80:e0:36:e5:6b:81:3b:dd:23:d8:38:56:
c9:ab:59:a7:5e:c4:53:98:d3:79:71:82:46:58:70:
4f:f2:42:13:34:7e:56:e7:44:ca:9d:9c:b1:3c:33:
e7:e8:40:d6:c5:c0:8b:4a:62:55:b4:0b:f5:43:f0:
5f:1e:93:d4:0b:4e:1f:43:1c:fd:67:1a:a6:78:e7:
8b:28:f3:13:f0:a0:40:d7:0b:52:b3:1f:c4:75:40:
0e:39:48:99:e7:36:c5:a7:12:2b:37:47:7f:bf:f0:
0c:f4:e0:70:3f:47:02:f4:5b:7c:50:9b:f7:7a:0c:
a5:0d:7b:c5:10:04:b9:3b:10:b6:9e:30:46:14:96:
f7:bd:ec:62:82:3b:78:c6:29:97:c4:bc:ce:47:9c:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8C:14:88:A4:66:70:6F:E7:A2:90:2A:AB:87:59:DF:F7:E4:09:B1
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9e:69:61:fa:c9:75:25:b5:6b:fc:d7:3d:b8:9c:3f:9d:fb:
eb:e0:c3:47:b9:4d:65:4d:26:0a:76:e7:83:cf:d9:1c:d5:67:
9a:af:77:58:2c:1c:16:a2:f0:0e:c4:16:a2:de:54:f3:d4:7c:
93:c9:c2:93:4b:c4:81:f1:2a:20:af:2f:fe:2e:0b:19:1b:8d:
47:dc:2a:2c:8a:6c:40:a2:e8:52:cb:1f:7d:56:b7:ba:0b:8a:
a9:82:3c:3f:84:8c:8d:5c:9f:28:2c:b2:b7:3e:d0:c2:41:a3:
4e:d6:e9:de:39:7c:93:e6:d4:76:78:dc:29:5f:14:d0:3c:6c:
62:5e:8a:0d:19:64:68:21:13:8e:ce:04:65:0b:35:a0:fa:3a:
e7:32:73:11:b7:03:67:62:42:65:0e:7c:ec:68:69:9e:26:bf:
8b:ab:2d:02:43:ed:58:ad:87:b3:05:53:b2:6a:a8:d4:05:43:
c8:04:67:26:50:eb:d8:2b:f5:af:57:44:0d:d5:24:3d:3b:d7:
77:25:f4:f4:31:77:16:50:25:48:5c:bc:08:60:69:42:71:2f:
80:fb:92:1d:56:4d:5f:ee:6d:fe:82:85:c4:bb:0c:1b:5c:68:
5f:7e:89:37:21:f9:e3:35:cf:cf:30:5d:f4:2d:05:b7:f2:38:
a0:48:a4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:36:12 2025 by rpki-client