Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
File: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft (raw, json)
Hash identifier: cLg0o/IzMqDA8XRlwagErUDi5fecF917dsBu2Nb5WCY=
Subject key identifier: 14:3F:92:D4:5C:3E:39:0E:40:85:2D:7E:1D:EC:E4:F6:BD:98:A9:71
Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
Certificate issuer: /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Certificate serial: 01967D57A2D0392094A79EA5510430F577A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
Manifest number: 0D7A
Signing time: Mon 28 Apr 2025 17:00:17 +0000
Manifest this update: Mon 28 Apr 2025 17:00:17 +0000
Manifest next update: Tue 29 Apr 2025 17:00:17 +0000
Files and hashes: 1: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl (hash: bUeg+0LnAjD3CZ3u+C+sruqlqLpeY+uUmcN+Q4L5lxg=)
2: OmRgq5feW-kx9jvx4AAFdyevf30.roa (hash: AB8XLVSpCXGmgkqlgUf55sAgLfrFZhXp5WrR9S6Xa20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:a2:d0:39:20:94:a7:9e:a5:51:04:30:f5:77:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Validity
Not Before: Apr 28 17:00:17 2025 GMT
Not After : Apr 29 17:00:17 2025 GMT
Subject: CN=143f92d45c3e390e40852d7e1dece4f6bd98a971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:7a:08:bb:22:0b:f0:10:77:72:d2:dc:e4:
70:a3:c0:ac:04:e0:e5:ea:b8:c0:f9:f8:a7:d6:2c:
c6:d4:24:e9:60:c7:9f:12:b3:e9:bd:9a:18:e3:7f:
d6:e8:15:20:26:8a:d8:e0:fb:4f:93:b2:71:dd:f0:
ce:df:c0:6c:d2:77:de:c9:ef:1b:19:af:61:74:90:
ae:8a:06:84:0c:e6:c8:f1:1c:6b:31:10:9b:5a:87:
b3:c8:d8:ff:48:ec:fe:d4:0e:25:fb:6b:8f:d7:3f:
7a:1a:b7:64:72:44:3a:da:75:18:ba:61:41:07:40:
12:6c:6f:de:74:ce:e1:7d:9c:13:d4:99:0e:94:d4:
68:2e:84:a5:63:ca:3e:e1:dc:c5:d4:5c:51:d3:6b:
99:9b:ad:b3:76:c6:fc:9b:c1:a5:03:6d:e7:a8:27:
98:8b:66:3c:b9:a0:a2:6d:64:10:4e:32:7a:c4:48:
06:89:7d:61:b2:16:13:36:2a:95:89:d3:b3:ac:a3:
6a:cf:cf:df:14:17:3d:b9:82:58:b1:94:07:8e:3f:
1b:01:d7:bd:08:df:b1:3c:6b:d5:59:4b:4e:9a:db:
13:c6:a8:1e:bf:e9:25:9c:78:71:b2:91:3b:a7:5c:
3c:12:b0:8a:37:6c:35:04:f8:97:b6:ac:9c:46:ca:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3F:92:D4:5C:3E:39:0E:40:85:2D:7E:1D:EC:E4:F6:BD:98:A9:71
X509v3 Authority Key Identifier:
keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:55:07:72:f7:3a:a3:44:fc:d5:a1:7d:d4:83:e6:da:6c:dd:
b0:1b:93:7b:ac:31:87:2f:68:33:76:c8:31:ab:8b:4a:ee:6c:
8f:3d:2f:19:7c:62:95:87:70:3e:98:92:45:ac:4d:70:03:cb:
23:38:a3:0a:2a:47:86:d5:8c:b2:83:9e:7a:b7:87:51:41:88:
bc:bb:fd:7c:48:f2:59:9f:46:a1:aa:be:f4:7b:01:6f:e9:e6:
ba:4d:30:b0:f6:af:54:5e:57:e2:90:70:18:eb:52:0b:a7:e7:
91:c0:8f:07:cc:ac:63:dd:27:b1:dc:f6:54:d0:43:a3:05:7c:
b2:7d:b8:ef:36:12:0f:41:8c:c8:57:9a:61:08:6f:6e:3d:47:
b6:88:b5:e5:27:86:69:4f:f2:e0:5d:be:aa:7e:a7:31:72:9f:
30:29:f4:fd:3e:1b:20:2c:95:62:23:d2:91:fd:b1:d5:ff:8c:
31:03:eb:82:bd:68:35:eb:11:ec:37:94:c3:ed:c2:60:06:f8:
b1:a6:8d:49:7c:c6:c0:de:44:46:78:53:f6:88:2e:1f:79:c7:
fd:b6:ab:1c:77:f3:f4:24:2a:0b:c3:aa:dd:99:ff:ef:82:21:
7d:69:fe:a9:d9:bd:e3:4a:ca:60:d2:d6:8b:6f:a6:d7:08:8d:
75:9c:5b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:48:39 2025 by rpki-client