Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
File: p18lqzxmADstWvg9KzZR-I0VHyo.mft (raw, json)
Hash identifier: WJa6LgWEI2iQ3LtiumCKgi+wErXMUEOseoNbBYhPP44=
Subject key identifier: A2:CD:68:FA:06:D1:48:91:4F:CD:2A:5F:AD:89:E8:36:F6:AD:AE:47
Authority key identifier: A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
Certificate issuer: /CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Certificate serial: 019686C8C73A7CB5DF611EAF31C0022E8DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
Manifest number: 06B3
Signing time: Wed 30 Apr 2025 13:00:27 +0000
Manifest this update: Wed 30 Apr 2025 13:00:27 +0000
Manifest next update: Thu 01 May 2025 13:00:27 +0000
Files and hashes: 1: Ox_5wctFyZuvInmQs0hviVdHYTY.roa (hash: g8iHju69S1V2EgutTovP9pVMh3pNWKkzCgYSyMGlRgE=)
2: p18lqzxmADstWvg9KzZR-I0VHyo.crl (hash: IiGDyovUpvB//tfCMubbMwySVIJBYU9yjNWXvrtRjLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:c7:3a:7c:b5:df:61:1e:af:31:c0:02:2e:8d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Validity
Not Before: Apr 30 13:00:27 2025 GMT
Not After : May 1 13:00:27 2025 GMT
Subject: CN=a2cd68fa06d148914fcd2a5fad89e836f6adae47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:4b:b1:7a:63:ce:41:49:0b:32:70:41:20:
80:25:52:48:94:fb:81:68:cf:f3:47:06:bb:29:73:
6f:7d:cc:ad:5c:c7:20:34:84:9c:4a:4c:26:fb:4b:
f5:e2:87:22:29:10:60:cb:91:b7:01:3b:8c:8f:a4:
41:3d:13:bb:a3:6b:1c:d9:38:9f:d4:7e:74:44:6a:
13:f7:29:f2:6a:ff:d8:1b:a3:09:5d:93:06:d5:49:
b8:dc:68:aa:e8:d6:9b:d1:62:60:1f:19:80:f9:41:
06:32:09:db:1b:67:e9:fe:af:6e:ff:5a:63:9a:b5:
a5:fc:9d:ce:a2:d0:38:61:73:d2:3c:9f:88:fa:93:
97:20:5c:e7:3b:28:6a:61:3b:a3:a8:14:b3:cc:a5:
ec:35:07:ca:cc:d1:3a:c4:1e:9d:f8:26:27:54:f0:
96:77:3a:f0:4f:9e:32:68:8f:67:1b:c3:8c:6f:bc:
da:b0:d4:de:70:ca:2c:da:aa:42:56:30:e2:ff:ae:
ae:03:14:38:53:42:79:7d:58:87:23:4c:2a:56:4d:
89:e6:d9:6a:60:61:5e:9a:36:7d:5d:9d:61:3c:ec:
f5:7d:17:a4:50:14:e8:11:1e:b9:02:5f:94:d6:ed:
1b:8e:1a:4f:c7:ca:8f:44:4e:19:95:a9:91:13:a4:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CD:68:FA:06:D1:48:91:4F:CD:2A:5F:AD:89:E8:36:F6:AD:AE:47
X509v3 Authority Key Identifier:
keyid:A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c9:ae:37:71:6d:d6:a7:3d:aa:7f:99:08:f7:22:8d:4b:62:
e0:7e:e0:1d:4d:32:2c:d3:87:ac:bc:93:d4:f5:ff:74:f0:9f:
04:ce:70:01:38:60:3d:a7:8d:07:e9:a4:f2:52:9b:66:fe:f4:
42:d4:69:11:15:5a:df:24:61:fa:21:cd:25:9c:3a:45:d6:d0:
73:df:14:68:59:a9:63:86:77:5d:cb:12:84:50:77:86:c0:0d:
ca:08:8f:26:d2:a0:ce:db:ad:ab:70:3a:a7:c9:ca:40:d3:0e:
8e:38:f7:74:41:ab:36:b5:88:f7:3c:0c:13:8f:88:f4:1b:d3:
0b:dd:79:60:2c:37:53:ec:7b:c5:78:43:eb:19:e9:19:1b:ca:
bc:9a:d7:d6:1f:ad:d2:63:3a:33:37:d2:22:40:e5:94:32:c1:
6e:9f:8f:ff:8c:17:d5:0a:d9:21:1e:93:6b:40:6c:8f:84:3e:
64:80:4d:8e:78:79:be:4a:8c:f2:50:f2:8b:7e:66:f7:c1:a4:
ab:da:af:71:55:1b:be:e5:db:a1:77:0b:f0:9b:76:b2:6a:60:
ba:ed:92:3f:7c:d3:cd:b9:2e:56:f1:4b:b0:ce:9b:f1:c1:83:
18:b7:e8:c9:ee:20:0b:53:3a:e6:ce:6b:3c:87:7a:6c:82:ff:
b9:1c:6c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:25:26 2025 by rpki-client