Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier: FQN3VOfKglh97mrCrABSlVZ4ThnWE9f1q9MPUXL2X0k=
Subject key identifier: 64:43:C9:2E:0E:1D:A9:B6:AD:A2:40:2C:FF:A1:39:DF:40:E8:2A:45
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial: 0196771EB2E92B315364940E079CABA52303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number: 0D96
Signing time: Sun 27 Apr 2025 12:00:22 +0000
Manifest this update: Sun 27 Apr 2025 12:00:22 +0000
Manifest next update: Mon 28 Apr 2025 12:00:22 +0000
Files and hashes: 1: Y4BycvpgIPFrj5lhsii_AUvYAWw.roa (hash: brKO8LRrExe011Bv/UP5eEIq/IhdQ+O1vYEiLB6elCE=)
2: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: 5Nemr7wSdLDTVvdz8JMBba49GtXaOfihh7DCkFynO8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:b2:e9:2b:31:53:64:94:0e:07:9c:ab:a5:23:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Validity
Not Before: Apr 27 12:00:22 2025 GMT
Not After : Apr 28 12:00:22 2025 GMT
Subject: CN=6443c92e0e1da9b6ada2402cffa139df40e82a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:64:32:13:6e:73:f8:5e:cb:b8:04:58:e9:
42:09:6e:8a:f9:71:f0:01:6b:eb:58:04:c2:07:41:
ca:76:f3:96:5f:38:50:99:b0:cf:14:58:bc:d7:b6:
69:f4:e9:d4:eb:25:c1:c3:f6:59:c3:00:77:25:3e:
12:1f:44:04:a8:ef:31:90:9f:8a:27:1b:c7:a4:10:
cb:75:3e:08:74:d3:e8:57:1a:b2:74:10:04:cb:1e:
d6:03:75:f9:b4:ea:d8:b7:e8:67:cb:6c:51:8a:cf:
ef:29:dd:32:0b:62:b5:c3:e2:25:fa:ae:11:01:00:
3f:53:af:ff:39:c3:62:fd:97:66:04:18:98:19:f4:
77:89:1a:10:fd:1d:d4:0e:bd:37:53:4f:c5:8d:f6:
86:75:aa:97:9e:34:33:9f:82:78:a9:42:9c:bd:18:
3f:7d:18:f0:67:a9:5f:21:f9:25:06:50:92:30:b3:
a9:6e:28:71:8c:cf:61:c3:66:6e:fc:79:c4:5a:7c:
60:27:38:18:81:c4:a1:f8:65:e0:73:a0:a8:cc:0d:
92:76:ec:bb:bb:c3:13:c1:16:72:a1:0e:b3:f8:44:
bc:39:5a:bb:ae:9a:38:8a:a7:7c:56:9d:ec:e2:c1:
84:d2:cc:3b:74:89:9e:e7:b5:8b:3f:57:83:30:4b:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:43:C9:2E:0E:1D:A9:B6:AD:A2:40:2C:FF:A1:39:DF:40:E8:2A:45
X509v3 Authority Key Identifier:
keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:38:18:fa:01:d0:86:1e:f1:bd:9e:58:bd:a6:b6:14:b2:eb:
f1:db:48:d8:b8:ff:ca:d8:ff:3c:ec:50:20:4c:02:15:6f:1b:
5c:f5:2b:86:6b:1b:2f:d0:1e:29:e1:e0:94:65:b7:24:cd:3d:
34:6d:eb:32:1d:11:e5:c0:ac:e9:e9:11:22:cc:61:a4:54:47:
d0:bf:5f:13:b8:dc:ea:dd:a9:d2:a2:95:b8:1b:d1:66:2f:62:
8c:48:91:60:dd:be:a3:2a:4c:88:48:95:f5:41:98:b7:82:ac:
dc:df:be:e6:3f:87:47:c0:b2:bf:10:b5:86:a0:2a:27:d0:ef:
a9:b2:ef:80:ec:c3:7e:5c:c3:0e:a5:eb:cc:a3:c8:41:2b:b7:
0a:36:3c:d2:2f:14:09:63:18:9d:67:a6:79:0e:b2:20:81:45:
85:ce:c7:48:5f:bf:a2:ab:67:0d:39:36:bb:7c:c7:d4:7c:26:
8e:32:1f:f7:5e:0e:a1:8f:b4:dc:33:fe:04:0a:0d:d2:1d:9b:
1e:4c:5c:f3:f0:76:e4:20:39:25:02:b9:0f:63:af:1b:9e:7e:
42:a9:e8:de:05:8e:4e:9d:ea:87:1f:44:cb:55:70:ed:77:f5:
ae:d8:f5:2c:c2:86:57:99:ca:90:4b:4c:b2:d8:dd:1c:da:23:
e2:f0:1b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:56:43 2025 by rpki-client