Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier: +kJlyOz8NJXtGMW9WE6J45hoOV6ghCx7aKjFqCArptg=
Subject key identifier: 4A:00:BC:6A:7D:2E:51:80:70:DE:34:12:7F:CA:DF:EC:4F:AE:58:81
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 01967EA1DC45982DC7E7F011042C1204B056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number: 1533
Signing time: Mon 28 Apr 2025 23:00:58 +0000
Manifest this update: Mon 28 Apr 2025 23:00:58 +0000
Manifest next update: Tue 29 Apr 2025 23:00:58 +0000
Files and hashes: 1: 2FhEmcxYfTh9K3J3avRiCdDc75E.roa (hash: tOhuHX2KWyFG2B0a0se5O81lEiJFRABFP38mxTII8TU=)
2: ZobwuQJlyfTBHn_a7YG93r8zB-c.roa (hash: OuGiwc5e7Uh2SsaOmHGGMAe9pQSfXZsNsX2xOuLeEXY=)
3: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: J23aWeYGCZqzYWqqh4IqY/mky6hwFPa9E/uFxitSngw=)
4: yT5ungE9NAr5a95GJEQ0WzC2bc4.roa (hash: 3Q09eXeA/SVTTdlEZBa1ZfiKoZceB51s1iopXPbgTXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:dc:45:98:2d:c7:e7:f0:11:04:2c:12:04:b0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Apr 28 23:00:58 2025 GMT
Not After : Apr 29 23:00:58 2025 GMT
Subject: CN=4a00bc6a7d2e518070de34127fcadfec4fae5881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3b:7d:94:b2:84:e1:89:35:a7:0b:ea:7b:18:
e3:fa:df:51:63:e0:d8:56:52:6d:8c:f9:da:e7:37:
f4:ab:f5:1b:01:7a:41:bc:0e:33:e9:fb:1b:e1:c8:
86:f2:6d:0f:b0:61:f3:1b:bc:cb:55:48:93:b6:bb:
56:61:14:7f:07:0f:74:91:2f:c0:ff:c8:fb:69:04:
8a:91:a9:97:76:02:c9:c2:85:a0:c2:43:0a:85:f5:
33:53:7a:cd:87:e8:e2:47:e0:d9:fe:2d:5e:16:36:
da:7e:03:a8:a8:0a:1a:60:e6:8f:a2:9b:da:0e:2a:
07:4f:af:b0:4e:ab:24:04:ee:0a:35:e6:56:75:c4:
07:31:bf:d2:2b:38:6b:97:4f:cc:3d:ff:8e:58:f6:
c6:72:75:c3:3c:be:fe:4e:cd:1a:8d:38:86:2f:53:
e4:2a:84:e8:1d:62:00:36:46:84:1f:88:03:64:47:
13:3f:4c:02:b0:a9:d1:ce:ca:d4:79:3e:1c:7e:e0:
50:c3:95:bc:e5:df:b8:d4:a2:94:77:97:cf:a9:8a:
c2:f5:6b:bf:92:5b:13:e9:7e:78:6c:b2:c0:13:35:
8a:26:83:36:77:da:6f:3a:e6:0f:c8:9b:0b:63:f2:
55:d4:50:4c:81:c8:40:04:a8:13:c1:b7:81:b3:7f:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:00:BC:6A:7D:2E:51:80:70:DE:34:12:7F:CA:DF:EC:4F:AE:58:81
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ca:83:9b:07:ce:ff:a3:03:b9:d4:56:97:79:3b:73:b0:94:
4e:5f:7f:64:cd:d6:2b:a5:e0:eb:69:dc:43:5c:93:b4:53:9f:
3f:75:c0:75:46:3e:6f:c3:36:8c:86:c6:7f:52:85:1e:db:ea:
8f:d1:c8:a0:8c:f4:f0:c8:e5:c0:c0:24:1c:b1:6d:85:1f:92:
48:4a:fc:5f:7c:89:1f:f9:19:6c:38:62:99:1e:b0:86:09:8a:
bd:bb:37:a0:dc:30:5e:1e:a2:13:02:33:7f:0f:8a:1f:28:b5:
56:93:bd:a7:0d:d9:c8:69:97:5c:fe:45:b3:58:4f:d6:c4:27:
ff:1a:b7:52:f7:fc:5b:02:4f:6a:f9:24:23:97:9a:5c:57:bb:
5a:f3:63:07:48:5a:ed:05:d4:56:d9:5f:5a:c5:74:b9:17:d2:
28:56:c6:ce:01:f5:f4:b3:91:b6:2a:43:2a:f3:b3:67:52:07:
d9:77:80:6d:74:34:63:c9:60:dd:ed:b9:48:4d:f9:8e:ae:d5:
8e:ef:42:3d:99:ac:65:25:00:7c:ed:c7:4d:58:ab:0d:61:50:
01:88:f2:ae:03:45:76:3f:68:08:74:fd:04:13:06:fe:92:ff:
55:66:cf:87:72:57:f3:29:a0:09:c3:a0:51:6f:15:81:46:b6:
80:44:05:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:42:58 2025 by rpki-client