Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json)
Hash identifier: EC4011KUHtPllYZJxHUHbdnyY7dpU4CKqVOp4ePMQak=
Subject key identifier: C7:F0:10:66:E2:98:58:C4:F2:5D:1B:97:29:6D:2D:BC:A3:57:A1:E4
Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Certificate serial: 019678687D8034D86A6AA26A4527D9E74EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
Manifest number: 0EF5
Signing time: Sun 27 Apr 2025 18:00:35 +0000
Manifest this update: Sun 27 Apr 2025 18:00:35 +0000
Manifest next update: Mon 28 Apr 2025 18:00:35 +0000
Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: AMs3vj41QqgJ+1+Ycrcl0bn0VJAIUxnGFL+ENk+/yD8=)
2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:7d:80:34:d8:6a:6a:a2:6a:45:27:d9:e7:4e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Validity
Not Before: Apr 27 18:00:35 2025 GMT
Not After : Apr 28 18:00:35 2025 GMT
Subject: CN=c7f01066e29858c4f25d1b97296d2dbca357a1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:5f:71:a2:22:fd:1e:65:97:1d:01:3a:28:
f9:f7:07:c4:0c:37:78:a0:ab:72:fa:64:c7:1e:3d:
59:01:b9:64:7b:28:ed:d0:3a:1b:64:ee:67:bb:b1:
5f:9f:25:52:5f:64:78:a9:53:7e:34:7e:f3:5e:6f:
7b:d0:78:ca:02:d7:c2:b5:83:40:4d:fe:cb:e1:e8:
2b:4a:f5:9f:99:71:b1:9f:84:96:6e:28:c5:94:0d:
88:83:64:47:b3:0e:cf:d0:47:a8:44:99:74:a9:0b:
1b:64:2b:ed:21:ab:3c:d3:ac:1f:b7:d4:c0:56:8c:
ca:3d:97:bd:ed:8e:1a:ba:ab:a7:df:4b:38:69:53:
79:91:4c:9a:56:37:ad:88:a6:87:5e:64:3e:50:9b:
23:8f:47:2e:43:33:d0:46:d8:06:f2:7f:2f:e4:d3:
11:49:03:39:44:19:c2:00:52:3e:0b:04:3c:d5:6f:
e6:ea:51:d0:88:c1:c5:b5:2e:45:31:de:c5:5f:be:
aa:b3:21:b5:4d:1b:c1:f4:f4:57:67:0f:74:c5:0d:
10:6b:9f:df:c1:84:cc:7f:c2:65:74:49:a4:17:e4:
8b:15:5f:7e:88:2a:6a:0c:c0:47:6c:76:8e:37:06:
fc:2a:33:59:1f:2c:5b:d5:0f:9d:75:ab:62:10:de:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F0:10:66:E2:98:58:C4:F2:5D:1B:97:29:6D:2D:BC:A3:57:A1:E4
X509v3 Authority Key Identifier:
keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b2:22:22:65:16:78:e4:75:53:56:6f:3a:2e:27:84:8a:81:
7c:75:3a:91:8c:ae:35:86:2e:79:e5:7c:9f:b2:ac:1b:d8:ae:
d1:2d:4a:8f:c0:65:0b:0c:d4:27:ab:af:53:fa:6c:be:1c:b9:
24:93:04:0b:2f:15:86:6a:d2:75:52:fd:05:7b:6e:6c:8d:9e:
07:90:f7:92:4c:e5:51:21:a5:34:c2:56:ab:4c:b7:69:a5:1a:
c3:ae:ac:41:ca:9b:be:c4:e0:51:28:c7:b9:e7:d7:a6:c6:55:
56:95:db:ad:75:d9:8a:e7:a0:bf:27:f4:9c:1d:9d:03:cf:f0:
74:cf:39:92:a8:77:c0:52:a8:21:07:f2:9f:b1:70:98:3f:7c:
51:aa:52:de:ef:82:d2:cb:6c:ef:dc:cb:59:ea:7d:0b:0f:14:
9a:e5:cd:c8:bd:08:f2:63:3e:96:6f:77:ad:12:0d:21:d0:a7:
af:c8:9f:70:e8:7b:38:27:8a:58:80:32:98:ca:86:50:9b:bc:
82:c4:d0:42:b2:4e:27:b8:02:93:c4:4e:a6:5a:36:46:98:39:
7b:db:6c:57:71:13:18:72:d7:e6:ef:5c:82:62:74:0a:0f:d6:
15:68:51:88:80:b2:ce:f3:70:75:99:62:0e:33:a4:a3:34:6f:
d2:69:35:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:12:04 2025 by rpki-client