Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: 17DqCNTWkR7Uh7DnY8i75v2giujchaFpD6guckbrGnY=
Subject key identifier: 97:A5:4C:6B:85:C2:53:3B:A9:9E:57:CE:2D:F8:64:24:0C:A4:40:99
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 01968322B20314166E057FE54910E3D9F473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 20:00:10 +0000
Manifest this update: Tue 29 Apr 2025 20:00:10 +0000
Manifest next update: Wed 30 Apr 2025 20:00:10 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: 9+cOA8tBChyJl8knW27Wu4iGBaO2mreOC9a4+vzq6BE=)
2: Z6E4tQnRvUpfPcdYuFNVxcJ0ync.roa (hash: xKAWINx5skT5zUOU5FUOicB7VLSOKSuOkc+JGT8/lwg=)
3: icdzN3903U-G6DI4zKp6RZE4flA.roa (hash: kshaHbPYaGNmmaMCwtIlRpH9RaK824cfmas4wivc8R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:b2:03:14:16:6e:05:7f:e5:49:10:e3:d9:f4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Apr 29 20:00:10 2025 GMT
Not After : Apr 30 20:00:10 2025 GMT
Subject: CN=97a54c6b85c2533ba99e57ce2df864240ca44099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a6:0b:60:22:c0:d3:54:a3:4d:50:17:fa:41:
2e:17:ff:5a:96:b8:51:e7:5e:ff:8e:ac:37:3d:c5:
cb:1a:4d:a5:b5:33:e9:c7:38:42:13:8b:81:ff:02:
f5:a5:44:fb:3e:62:cb:94:70:0f:a2:9f:b5:c0:b2:
3d:10:f4:b0:6e:62:78:a4:66:a2:8f:e7:13:f2:d2:
ee:93:f4:ea:3f:eb:77:9a:ef:0e:d4:83:0a:c3:fa:
9d:69:7b:49:65:8d:d7:6e:3c:b0:b3:28:16:13:11:
8e:8b:ae:17:6a:52:38:e0:e8:18:d1:2a:08:bf:18:
0b:25:9e:c5:67:13:e4:ef:02:34:5e:8c:7c:1e:aa:
5d:a0:a5:e8:f9:9c:41:b7:40:68:8a:19:47:59:71:
cf:17:0b:e4:2f:ce:8d:02:0b:c6:c1:91:23:c2:6d:
7c:98:2d:b3:0a:1f:98:a1:53:e8:9c:af:eb:28:33:
55:58:c4:41:86:16:97:93:ae:9b:23:4a:cc:ee:6a:
f3:3b:53:37:4d:b8:8c:2e:b2:b4:cb:c1:4d:49:47:
e3:9e:29:b1:94:c4:81:56:1d:ab:ac:d8:a1:24:08:
4f:91:22:bf:17:3d:30:3b:e8:65:bc:2f:be:ff:78:
b6:4e:8f:1e:7c:fd:20:01:d9:17:dd:4c:78:bd:1d:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A5:4C:6B:85:C2:53:3B:A9:9E:57:CE:2D:F8:64:24:0C:A4:40:99
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7f:55:4b:31:39:a6:98:37:82:25:f9:c3:36:fb:c1:ea:c3:
c9:d6:d8:5d:17:34:1b:5b:75:4b:b5:a7:61:54:06:32:61:2e:
45:86:52:3f:45:ee:5e:e8:24:7e:7c:5c:fb:51:08:58:41:7e:
e8:cf:bb:67:c2:4b:4a:a3:e8:4d:b0:dd:62:a4:34:5a:9e:40:
05:9e:cd:00:05:33:e2:0d:05:5d:2b:71:47:d0:a6:bc:14:90:
be:4c:22:87:88:89:86:80:96:ee:88:bf:76:02:5f:a3:91:2c:
82:91:d1:ca:a8:6e:d5:5a:92:0d:47:fc:d5:68:d6:a0:6f:81:
34:42:da:78:4a:ae:a9:d6:f6:46:21:f0:2a:22:7f:fe:b6:36:
ae:c1:20:26:0b:9c:02:cb:bc:0f:49:66:ac:91:aa:55:97:68:
c4:30:79:c5:e0:a2:f2:02:e0:f0:1a:8b:15:d8:c4:fb:46:8f:
42:21:ee:dd:7f:67:55:ff:81:4a:52:c1:c4:55:9b:77:92:83:
7c:e1:05:d7:7f:4d:ac:df:31:63:5e:3d:08:27:2e:87:97:ea:
e9:ec:72:72:84:e9:18:50:00:0a:7d:76:16:00:8e:ce:12:f4:
20:ed:d2:d6:a8:06:9b:71:38:80:91:55:d1:bc:2d:c4:7e:ba:
37:20:39:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:31:12 2025 by rpki-client