Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier: 4+VRRwTr2XPkJuh8Pp8hEl3Lpv3qTg9++97shfsvApA=
Subject key identifier: 2C:AF:DB:30:B7:5B:FE:02:5F:9D:09:39:34:14:33:C1:5D:14:1A:7A
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 0196821092A2489173B8706705E7BFFE0622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 15:00:46 +0000
Manifest this update: Tue 29 Apr 2025 15:00:46 +0000
Manifest next update: Wed 30 Apr 2025 15:00:46 +0000
Files and hashes: 1: 00qMnebnoQ1q-0QpuHNtB2jC8kw.roa (hash: eM8vkjcd9zZftIcrd2HQLTAzDHkkoGlg8veiHLYFAc4=)
2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: 9yJK1bZF/8JkDMVvpn9h5J5GPaUBIJLoNdqMKUhT70w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:92:a2:48:91:73:b8:70:67:05:e7:bf:fe:06:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Apr 29 15:00:46 2025 GMT
Not After : Apr 30 15:00:46 2025 GMT
Subject: CN=2cafdb30b75bfe025f9d0939341433c15d141a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:40:da:af:48:14:bd:68:00:f4:57:4a:3b:
e4:30:d0:ff:ff:73:20:bd:1d:f9:94:ea:d1:9d:07:
eb:1f:9e:4c:6f:9d:2e:e9:7e:fb:77:d9:34:53:55:
84:6b:f6:22:29:8c:86:dd:fb:29:d5:cb:7f:55:cd:
8d:89:ee:ec:67:c1:f2:a9:1d:97:54:9e:7a:16:c9:
98:1d:b1:43:d0:67:c0:8f:2f:63:00:5e:1d:cc:8e:
61:f2:4a:ce:4b:9b:c3:f5:af:5e:75:a6:b8:0b:c7:
83:45:cd:94:a0:63:dc:2d:c8:8f:ec:21:7b:b3:9d:
22:fa:36:c6:ce:03:cb:c5:e9:03:38:06:c7:0a:70:
3b:0f:93:71:cc:db:8f:9a:f6:a7:d2:e6:e6:78:44:
9c:7a:f8:dc:84:7b:e5:64:25:83:1b:54:66:fd:54:
de:55:1d:b3:00:d3:d1:29:2e:74:59:56:8c:8b:82:
23:5f:55:84:1a:c3:2b:5c:94:f9:91:28:29:ca:34:
e3:54:ac:83:08:45:0a:27:06:3d:a4:e7:26:95:08:
4b:1e:2e:58:4f:08:3f:8f:b7:85:ac:0e:bc:35:ff:
0c:f2:c6:01:72:b6:8c:cc:83:82:2c:43:d9:6f:57:
b1:a2:99:c7:25:d9:ec:82:2a:1b:73:1a:0d:3f:e6:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AF:DB:30:B7:5B:FE:02:5F:9D:09:39:34:14:33:C1:5D:14:1A:7A
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d9:32:0b:85:d3:71:80:2e:e0:e3:14:66:ed:dc:6e:d4:0a:
bb:8e:f0:e2:5f:e0:6a:f9:49:47:c8:2e:be:b2:10:fb:d9:c6:
5c:7e:cd:fc:32:f1:9a:91:41:6f:d4:8e:40:4b:f6:fe:8f:a7:
81:19:14:81:15:37:80:39:86:d5:c2:78:d2:47:61:c3:84:c0:
3a:d3:99:c3:19:19:75:e6:a7:52:e4:cf:b6:96:74:f5:ed:47:
94:ae:10:57:c4:da:3e:f0:dd:7b:38:fc:06:c9:f3:98:3e:60:
ea:39:4d:00:f9:3a:8a:57:56:89:fe:7d:a9:c2:b7:b4:46:9f:
57:fa:28:78:cc:78:9f:5a:0c:17:b9:3a:08:87:d6:69:38:c5:
20:50:d2:cb:b1:df:ea:c0:bf:3d:f3:26:cd:69:cb:69:fb:d2:
fd:27:5f:05:19:b4:a4:e0:bb:b2:85:24:14:a0:3c:fd:6f:95:
0d:93:3b:39:7b:e3:d5:2e:5f:ff:3c:3a:b7:9a:33:e5:fe:78:
4d:c0:a0:42:0c:cb:c5:2b:45:ec:05:b3:7b:21:51:05:1d:76:
7b:99:b4:53:82:25:30:8f:6e:83:2a:b3:3c:80:d3:86:17:f1:
61:e5:bc:37:50:1d:89:72:e8:3d:3e:a1:dc:a5:4c:7b:62:21:
bc:64:aa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:52:59 2025 by rpki-client