Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier: QYKAnUxmVV1mH4fBBFQ4Y0WHkb7coxZNvbIZw45pACU=
Subject key identifier: C4:F8:7D:FF:EC:34:27:EF:CD:61:36:FC:BD:32:89:BA:0A:8D:19:95
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 019691166BD7671100205351093EA4178752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number: 03D6
Signing time: Fri 02 May 2025 13:01:27 +0000
Manifest this update: Fri 02 May 2025 13:01:27 +0000
Manifest next update: Sat 03 May 2025 13:01:27 +0000
Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: 3m7V8+GuNw5ScAfXNHnWGPpX3S7TKrz79fTzTWChMWU=)
2: NldJhq1MAVdUgbD6n6XKOd_rYuI.roa (hash: nicnFQBAIXmcU10eabjaRC66nw/nEzjS6x4xuq2azqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:16:6b:d7:67:11:00:20:53:51:09:3e:a4:17:87:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: May 2 13:01:27 2025 GMT
Not After : May 3 13:01:27 2025 GMT
Subject: CN=c4f87dffec3427efcd6136fcbd3289ba0a8d1995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d0:f4:15:bc:2a:63:9a:32:c4:78:d2:d1:3e:
b3:14:cb:26:df:33:dc:85:cf:bb:3a:8c:fc:a5:92:
b8:1d:fc:a1:28:f7:ca:c7:71:17:f7:42:c4:ad:b8:
9e:b7:1a:52:04:86:e2:99:96:51:a2:dd:21:7f:a5:
7b:4b:e3:c4:4a:a9:a3:c2:47:c2:dd:bb:36:a9:6a:
29:8c:aa:ce:71:df:b4:45:0c:1b:59:85:70:b5:02:
7e:88:30:0f:9d:b7:aa:0e:ba:20:67:11:e2:15:e3:
ef:e6:6f:23:4d:3e:ec:32:0e:81:e0:c0:80:eb:07:
4d:de:2e:d9:fa:f1:fb:22:bf:ca:d5:5c:ca:06:d7:
6e:3e:b5:b2:24:0a:a9:0f:7a:e1:7e:fe:b9:18:52:
d5:90:5c:94:e1:67:0a:ec:19:70:f5:ae:c6:d6:b6:
8d:ec:67:a2:a6:62:6a:e4:aa:1c:e6:b4:96:05:ce:
70:91:c7:47:93:63:55:32:cf:e5:e1:92:75:33:af:
0a:e5:ad:41:36:20:4b:0c:fe:28:6b:4d:91:40:f5:
e5:08:9d:55:56:d2:dc:1c:ab:5b:c9:b1:89:41:f5:
e2:6d:32:1f:57:e2:18:d9:f1:b5:5d:aa:e6:71:ae:
c9:0a:24:5f:51:35:c5:56:87:53:58:c3:64:78:c1:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F8:7D:FF:EC:34:27:EF:CD:61:36:FC:BD:32:89:BA:0A:8D:19:95
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9d:a1:3c:42:22:1d:e2:50:8a:6d:b5:c8:c2:0a:14:da:62:
9f:0b:e7:85:34:27:1d:95:a2:d7:30:c3:28:37:5b:5d:a9:1b:
f8:59:2b:6d:c4:14:af:b7:2b:1a:31:1e:df:e1:68:e9:f0:40:
69:c7:f5:ce:78:32:3e:74:de:f2:ec:1e:0b:5e:93:13:57:17:
21:db:c3:e4:51:44:d5:0a:64:d8:d7:e3:fc:e0:8d:5c:73:cd:
93:de:d0:88:2d:1d:cf:ec:64:f5:e8:0c:67:c5:ae:c7:bf:e9:
1d:0e:63:c1:7d:77:da:0c:b0:97:ef:61:ab:7a:57:45:77:51:
e5:81:c7:22:d9:be:cb:95:68:b4:61:7f:06:91:a5:bd:7b:bb:
b8:44:7d:f7:ed:d1:ec:c2:2d:a5:ef:c3:44:17:be:76:af:06:
30:d8:ab:51:e3:61:be:da:cc:23:df:54:41:10:fa:42:03:d1:
e5:52:17:87:73:5d:60:fd:5d:35:8a:2a:30:d6:60:36:c5:a0:
13:35:91:36:e6:22:41:67:5a:cd:65:4b:68:c5:a2:06:2b:c0:
7e:f3:f4:4f:2e:a1:c6:d4:4e:df:09:f3:b1:36:93:74:92:76:
cf:f6:dd:14:d4:c2:63:ce:a4:70:41:f5:9e:6f:bf:f4:d5:21:
75:25:25:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:54:10 2025 by rpki-client