Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json)
Hash identifier: ejhJayXjXYPDjARRMXei5BZNYJNjvx8uD43BQ1uK1EA=
Subject key identifier: 86:28:35:0F:66:0B:57:DF:CE:9C:D9:8F:B6:B9:BC:29:63:F1:A4:A6
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 0196865B5ABD1390F89B0656682265D41AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
Manifest number: 0BAA
Signing time: Wed 30 Apr 2025 11:00:56 +0000
Manifest this update: Wed 30 Apr 2025 11:00:56 +0000
Manifest next update: Thu 01 May 2025 11:00:56 +0000
Files and hashes: 1: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: o1ZpEam2vo424CL2lZL7OrSTcDFMexIOgEmDqaTG/gs=)
2: oOmlEIPuZj-euGQgaSJSIdcSgws.roa (hash: 4HVEBIShSrKuBB15YN2IPkpfbl2tZhoTqa30YNiE+ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:5a:bd:13:90:f8:9b:06:56:68:22:65:d4:1a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Apr 30 11:00:56 2025 GMT
Not After : May 1 11:00:56 2025 GMT
Subject: CN=8628350f660b57dfce9cd98fb6b9bc2963f1a4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:b1:2f:37:ab:5b:59:13:92:0d:ed:77:da:
fe:31:1a:3d:49:7e:22:1a:d2:f6:6a:b8:2e:21:c5:
9e:83:49:26:62:8f:6b:d8:ab:b5:d6:09:41:95:b4:
bd:e4:12:c0:28:3d:ef:4f:01:5e:a5:55:f3:01:c8:
e4:7d:9c:d7:ad:34:7a:7f:93:0f:b5:73:dd:e9:84:
2d:bf:0a:35:35:62:ff:ea:d3:05:42:14:72:9e:fa:
6d:d7:53:f1:11:13:8a:c4:25:b0:be:7a:6f:90:f1:
56:31:88:26:85:7e:02:44:17:57:3e:3a:3b:97:88:
90:63:0e:eb:22:df:6f:e2:25:1a:58:9f:0f:b2:48:
99:2f:2a:ad:6b:14:62:cc:86:f6:01:b5:95:74:78:
de:81:93:24:c6:e9:86:ce:79:f5:cb:00:35:42:22:
0a:80:ba:2c:cd:31:ee:22:93:21:a8:67:7b:1c:d7:
a6:a3:1a:f0:1d:d6:30:cf:44:77:fe:ff:0a:23:1d:
bf:8c:a7:74:dd:7d:bf:80:91:b8:a9:e4:d7:f7:6f:
20:77:9a:1e:1f:74:94:2c:04:9b:6a:05:e8:f8:d5:
33:37:e8:c1:fe:da:ee:58:3b:d9:39:0b:0b:e1:bd:
7f:c1:08:76:b8:ea:98:48:27:24:dc:97:57:23:12:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:28:35:0F:66:0B:57:DF:CE:9C:D9:8F:B6:B9:BC:29:63:F1:A4:A6
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a1:dd:fd:87:ee:02:ab:c1:48:c2:7f:5f:75:92:1e:25:92:
b3:4e:e3:6d:4a:1c:1a:55:0f:49:64:b6:d7:4a:da:76:23:15:
26:05:ac:cf:7c:61:23:7d:7c:71:4f:ff:01:5d:0d:be:14:b4:
cd:ff:69:f7:58:b1:da:03:ea:25:a7:be:e1:ab:41:31:c0:9f:
aa:26:f6:a3:e2:0e:c4:5b:84:76:dc:99:47:56:45:a8:14:53:
d8:55:67:f4:5e:6a:b3:f0:b7:7d:ca:43:44:9c:1b:7e:45:6b:
32:2b:25:0a:24:b6:39:b1:19:68:88:d3:57:16:c0:f0:cd:75:
a6:84:6c:12:c3:ff:37:18:bd:3f:a6:4b:48:9a:59:4b:1a:2e:
74:64:49:72:f0:6a:b1:6c:44:9c:83:24:92:05:1d:5d:31:6c:
b5:bf:5b:02:55:a9:48:e2:68:ba:5c:bb:d6:89:58:4a:a7:ff:
a8:35:ef:6a:12:f5:52:cf:88:4d:3f:13:9b:c7:85:3b:70:5b:
6e:23:49:8a:22:28:27:50:cd:28:26:bf:67:06:9b:e6:e2:2b:
78:6a:40:59:a9:93:db:97:06:8f:bc:4d:4c:d6:8d:10:60:60:
9a:b7:26:9c:00:e4:f6:c7:75:f6:bb:83:1b:e9:b3:87:1c:21:
f7:1f:0f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:50:03 2025 by rpki-client