Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: q0LK1dVEXB63UEAvCZf/FUsXDc+hMx0iv1L6sFfr1rQ=
Subject key identifier: 3E:D7:74:FF:1A:56:3E:81:12:18:29:68:17:C8:FE:33:A9:DB:C6:A1
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 01967A8D876C5144A1A9FE1EF58BE745DF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0A24
Signing time: Mon 28 Apr 2025 04:00:17 +0000
Manifest this update: Mon 28 Apr 2025 04:00:17 +0000
Manifest next update: Tue 29 Apr 2025 04:00:17 +0000
Files and hashes: 1: 2ANtTxYhC9doii2ZUg03hm4sdbA.roa (hash: z+xDfuoi1M8PZfat7ClShgNzShy9imRSBA53FNp3Yi4=)
2: fkWlT9PgiHrt21vPWUF4x1XaOLY.roa (hash: x7UGdmB+xVRIAlEZvuthxI7D4dWajJ53Iu1moiHZnkA=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: J91tF9bkLYwcAMbKyV29BD/7UsKz18KOHloDq9/4pow=)
4: wF0b1KUXe0U_bON_pBEoysY2T6k.roa (hash: DPse6U512sX0ONNuBoLLi/K8A5hqXSZVhiW/ds6GDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:87:6c:51:44:a1:a9:fe:1e:f5:8b:e7:45:df:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Apr 28 04:00:17 2025 GMT
Not After : Apr 29 04:00:17 2025 GMT
Subject: CN=3ed774ff1a563e811218296817c8fe33a9dbc6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:eb:29:4d:0e:0b:bf:39:99:1f:58:06:ae:
6d:90:e0:1e:37:ae:aa:ca:33:95:c7:1c:74:be:64:
ea:ec:3a:e0:13:e4:9f:5b:bb:6e:44:85:3b:e8:4e:
b3:fa:05:af:47:b5:28:72:9d:7f:f0:91:12:98:cf:
71:12:70:5e:16:2b:e7:34:6c:b1:b4:a0:46:ba:70:
9f:59:39:20:7d:06:09:5d:57:c2:0a:e4:83:c6:b8:
4d:ae:75:27:17:50:4b:ad:f9:3f:8f:4a:63:ab:4f:
20:a5:51:77:be:74:4d:2c:a1:3c:22:2e:4b:db:95:
c7:d2:aa:9d:1f:13:ec:3a:fa:9d:d7:5b:6f:af:cf:
b9:0d:bc:cc:0d:7a:06:d8:bd:a6:d9:ec:9d:e1:17:
cd:0d:eb:e4:48:fa:4c:7a:76:4d:81:46:2c:bc:d6:
94:4d:a3:e2:84:5a:af:0b:4b:c1:ca:8d:c9:e0:57:
63:40:7e:87:73:37:42:88:13:cb:fd:38:4c:b1:d8:
1c:64:49:c4:df:1e:78:8a:1a:22:6d:42:5a:eb:e5:
a3:73:67:09:f4:ad:4f:5a:63:1f:7f:c4:8d:1c:cd:
a2:20:c3:6c:d2:46:e3:a2:15:f6:c8:7a:a7:49:1d:
45:1f:96:bb:6a:04:e9:f0:f6:58:4f:5a:25:8b:dd:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:74:FF:1A:56:3E:81:12:18:29:68:17:C8:FE:33:A9:DB:C6:A1
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:04:14:fa:72:b8:f7:89:fe:72:b7:05:58:e3:1d:2a:6e:4e:
97:6a:f4:56:38:cb:3a:49:f1:31:30:60:85:f3:55:11:9b:10:
a1:49:11:d4:f1:00:be:c3:74:35:15:00:8d:ef:ef:13:e8:25:
75:30:f2:92:09:3a:8a:41:21:5d:7d:ab:10:9f:87:fc:c8:a6:
53:7d:8c:d5:d1:6d:d3:bd:47:60:5c:7e:d8:fe:f7:1a:42:83:
54:0f:fa:04:86:9c:7d:9e:2b:34:18:a3:30:98:08:9f:db:5f:
d3:b5:94:ba:51:1c:ec:69:df:14:33:90:54:30:59:11:ef:95:
20:a9:89:9b:87:ea:8a:fc:c4:c5:37:a8:dd:d6:7c:6e:79:a3:
2d:e2:72:91:58:65:84:b4:1d:e3:92:d3:10:e4:c2:31:42:c5:
ac:3a:05:fc:8a:c0:61:08:8e:5a:27:14:b4:ea:70:47:62:82:
84:a3:b5:bd:65:fa:cc:9f:65:73:38:cb:ce:34:a1:21:5f:41:
09:47:ee:06:8d:cf:b0:de:79:73:5a:28:cf:91:05:0e:3d:5d:
d7:a4:da:55:48:fb:91:45:19:fa:a2:98:e4:ba:88:79:b8:a8:
eb:8e:d4:11:bb:55:e3:c5:95:d1:e5:bb:86:40:1c:46:93:2e:
eb:1e:aa:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:32:16 2025 by rpki-client