Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json)
Hash identifier: tFrFnRAXg6tShNvWbdbbeXPEAg6rDxcUBS4tsaebA+8=
Subject key identifier: 7A:DD:C0:76:CE:B7:C4:AE:B9:F0:1F:CB:80:28:66:63:F9:EF:A6:00
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial: 019681D97F8ED8E31DF13680D1CE8B9C8348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
Manifest number: 06C0
Signing time: Tue 29 Apr 2025 14:00:36 +0000
Manifest this update: Tue 29 Apr 2025 14:00:36 +0000
Manifest next update: Wed 30 Apr 2025 14:00:36 +0000
Files and hashes: 1: _3sIjV0NzBRBUXOfv_g2UXCkao8.roa (hash: cQ3AbgfUz8fqilC4hhCtVaH0mIMtsn/x+ig6JhvdshA=)
2: gzFSDIvuo1g8SYBgsWmT7skIWNo.roa (hash: D7BWQwJQV9C+IDJ4nn09iuxJOEha5Pi+Tmqs9uYeqYg=)
3: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: Z4QRFMw9rYll+VmrCdBCS6evqmHCXF0yz5v8ThV7TXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:7f:8e:d8:e3:1d:f1:36:80:d1:ce:8b:9c:83:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Validity
Not Before: Apr 29 14:00:36 2025 GMT
Not After : Apr 30 14:00:36 2025 GMT
Subject: CN=7addc076ceb7c4aeb9f01fcb80286663f9efa600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:60:e0:9d:b0:b9:11:e6:1c:2b:b3:6b:40:
d3:ee:b9:e0:3e:83:08:a4:9a:85:c8:27:fa:34:f6:
1d:f5:9b:05:7d:6d:be:15:c2:b3:df:a8:10:0d:e3:
8c:eb:c7:1d:14:1c:bc:19:34:a5:99:ab:bf:2a:2f:
bd:70:c8:3d:90:eb:bc:a6:a7:16:53:46:cb:94:ab:
2c:52:07:67:57:b2:d1:f8:be:16:a6:57:02:46:ab:
a5:1d:51:4e:43:e4:25:82:51:ca:7e:bd:78:ee:36:
b3:1a:9d:d3:e8:36:ac:1d:4e:2f:62:f5:0f:5c:22:
93:3e:20:63:d7:a5:d4:6b:78:f6:1d:0c:d5:14:32:
08:d9:53:e7:51:05:44:44:fa:89:40:da:5c:fa:ff:
57:69:15:15:46:27:4f:1c:76:6f:ea:ec:0a:ce:91:
09:b0:e8:24:6f:11:bb:18:77:db:87:e5:cc:1e:c9:
cf:5d:5b:84:e1:fa:92:09:70:ff:fd:a4:2e:84:65:
16:69:f6:32:99:75:da:79:d6:6a:3c:02:77:f5:9e:
43:19:36:b9:d1:8a:53:4c:4b:8f:42:a5:a9:df:c0:
31:33:c4:88:04:d0:44:5e:bf:37:fd:ac:84:5b:68:
4d:0d:76:50:33:83:6e:97:ca:70:98:c3:ae:24:9c:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:C0:76:CE:B7:C4:AE:B9:F0:1F:CB:80:28:66:63:F9:EF:A6:00
X509v3 Authority Key Identifier:
keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ef:9a:61:62:9b:d6:c0:91:94:bb:19:76:7f:fb:52:4c:a4:
78:c0:32:27:5b:63:d8:1b:2c:c4:80:8d:03:ea:be:d6:4e:06:
16:a3:90:12:12:13:4f:8b:4c:99:a9:9a:d1:d3:05:4a:96:f6:
5c:97:17:0e:b4:53:83:4c:2b:6f:b9:7f:f0:d4:79:9c:08:62:
49:57:a7:b7:4e:47:99:5a:bb:d3:1f:8a:2e:42:fb:66:e2:7e:
15:ea:f9:6c:d5:2c:6d:94:9f:41:39:41:fd:91:d1:09:b3:b8:
1b:19:fd:08:31:3f:84:3a:cf:b8:65:ff:a5:3a:80:a3:58:39:
c3:bf:e7:12:10:05:76:45:fd:f1:89:dd:a3:77:bf:9a:55:e7:
e7:6e:4e:6e:e4:7e:5d:c9:42:ac:da:9b:a4:ae:59:33:c0:8b:
c9:66:fe:a5:af:81:3c:de:d6:9f:61:0d:7e:f8:1f:2b:1d:0a:
b5:cc:a8:f5:b9:7e:96:83:60:4e:83:3f:d7:fd:e4:ea:cb:9a:
ad:c0:a1:8f:8b:27:e6:33:61:8c:97:0b:83:f0:fe:d8:22:b7:
9e:4d:fb:69:a9:ed:0c:6d:e4:c1:1e:f1:a2:0e:43:11:37:7f:
d8:fc:6f:bd:7c:e5:0b:ae:25:d8:ca:3b:cf:af:ab:8f:8a:23:
41:a0:f2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:36:01 2025 by rpki-client