Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: TLSDHbOWDSB1GIbucvFC5R4QzB5jFcUYXzelrw6FtGk=
Subject key identifier: 89:B8:EE:6D:22:13:C8:06:14:4D:B0:93:C9:54:CD:E0:BA:96:8F:CF
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 01967F7CDAA8443F8D0C4F4566243B7045CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 059F
Signing time: Tue 29 Apr 2025 03:00:10 +0000
Manifest this update: Tue 29 Apr 2025 03:00:10 +0000
Manifest next update: Wed 30 Apr 2025 03:00:10 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: jPcH7KRQ2u3GKqBGtJmkvssMUSWA3X5rcoBzKag44s4=)
2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7c:da:a8:44:3f:8d:0c:4f:45:66:24:3b:70:45:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Apr 29 03:00:10 2025 GMT
Not After : Apr 30 03:00:10 2025 GMT
Subject: CN=89b8ee6d2213c806144db093c954cde0ba968fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:69:1e:53:f9:75:cc:8d:ea:e8:39:8e:08:
ce:8e:e0:84:d1:85:01:5e:fc:29:16:15:f3:b1:c9:
89:24:39:64:b2:d0:c5:d6:02:41:52:30:95:4f:79:
0e:0b:57:43:77:d7:1d:18:80:be:51:b2:af:3e:34:
76:40:e3:13:33:5a:18:6d:c8:7c:66:87:11:68:37:
19:bf:aa:e5:3d:84:66:9a:6b:d1:e4:34:97:df:5f:
3d:8d:9c:aa:7f:0f:c2:7f:74:a2:c3:06:be:1e:ff:
28:45:8b:18:81:45:16:17:4c:1b:e5:5c:0b:cb:93:
09:01:99:57:9a:ab:60:8f:63:7d:d3:a8:de:e4:7c:
a0:38:ec:28:ad:8c:40:42:af:f7:7b:2e:a4:e2:f9:
49:7d:ec:a3:4f:75:54:60:42:10:75:28:20:43:7d:
d8:7c:33:07:3d:db:6a:90:3a:53:30:85:32:a1:0d:
20:3b:27:a1:73:cf:1f:a7:bf:f7:eb:72:3b:59:2f:
06:9f:a0:da:8a:1c:81:7f:fb:36:4c:7a:6d:bc:92:
88:9a:2b:3e:dd:03:fe:4d:21:2a:22:7f:21:79:10:
9a:77:95:02:22:9f:39:06:74:09:d8:1f:2d:c4:0d:
43:33:b9:01:c2:23:5f:f6:e9:6d:04:71:87:56:2a:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B8:EE:6D:22:13:C8:06:14:4D:B0:93:C9:54:CD:E0:BA:96:8F:CF
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:94:90:a8:7d:e4:9f:6f:85:74:49:7d:68:48:28:8e:e7:dd:
e3:0a:b4:33:42:33:d3:5b:59:a1:bc:35:e4:95:02:71:4e:51:
16:81:cf:04:1c:7c:91:e5:04:c7:05:93:b6:9b:f5:a7:f6:ce:
30:24:1f:e7:ec:42:8c:88:03:2f:f7:45:b0:84:30:68:fd:00:
6a:9e:31:b2:de:28:a6:af:05:0d:ce:af:d0:1c:9d:ed:28:13:
44:ea:94:ef:7e:34:13:89:b0:35:26:c1:7c:a3:32:47:20:50:
1b:ab:da:64:bf:34:94:ad:a5:f0:26:11:b0:3f:2b:42:99:ce:
0d:f6:c9:b5:67:26:54:bc:df:dd:46:6d:30:02:fd:b8:02:c3:
a7:0c:59:de:fe:5a:d8:03:d0:83:99:b3:22:39:b0:2e:19:ff:
48:77:d9:54:c2:62:65:de:51:4e:fe:40:c4:2b:39:d5:6b:6a:
c0:76:7e:19:79:b6:c6:cf:d6:aa:0e:24:bb:d5:0f:03:46:dc:
af:17:51:d8:65:a3:cb:70:ba:e8:12:d9:19:18:d1:90:f7:e0:
00:8e:d2:d6:ed:2f:9c:f8:72:66:5d:15:da:32:6e:5c:6d:f5:
c2:61:78:f5:bf:1f:84:2d:fd:59:88:c9:dd:25:8e:16:9d:01:
ba:f2:88:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:31:08 2025 by rpki-client