Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
File: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json)
Hash identifier: EzNssy9zKIsw1b56xWTovnLFAhOcxg3eeRi8p/00FCA=
Subject key identifier: F5:E6:3D:FF:A4:AE:F9:39:40:D4:CC:72:EC:DD:8D:35:EE:34:EE:A4
Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
Certificate issuer: /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Certificate serial: 019686FFE722585E8FCD5F432C7A101EE5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
Manifest number: 10DD
Signing time: Wed 30 Apr 2025 14:00:39 +0000
Manifest this update: Wed 30 Apr 2025 14:00:39 +0000
Manifest next update: Thu 01 May 2025 14:00:39 +0000
Files and hashes: 1: TImGbHFcysH3yKCENp7I2KDKakw.roa (hash: wV738mzWH7BpaMNjeVJLX60iXYrXwr7zU2chvPIlwaE=)
2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: pIJ7ANviBqXT6oKL+bJixUJ+9/3MW8/ZPuPfgRAboIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:e7:22:58:5e:8f:cd:5f:43:2c:7a:10:1e:e5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Validity
Not Before: Apr 30 14:00:39 2025 GMT
Not After : May 1 14:00:39 2025 GMT
Subject: CN=f5e63dffa4aef93940d4cc72ecdd8d35ee34eea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:29:d5:50:7b:6d:02:91:29:a0:56:7f:74:
08:49:6c:84:d8:db:48:9d:ef:a1:54:c3:0e:54:bd:
a9:b3:35:74:39:7f:f8:df:31:ba:48:b5:fa:5d:9f:
ad:96:97:60:84:a9:23:63:25:92:1c:5d:1c:59:fa:
37:bb:3d:f0:c0:15:72:15:97:ec:da:72:3e:de:2b:
9f:44:68:35:78:3f:09:22:b6:c8:8b:ca:d9:85:e7:
48:4f:f6:4d:a1:43:99:20:9e:6f:28:0e:58:62:ea:
9a:ab:f2:4c:79:3d:0d:ab:c0:56:cb:4b:59:e5:96:
a6:ce:ce:c4:48:f3:45:41:c2:ac:21:0c:c3:b4:c3:
1f:f1:d1:92:fd:0e:61:d1:58:8d:e2:62:97:4b:00:
af:2e:d2:77:7e:ca:76:48:45:34:59:e8:0c:c4:f9:
e7:c5:45:00:ed:1d:5c:8a:bf:7d:30:52:6e:d5:fd:
a6:c7:3e:ad:2d:17:f8:48:e3:51:d1:5f:1f:f5:5e:
e2:a3:3a:15:47:d0:0d:ee:f3:02:c2:87:69:eb:3e:
89:63:3d:42:fa:e6:4e:9f:07:ea:7f:16:82:41:b6:
6e:6b:f7:6e:d7:a0:29:39:05:ac:3c:2a:2e:7c:46:
dc:28:d8:6f:5c:6f:6d:f8:c4:c0:03:bf:55:e3:06:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E6:3D:FF:A4:AE:F9:39:40:D4:CC:72:EC:DD:8D:35:EE:34:EE:A4
X509v3 Authority Key Identifier:
keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:16:dc:10:99:03:ec:1d:11:f5:0f:c4:d8:35:08:3e:d2:24:
ac:ba:22:fd:ef:e8:96:c7:9d:b1:5e:c9:ef:39:53:4d:5e:f6:
8f:48:94:67:56:f9:40:f8:a9:1a:bc:1f:27:4e:28:55:0d:61:
5a:84:79:88:ab:52:1b:75:a7:1e:fd:f1:6c:8d:ca:73:a9:fd:
8a:01:70:19:c1:1f:88:8d:56:80:51:82:7a:e7:00:ba:02:67:
b5:de:6d:bc:c0:dc:e6:63:ea:be:c3:3c:83:5c:72:aa:69:21:
58:7f:f6:40:50:f9:d8:81:bf:94:40:d1:64:09:13:b7:a8:d4:
59:04:e1:34:dd:2e:c2:6f:83:25:45:5f:01:5b:09:6a:08:54:
fe:05:46:71:7c:23:e3:b4:51:fb:25:bf:62:cd:16:34:12:68:
3b:31:b5:77:ff:d4:b8:88:d3:4d:a6:a3:e9:80:b8:ca:fb:02:
3d:1a:b9:fe:78:c0:df:1c:bf:de:85:6c:75:d6:df:af:6c:a8:
72:a6:24:62:31:7a:18:98:a9:1b:b2:66:d7:44:64:04:08:5e:
be:3e:a4:a9:0d:ec:0b:19:80:30:6d:28:02:91:36:f2:62:45:
71:b9:0f:f7:66:44:e0:ae:d4:69:72:57:42:53:de:76:29:1f:
ce:9b:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:37:39 2025 by rpki-client