Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
File: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft (raw, json)
Hash identifier: R9i4asNvS3R7YpHnI5r9BcZrIOnImoi0/1UehokvAkA=
Subject key identifier: 37:CE:EA:F3:23:57:3F:DA:31:5A:DC:05:11:0B:0A:54:2D:86:C4:D9
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 01967CE9C7B704A93D843C6AD4845789EFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
Manifest number: 123A
Signing time: Mon 28 Apr 2025 15:00:17 +0000
Manifest this update: Mon 28 Apr 2025 15:00:17 +0000
Manifest next update: Tue 29 Apr 2025 15:00:17 +0000
Files and hashes: 1: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl (hash: 7PwWUHEsopECuwkeQ4eZsFnQwTADfvo0XBuqc1Ngcws=)
2: v5vd3x3XjeefXJEwufhUGGb4X2s.roa (hash: Q56G00WWpMRZXSZJI+Ae5yRJxVdvk5MUrhK76sZeFtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:c7:b7:04:a9:3d:84:3c:6a:d4:84:57:89:ef:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Apr 28 15:00:17 2025 GMT
Not After : Apr 29 15:00:17 2025 GMT
Subject: CN=37ceeaf323573fda315adc05110b0a542d86c4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:14:97:42:31:72:9e:7f:b6:61:8f:89:61:
ee:3d:57:99:f7:6e:88:42:98:96:1a:7f:90:01:0e:
22:d9:1a:7b:72:05:74:97:c1:03:fa:73:cb:da:e8:
91:1f:b9:e4:63:ef:7f:b4:74:dc:0d:8f:7c:da:84:
06:fc:f2:69:83:3d:38:72:42:32:ef:36:40:88:c9:
03:1e:1d:96:a4:d3:c2:98:5e:0a:ba:93:23:61:b9:
38:16:6b:b7:df:3e:45:0e:36:fa:c4:c8:b6:8c:08:
9d:5e:5f:f0:63:d9:37:f9:52:11:3d:aa:1f:eb:a4:
c2:04:0b:9d:1c:db:a0:e9:39:0c:90:f2:1f:e8:37:
5a:b8:d7:73:53:cb:93:07:15:8f:d0:54:c4:f4:37:
e6:61:b6:8d:54:4b:f1:fa:1f:04:77:62:6c:38:1a:
95:b8:66:27:e9:94:31:d2:c4:fb:45:58:37:3c:26:
c2:4e:08:aa:49:51:36:dd:c7:6c:40:ee:12:95:7d:
39:29:91:d9:3e:f3:07:7b:2c:2a:43:87:91:3a:04:
c1:ed:0b:4a:02:5e:ba:08:16:98:84:32:80:fc:14:
46:74:a9:57:98:df:10:ef:5f:f7:3b:14:58:f1:10:
8e:52:0b:57:4f:30:49:ce:3e:df:dd:65:63:c6:60:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CE:EA:F3:23:57:3F:DA:31:5A:DC:05:11:0B:0A:54:2D:86:C4:D9
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:56:1d:8a:03:c6:76:ca:ba:50:fc:e7:e9:05:28:5c:4c:cc:
c5:9b:54:15:98:e8:40:fe:00:e4:e4:2d:c1:95:29:c7:79:41:
dc:d6:f5:fb:28:4d:97:64:47:3f:31:4e:cb:cd:08:8f:60:4d:
d0:9c:cd:c0:46:c0:ff:eb:c0:87:b4:d6:0f:e2:31:30:c5:01:
31:15:7a:6b:7e:0a:97:48:f4:bd:fa:ec:e6:3a:2f:fe:36:b9:
33:83:f8:70:78:c4:76:d1:a3:bb:4d:0e:1f:a6:ca:9c:cc:b1:
02:02:9e:64:57:df:7f:78:4f:0e:94:57:fb:18:39:d7:28:43:
cf:50:1b:d2:3e:f0:67:12:cc:d8:1f:aa:8b:61:4f:df:62:b3:
85:a0:75:a2:7d:aa:f1:be:0a:04:51:e6:2a:54:36:c9:9f:7d:
06:9d:2a:25:73:18:a5:72:e1:cf:88:19:e9:56:4c:bc:0b:c9:
39:dc:33:6b:1b:53:3a:1a:1a:88:5b:e1:53:b3:87:83:46:a4:
82:74:81:36:9d:13:61:5f:c6:3f:f3:a2:40:e4:5d:02:bc:f1:
b9:c4:af:fd:fc:6c:01:d1:4f:7c:81:69:80:07:a6:b5:99:67:
31:e0:5f:39:7b:2a:cf:b6:f7:d0:d8:95:ac:df:9e:b0:72:8a:
4a:ae:f2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:35 2025 by rpki-client