Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: FdrYU60h/GuBlp8MTvQTVDabP6/gYzIFVQebqVXrMhM=
Subject key identifier: F5:6D:FA:6C:B1:AB:1B:2D:1D:6E:5C:76:F5:C9:26:4D:6C:0F:76:28
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 01967F7D7D904C7FE978B6FFF41D9AFA3EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 042C
Signing time: Tue 29 Apr 2025 03:00:52 +0000
Manifest this update: Tue 29 Apr 2025 03:00:52 +0000
Manifest next update: Wed 30 Apr 2025 03:00:52 +0000
Files and hashes: 1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: HxZxocbvzpeT5AGG+9PASHKoMslhwWV+lwbmLQAaPIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:7d:90:4c:7f:e9:78:b6:ff:f4:1d:9a:fa:3e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Apr 29 03:00:52 2025 GMT
Not After : Apr 30 03:00:52 2025 GMT
Subject: CN=f56dfa6cb1ab1b2d1d6e5c76f5c9264d6c0f7628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:b5:25:76:c3:75:af:c7:35:23:4b:ed:26:
81:b9:91:71:24:6b:42:c3:d1:54:22:59:57:13:29:
f0:48:2d:6f:d3:eb:45:7a:ef:8e:13:b9:9b:76:7d:
d5:70:30:15:88:b0:66:34:60:e7:7f:97:a9:5c:12:
b1:59:e4:f1:7f:86:f3:59:63:97:5c:d5:c8:1e:01:
1a:de:47:1d:06:28:fd:3f:e9:b2:0c:6a:12:99:5e:
64:da:61:01:59:e6:ce:31:80:0c:59:b7:20:3a:62:
cc:03:2c:51:35:82:82:7a:28:a9:48:04:d0:87:3f:
43:b2:87:85:71:bd:ec:e9:65:66:2e:09:21:3d:fe:
31:8c:a7:80:26:a0:0e:a7:65:66:44:ea:14:9f:7e:
12:fc:3d:4b:02:41:f0:c2:80:ce:dd:43:26:3f:f8:
5a:fc:21:d2:96:ac:a1:57:6c:65:f3:81:c9:d0:f5:
74:89:f0:c3:20:09:95:f3:8a:bb:ca:86:9e:84:a5:
50:25:fb:35:54:bb:80:fc:e9:ad:d4:e2:85:e8:da:
ca:3d:20:7c:51:74:dd:46:d3:1f:ea:a2:63:cb:65:
5b:93:ca:0d:34:6d:f7:70:c2:e5:ba:58:09:4d:07:
cd:d6:1c:c2:4a:80:6b:25:f0:57:b3:5a:6a:73:7f:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6D:FA:6C:B1:AB:1B:2D:1D:6E:5C:76:F5:C9:26:4D:6C:0F:76:28
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:19:84:09:e9:96:fd:3c:72:23:88:6e:2e:18:11:1c:46:21:
0c:9f:d9:a2:1b:4c:b3:07:f5:99:31:46:b1:dd:5c:24:ee:13:
6a:39:79:09:f3:99:9c:0e:06:7b:b8:c3:a3:17:51:e4:60:c1:
6b:8b:3d:b8:ae:76:e6:22:ee:b5:e9:70:2d:12:b4:36:ae:e1:
66:e9:97:57:da:9e:50:4f:0b:0d:70:f7:29:61:b2:f5:70:a0:
c8:b4:af:f9:db:30:c1:f0:bb:54:9a:85:e1:83:19:6a:c9:3b:
3a:15:b7:d2:a9:c6:6e:0f:99:32:72:d2:f2:72:84:00:1c:0b:
76:2e:d3:92:a8:5d:e8:f0:a4:c5:fb:13:3a:ad:20:c7:db:5f:
d4:24:1e:0f:f3:fb:74:78:16:2d:86:f1:9a:2d:ff:fe:c9:69:
22:cc:c1:56:fa:57:5d:07:9c:99:f0:88:79:f9:b4:ac:21:c2:
03:4b:31:7d:26:79:76:63:2e:96:58:c1:b5:bc:2f:a8:3a:69:
8b:08:6d:82:b7:54:dc:a5:66:26:04:99:88:d6:c6:03:25:e5:
ae:98:02:a6:17:b5:89:c8:28:d5:f8:d0:92:60:4b:d8:3d:06:
e9:c5:06:21:74:8e:33:10:ad:d0:46:ed:7d:0f:de:8f:2e:a1:
21:ad:31:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:16:18 2025 by rpki-client