Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
File: dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json)
Hash identifier: gs4qWvPvKX13NaNBLd7pQCx3EzFKebVLgQmDwRZSDlw=
Subject key identifier: 4A:94:3F:2C:10:F5:03:9D:DC:BC:8F:15:C1:17:13:39:25:BC:4A:33
Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Certificate issuer: /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Certificate serial: 0196789F23AC527EE208D0C6414D5B92D50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
Manifest number: 0F9F
Signing time: Sun 27 Apr 2025 19:00:17 +0000
Manifest this update: Sun 27 Apr 2025 19:00:17 +0000
Manifest next update: Mon 28 Apr 2025 19:00:17 +0000
Files and hashes: 1: 2bqsQsJql_hwoFMeZ0nmgZGmbEw.roa (hash: e5rzAihzL4LX4PAPTH0rwfwcZpBTQn6I0oUQG0cd6f8=)
2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: S3uWkHN34u09yu3Y+hFOsbKlUHmWJeGmM11zNrvvZfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:23:ac:52:7e:e2:08:d0:c6:41:4d:5b:92:d5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Validity
Not Before: Apr 27 19:00:17 2025 GMT
Not After : Apr 28 19:00:17 2025 GMT
Subject: CN=4a943f2c10f5039ddcbc8f15c117133925bc4a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:05:17:4c:23:35:c3:7c:65:69:9a:05:46:97:
69:ba:00:75:9b:90:0a:1f:60:25:ca:78:11:dd:c4:
ac:33:97:20:9d:04:96:17:ac:2a:ea:da:33:da:12:
e6:d4:d7:ba:72:de:d3:a9:ff:3b:89:d8:35:f3:b2:
e4:66:99:d8:13:1f:7f:9f:55:9a:8e:5e:30:46:98:
eb:50:d8:88:ac:35:b9:f7:e8:09:98:ab:a2:de:14:
85:85:47:97:a7:a3:2e:ae:32:97:4f:ad:ce:15:d1:
a5:d9:68:09:f9:85:b7:78:ff:09:84:98:59:31:2b:
eb:b1:70:df:9c:88:5f:ba:17:9b:96:9c:22:9a:40:
9c:a8:68:9d:0b:c1:e3:6e:17:5d:0c:32:61:e1:d4:
99:f8:e6:bd:e7:47:d3:53:7e:9e:e6:b0:d6:b2:af:
99:63:73:f6:7d:5d:40:62:e7:4a:d2:0b:f3:16:3b:
2b:f2:7e:13:5c:ad:07:5f:8a:9f:1c:22:f5:c5:c9:
73:e4:51:be:13:02:68:dd:e9:03:51:f2:b8:98:7b:
34:13:86:61:d9:7b:a3:81:d5:ec:4b:2d:49:70:40:
0a:0e:92:fe:ef:c2:ab:70:af:23:85:bb:65:0c:ab:
87:0e:bc:1f:36:f2:02:00:86:d7:52:82:25:d8:4d:
63:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:3F:2C:10:F5:03:9D:DC:BC:8F:15:C1:17:13:39:25:BC:4A:33
X509v3 Authority Key Identifier:
keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b9:1c:7f:82:57:e1:ee:5c:24:73:f8:8d:ee:64:b0:cf:36:
1d:b6:b5:66:79:a1:aa:b6:cd:1d:53:8d:6c:ad:23:95:cf:7f:
da:b3:5f:f3:63:d1:e3:23:0e:01:b2:4a:f0:9d:46:8f:00:d9:
3c:bc:61:64:37:34:06:a4:ae:82:ab:70:c9:7b:b1:fc:5d:ad:
3e:99:c3:e0:45:98:5a:d7:d0:25:a9:40:52:f9:ff:25:fb:92:
06:d5:8c:1c:33:fd:1e:1d:0a:d8:66:6f:3d:37:2c:d2:47:88:
fe:67:fd:56:43:be:c2:fa:9d:b1:56:e4:c1:9c:42:ba:72:f6:
30:8f:3a:01:eb:76:fc:08:a5:c3:b1:f5:0d:fb:43:87:af:9a:
8f:89:1f:38:e2:02:d4:58:ad:4c:b2:7c:34:33:47:e0:a2:6b:
cf:cd:2d:ce:a9:ec:19:0a:15:2a:aa:00:cd:62:8a:37:e9:69:
ed:65:c1:d6:07:1f:37:da:1f:07:d4:3d:c4:4a:62:ef:23:52:
2c:f8:ac:c1:21:ab:20:cd:37:fc:69:c5:a5:7a:10:03:75:3d:
24:11:9a:28:d1:5b:90:35:72:8a:d2:30:27:18:85:81:5e:42:
98:39:fe:46:bb:8a:07:0a:e7:da:ce:1b:5b:3f:73:f8:74:6e:
93:66:51:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:55:25 2025 by rpki-client