Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: nYEz90HDc1rsotHHnbhfal5gDb5oZQ1wrRR340iiUlg=
Subject key identifier: 3C:D7:D2:6C:DE:F4:FF:DB:91:20:8E:F3:C8:78:8F:A2:02:F1:B8:0A
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 0196760C9589EE617CB7B49DDB193FDCBF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0BA7
Signing time: Sun 27 Apr 2025 07:00:58 +0000
Manifest this update: Sun 27 Apr 2025 07:00:58 +0000
Manifest next update: Mon 28 Apr 2025 07:00:58 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: k5pFnooSOz6wj/4pw+1xLCxhVAz9e0/legKq3LQy+yw=)
2: JSDk17ahgjuw722aAK05JMcAXY0.roa (hash: /NFnbJGiq89G5CeYaHNRHk4PJoghq/D0jyLC3XejUq4=)
3: ziX8_hpTF8ziYiuxKjrOFhfqeQo.roa (hash: HyWFcNCrTB5jYAeqdAfWDrR8oFNvkYOvB8sslFQIfBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:95:89:ee:61:7c:b7:b4:9d:db:19:3f:dc:bf:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Apr 27 07:00:58 2025 GMT
Not After : Apr 28 07:00:58 2025 GMT
Subject: CN=3cd7d26cdef4ffdb91208ef3c8788fa202f1b80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:34:0a:61:08:de:c6:14:31:16:f9:8b:d8:2f:
4d:c1:a1:11:84:46:8a:6d:2e:a0:42:14:30:7b:1d:
a8:d5:d0:79:36:08:34:98:65:91:d1:17:59:35:05:
e5:d1:6a:86:cc:32:9d:84:23:12:18:2c:9c:83:38:
1d:0c:24:9f:6c:c7:e2:22:6d:df:1e:d1:4b:be:ac:
1b:8d:7f:4c:7d:bb:31:2d:e3:a3:a9:ee:fc:8f:77:
2f:64:b9:64:c3:05:29:89:e7:d6:a7:c5:76:89:76:
4a:5e:c4:5a:7f:ec:77:fb:e1:85:94:ea:e6:f3:8f:
6b:fa:05:2f:d8:82:8c:4a:a9:26:43:df:91:72:89:
42:14:75:0e:82:39:8d:33:db:a2:c5:1e:c8:82:8b:
60:02:8d:dc:e9:06:6f:3d:a0:e4:12:d3:b7:8e:d7:
3c:36:77:fc:90:65:7e:be:38:68:ba:cb:d6:28:76:
2f:11:26:e8:31:58:25:25:48:44:9c:21:c8:8b:c5:
c4:b7:a8:72:b4:73:48:67:51:dd:b5:ca:37:db:57:
d8:ca:b2:bb:04:2d:7f:11:f1:ba:af:42:ab:c6:a9:
47:50:b8:89:b4:33:68:83:e4:a4:d1:d2:fe:d2:26:
8c:3d:09:ac:2a:97:96:3a:c8:20:5c:4d:6c:24:62:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D7:D2:6C:DE:F4:FF:DB:91:20:8E:F3:C8:78:8F:A2:02:F1:B8:0A
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:33:15:5b:76:98:b7:f7:64:3d:2e:2d:7f:9e:b8:05:73:a4:
62:b8:e2:a4:33:13:8c:fd:fb:43:30:a7:18:f9:e2:5a:61:12:
12:d5:4c:c0:c7:e4:2f:84:33:7b:6e:0d:56:7b:99:b6:84:89:
9b:e3:78:e0:0c:8c:36:8c:db:8a:94:38:da:9d:a4:f4:70:be:
ab:92:ef:c1:31:6c:c5:35:e8:53:59:93:2d:3e:93:8c:ac:3b:
d0:1b:32:a7:6d:9c:b4:e7:df:27:a0:cf:fb:66:be:9e:5a:73:
77:57:5e:a7:46:49:e1:01:9a:38:63:79:e4:c7:13:5c:f2:b8:
85:8f:fd:c2:fc:e5:77:0b:c2:1d:5b:c6:f3:c2:21:61:b0:b3:
77:7f:46:e5:cf:60:3d:22:6e:46:4c:3b:66:19:08:ca:74:05:
80:ad:b0:92:0b:d1:f0:49:c5:0b:ae:13:57:2e:af:0c:fb:1f:
53:f2:9b:dc:0a:0b:5c:c7:e5:4c:2c:9d:12:c4:bb:de:ed:60:
b3:0a:c8:9b:b7:f2:23:6e:83:02:84:3b:d9:2b:76:4f:7a:65:
57:bd:ac:61:ca:82:9b:cc:c4:3f:ab:b6:08:f5:6d:b9:66:1a:
3a:01:74:58:a1:52:33:60:41:07:af:1e:95:ca:99:f5:9e:fe:
65:6b:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:49:16 2025 by rpki-client