Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
File: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json)
Hash identifier: LNnz6mpFWSidqfJuKAFM4PeGxRXIAR7CFT146u35AlM=
Subject key identifier: 84:4B:05:7F:1B:FB:7F:F0:3B:F4:55:25:D2:5B:69:77:08:3E:99:8C
Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
Certificate issuer: /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Certificate serial: 019676E7A3A36D4EB57EA4482679296CFAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
Manifest number: 0DE1
Signing time: Sun 27 Apr 2025 11:00:14 +0000
Manifest this update: Sun 27 Apr 2025 11:00:14 +0000
Manifest next update: Mon 28 Apr 2025 11:00:14 +0000
Files and hashes: 1: cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa (hash: +2riVPNmAsQH9xrBeRoOTXvYeuCg2sjzB0s7i/rn9hw=)
2: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: JPALEVcdMCdmakyG2lenunH4hC1VARZcyeCbUX7xGFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:a3:a3:6d:4e:b5:7e:a4:48:26:79:29:6c:fa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Validity
Not Before: Apr 27 11:00:14 2025 GMT
Not After : Apr 28 11:00:14 2025 GMT
Subject: CN=844b057f1bfb7ff03bf45525d25b6977083e998c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:52:b5:2d:c5:c4:4e:91:9d:fb:78:91:24:d7:
99:a8:c5:a6:c2:90:66:73:75:b7:9d:0b:53:09:48:
2b:c5:f6:1e:61:3d:d6:86:9a:a0:9d:37:7f:e4:4d:
be:47:1c:56:91:c8:f8:7a:48:48:9f:09:0b:89:91:
82:3d:3b:65:65:83:60:f8:31:6b:b5:c2:84:6d:64:
4e:84:69:24:1e:60:ea:84:10:1c:03:e1:e3:8b:b7:
3d:93:62:05:9b:d6:ce:cd:83:50:35:84:01:4f:cd:
8e:b2:8f:fb:0d:20:b3:cc:5a:f3:09:51:45:a8:0e:
12:d2:4a:2b:b8:48:b5:2c:c4:5d:87:fc:5f:02:d0:
79:a6:8f:d7:71:38:cf:ea:5d:64:8e:4a:bd:4d:dc:
fc:70:3a:fd:fe:d1:53:44:7f:62:9d:fb:99:97:c1:
24:cc:8c:0c:85:95:4b:ac:c6:ba:04:9b:90:28:19:
29:dd:77:0b:cb:45:16:36:ad:f2:a7:e5:3b:70:43:
e8:72:c6:82:3c:5b:0f:92:b6:68:4f:05:69:ee:64:
82:70:d8:5e:f0:00:6c:6a:e2:ad:c5:af:59:c9:ec:
6b:7f:51:df:87:52:ba:7a:2d:da:34:33:96:b3:2f:
0a:27:f0:62:0f:31:82:27:9e:fa:19:02:4a:9e:f4:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4B:05:7F:1B:FB:7F:F0:3B:F4:55:25:D2:5B:69:77:08:3E:99:8C
X509v3 Authority Key Identifier:
keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c0:f2:b5:e0:29:0b:13:8f:f6:c0:d8:df:e9:6c:de:0c:15:
07:47:8a:0f:1c:87:34:12:7d:a3:94:bf:98:ca:91:fd:f0:30:
04:3f:8e:04:d8:b9:7a:91:73:e1:44:c1:d7:05:e6:1f:ce:c0:
b4:1b:40:15:3d:50:19:ab:56:44:59:d8:1d:95:42:86:dd:8b:
83:b7:15:3b:0e:a1:be:6b:b2:9c:c3:9b:6a:a7:2d:e5:33:9e:
27:34:73:61:5d:76:0a:ed:82:38:0f:e7:3e:78:83:1d:4f:28:
8e:76:a1:b7:8a:6c:c4:22:df:c0:88:1c:03:62:f3:7a:81:65:
d8:22:0d:dc:47:d8:ca:af:6c:3e:f1:44:2e:74:d4:4e:0e:7f:
8d:8c:76:21:08:68:1e:19:5a:f4:e9:a8:70:d8:e2:97:4b:a3:
8b:59:59:b1:d0:c2:36:cb:a5:72:ff:96:2e:eb:f7:08:e2:70:
8b:4f:c2:d2:9b:61:6a:12:22:f2:75:a5:74:6e:a9:a6:45:20:
97:86:d4:f8:3e:1c:c0:90:6e:f8:1f:fc:28:32:21:25:3f:1f:
3f:04:d9:1b:66:fc:bd:0f:44:ca:f9:fe:11:bc:98:cb:e5:91:
da:bb:94:f7:d9:53:62:88:25:46:ef:87:f0:9e:5c:93:ce:8a:
cc:46:99:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:52:14 2025 by rpki-client