Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier: Nb7t/UWXkQ+EQn7AximcXauToX9beSmY/oyiIwIhXU4=
Subject key identifier: 44:EF:17:83:FF:E7:60:8D:FB:5C:73:37:41:68:68:FD:10:2F:F9:C2
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial: 01967F0F57A1E93BB959042A341DF7D27A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number: 0DFD
Signing time: Tue 29 Apr 2025 01:00:33 +0000
Manifest this update: Tue 29 Apr 2025 01:00:33 +0000
Manifest next update: Wed 30 Apr 2025 01:00:33 +0000
Files and hashes: 1: 4FCKqar0XtnEKUi3gFfvOiKskUg.roa (hash: n0va6MokXLOyx5Mouds6xLFs3obz/ZHN/b5YuHxhU6k=)
2: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: 5m4dbY1bkHGIFNXfeEyIPrJcNNqeHdY7E9uiawO7oEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:57:a1:e9:3b:b9:59:04:2a:34:1d:f7:d2:7a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Validity
Not Before: Apr 29 01:00:33 2025 GMT
Not After : Apr 30 01:00:33 2025 GMT
Subject: CN=44ef1783ffe7608dfb5c7337416868fd102ff9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:1c:1d:91:a6:fd:ab:ab:e7:e6:05:da:c7:
60:72:50:d8:47:11:6b:dc:d0:29:0b:53:04:3f:5a:
70:68:a0:60:44:09:a4:f5:4e:af:53:50:6a:8b:eb:
4a:4c:f2:df:fe:1c:e7:24:c6:91:cf:b6:7f:52:3f:
f1:ea:24:d8:70:d4:98:55:c9:52:05:36:64:f3:54:
78:ab:24:35:fb:3b:76:f5:3e:59:9b:34:05:db:60:
af:06:26:45:71:4a:28:b6:76:ad:82:26:9e:58:51:
13:04:7b:25:fb:d1:81:5e:52:f0:bd:d9:52:c1:cd:
fe:68:7d:3f:e0:da:b5:1c:b2:6b:62:f5:a0:a6:b0:
d6:b5:24:43:e5:2b:d4:ab:58:3f:66:49:5d:0e:e1:
a9:04:6f:44:a4:da:4c:ec:9c:4c:b3:0b:c3:24:04:
7d:03:47:fa:19:19:24:81:77:50:93:f4:fe:53:2c:
fa:3e:dd:b3:d7:7b:6b:c7:2f:d3:31:4b:41:89:ae:
23:49:a0:6d:7a:ca:65:ab:5a:41:e2:a9:f7:50:26:
04:97:db:e2:47:b2:37:7f:5e:83:09:31:46:86:46:
9e:ef:8e:25:6f:41:ad:e6:7e:53:2e:35:da:4b:c4:
6e:83:38:fd:02:40:1c:2e:39:62:9c:0f:ee:8e:25:
e0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:17:83:FF:E7:60:8D:FB:5C:73:37:41:68:68:FD:10:2F:F9:C2
X509v3 Authority Key Identifier:
keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3b:90:dc:60:b1:6f:08:ee:db:bb:1a:e2:45:1a:af:ae:70:
a0:1f:7f:6b:42:42:23:2e:b2:22:44:61:c7:05:11:0e:07:6b:
dc:6b:60:31:9b:d7:86:0b:18:be:a2:0c:61:50:64:5f:1f:25:
6f:2d:26:41:1a:a0:02:05:a0:aa:68:11:6a:3c:b7:b1:72:1f:
f1:75:3f:d1:f2:2a:2f:85:1f:15:2b:cf:5c:a8:ea:3e:3a:6c:
a3:ad:a0:fe:1c:86:7c:6b:8a:26:a0:0d:71:fa:5f:32:14:14:
60:57:93:c9:f0:bf:77:4f:93:54:52:c9:7e:9b:7b:71:be:9f:
cb:b2:11:3e:92:4f:55:8f:e4:8e:d0:19:bb:5f:c3:3e:0d:3e:
ec:2e:fb:73:97:97:79:be:36:64:d8:74:86:23:b1:ff:86:d6:
64:ba:71:34:eb:85:72:d7:34:52:ce:0b:ae:53:58:ce:9c:26:
c8:83:4b:c4:7d:54:96:7e:3d:c8:4d:6b:57:6f:2b:a3:be:da:
bc:23:73:c1:9d:3e:6a:70:aa:55:40:2a:b8:8a:5e:49:d4:b1:
30:ba:73:dc:ca:ea:80:45:25:42:7b:17:c7:14:5f:83:b6:53:
c1:4a:3f:a1:29:0d:18:12:3b:fa:f1:5a:fc:a7:3a:91:9a:77:
45:7c:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:47:53 2025 by rpki-client