Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
File: 10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json)
Hash identifier: +RC4TQQBNhK8QLAxF/fWiTw9hXiif7L0DJF0XvCpggU=
Subject key identifier: 4C:59:D1:43:86:62:B6:5D:AF:BC:FD:7A:42:60:2F:6F:32:1A:CA:40
Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
Certificate issuer: /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Certificate serial: 01967BD81D5CB4FE2FA2059E96CC34A20950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 10:01:22 +0000
Manifest this update: Mon 28 Apr 2025 10:01:22 +0000
Manifest next update: Tue 29 Apr 2025 10:01:22 +0000
Files and hashes: 1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: +wnqDcZzZ6VAl/t9okUlY3I0/fc60b/yMIRgosmu3nI=)
2: DIiJmhkGPOYoFSzKU5OJGHxPZv0.roa (hash: wVFQMX+v03An5N7stfoX0LOfftlraoV2nDd1HWqmadg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:1d:5c:b4:fe:2f:a2:05:9e:96:cc:34:a2:09:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Validity
Not Before: Apr 28 10:01:22 2025 GMT
Not After : Apr 29 10:01:22 2025 GMT
Subject: CN=4c59d1438662b65dafbcfd7a42602f6f321aca40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c4:cb:e0:9d:ea:4c:88:8b:c5:6d:d3:d7:34:
92:9f:1d:15:5b:66:85:6f:fc:9b:36:cb:34:51:27:
8c:9f:df:9b:09:1d:6b:8d:e1:2f:0b:58:03:b7:6c:
25:6b:12:0c:8e:17:3c:5e:37:d8:dc:1a:eb:42:cc:
48:83:75:cb:82:4c:52:90:86:6a:8f:20:d2:5d:ba:
69:b0:36:6d:d5:55:b4:6e:6b:63:8a:2d:aa:0f:ed:
c8:79:90:ce:9a:88:c8:2b:ab:ad:a0:8e:61:fd:a6:
90:62:18:10:ac:8a:98:50:87:c3:f8:43:c1:8b:91:
9c:84:6a:02:3b:8e:f0:a7:4a:bc:f8:12:29:22:6e:
b2:e7:88:12:e6:90:cc:a7:ca:f7:7f:13:29:ba:c1:
ad:90:46:a4:f3:54:70:a7:66:21:9a:b0:b3:b3:dc:
f2:79:59:cc:be:12:08:4b:fc:f6:42:d6:d8:68:92:
18:a3:d7:a1:5c:a5:49:59:34:54:70:93:99:e5:eb:
f2:0a:79:18:45:3a:32:7d:cd:35:2b:e4:74:7b:97:
8f:e4:e9:c4:dc:23:06:d0:fc:41:0e:f2:52:e8:0e:
92:31:e0:03:57:bd:5f:85:9f:1a:77:f4:06:24:ba:
50:10:7f:13:66:b9:28:08:89:33:aa:ad:2e:9c:cd:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:59:D1:43:86:62:B6:5D:AF:BC:FD:7A:42:60:2F:6F:32:1A:CA:40
X509v3 Authority Key Identifier:
keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e5:f7:c5:1e:42:5d:5e:8e:ba:44:59:68:0e:b9:fb:ed:1f:
f4:1f:cf:94:88:30:14:f7:5e:20:cd:2e:27:e7:85:3c:38:6c:
c3:a3:3c:ae:92:e8:82:7d:d9:0c:36:3f:2a:69:8e:45:ed:9e:
e2:38:e1:db:dd:66:7e:ad:41:c7:41:c5:2d:93:80:84:54:e2:
ee:5e:37:ec:41:7a:1a:8b:b0:3a:55:0a:2e:46:3e:17:14:59:
c2:3e:fd:0c:d0:6b:06:43:dd:87:bf:82:5b:55:15:a1:c6:5e:
ea:90:4c:51:1b:3a:19:52:35:7d:e8:16:0e:df:b7:8f:ce:30:
da:ab:4a:58:45:f8:42:61:43:97:85:fc:de:0f:e5:4b:18:5e:
7b:f3:5e:ef:a5:02:3e:0a:15:e6:f1:3c:58:52:d8:f2:87:6b:
be:45:00:09:ca:55:03:87:e1:ae:6e:7e:27:08:bc:91:7e:ff:
a3:64:06:71:77:e8:b5:e3:e8:d5:c5:54:18:dd:37:3d:03:61:
03:d0:47:e6:7a:f5:35:e5:75:3f:11:e2:4f:2b:b9:bf:97:92:
1e:1a:60:e5:0e:36:0d:21:ca:0c:5b:67:fb:af:02:82:e5:c1:
53:f3:b3:5a:ca:ac:04:ac:65:fe:e7:7c:c3:a2:e8:a9:9d:0d:
45:0c:01:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:21:07 2025 by rpki-client