Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: uh6/xNIfCSB+taCC3EBJktQjzygFUKCC1KwwRsex/ck=
Subject key identifier: 89:31:E3:B0:12:82:C8:86:A0:01:2B:2C:C6:C5:BA:9B:F4:D4:93:E2
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 01967DC684D34A6E23F8A92411905E40E5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 08C7
Signing time: Mon 28 Apr 2025 19:01:24 +0000
Manifest this update: Mon 28 Apr 2025 19:01:24 +0000
Manifest next update: Tue 29 Apr 2025 19:01:24 +0000
Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=)
2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: vdnC0ljyaHkestOcvWdXbbSm/3YYmo43NGUcSLbwBKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:84:d3:4a:6e:23:f8:a9:24:11:90:5e:40:e5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Apr 28 19:01:24 2025 GMT
Not After : Apr 29 19:01:24 2025 GMT
Subject: CN=8931e3b01282c886a0012b2cc6c5ba9bf4d493e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:22:da:c1:53:85:28:38:d4:87:d5:ba:a4:
66:55:b9:ae:fb:85:52:55:89:b2:38:1e:36:8f:f5:
34:f9:ed:75:64:27:83:db:ae:11:2c:00:b1:50:f8:
05:4f:4a:7e:c2:82:c4:69:b3:f7:d1:d4:c0:7f:1b:
c4:37:fc:ca:6c:ca:59:c2:2f:c3:c7:9e:95:90:56:
c4:0c:45:ae:5d:55:22:11:31:92:d6:d2:94:04:e1:
3a:28:1e:c9:9b:64:34:3d:e5:7b:00:2f:0c:73:26:
f1:95:bd:06:1f:78:3d:3a:4b:d8:eb:b1:da:d3:43:
01:38:75:bd:36:78:5e:a6:9c:1d:4e:f4:f8:5c:59:
ac:3c:2b:6d:f6:e7:f0:73:db:97:28:0a:b0:7a:a7:
8d:c8:6f:97:bc:e0:1f:4f:30:e9:50:78:5b:98:cf:
30:3b:93:27:f6:18:c5:10:10:cd:76:a1:54:f1:ae:
99:80:7a:9e:e3:f4:6d:9c:71:b9:46:3d:18:13:0c:
2f:f1:75:d5:29:40:f2:27:85:cf:9f:53:3a:04:86:
f7:57:58:1e:e8:08:91:42:44:fc:fe:02:b5:df:35:
b6:90:5e:ae:0b:8d:5b:26:41:58:c5:4d:50:76:2c:
8a:07:38:7d:ef:e3:8e:42:70:60:f3:8b:cc:a7:f4:
e5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:31:E3:B0:12:82:C8:86:A0:01:2B:2C:C6:C5:BA:9B:F4:D4:93:E2
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4b:31:7a:53:1e:0c:fc:d4:19:80:57:df:51:95:f0:0e:0d:
c3:da:ff:ff:96:ca:c6:1a:3f:d8:84:5d:52:11:76:a4:6a:00:
99:af:81:1a:02:df:cc:87:3e:bc:2a:27:d9:e3:0b:0c:9c:cf:
89:5a:22:2c:cb:55:d5:ff:76:bf:31:04:8c:2b:2a:3a:9e:05:
9f:81:cf:0a:3b:e7:96:0e:55:8b:36:4c:1b:bd:25:20:e4:c3:
d1:0f:37:9e:f8:38:0d:b0:d1:cf:bf:0d:51:ac:18:d1:4e:9d:
98:89:03:5e:87:2a:03:2e:2c:e3:2f:c5:1d:a6:4e:17:d7:de:
91:6c:2a:0d:75:e1:38:2e:5b:62:f4:79:06:9a:54:b4:89:a3:
a6:b0:10:3c:52:72:73:98:f7:aa:33:4d:8e:00:05:c9:02:02:
ad:53:f2:ad:18:c8:c6:85:61:12:ce:e3:b8:16:fc:53:de:b7:
65:a7:7a:06:60:69:6d:28:41:2e:48:79:79:5d:fa:f5:87:79:
e6:95:fa:33:33:e9:08:18:b6:a1:cf:d0:ca:e7:02:86:c2:6d:
d0:7c:7a:84:1b:31:5c:23:43:03:ac:f9:c9:dd:6c:56:cd:ab:
99:29:5e:ae:12:33:5c:fd:90:32:c7:10:6a:b1:f6:f3:3a:fd:
6f:cd:4f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:37:27 2025 by rpki-client