Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
File: aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft (raw, json)
Hash identifier: Un1AF3QBEEFoFrmMvhU5Ptxg3B3vgY+Vb41+B4P7mGQ=
Subject key identifier: DB:CC:B1:A1:BC:7F:19:C7:FD:D3:B9:84:AB:73:8E:C7:4B:6C:9E:62
Authority key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
Certificate issuer: /CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Certificate serial: 0196B5C7C2E9C674A8DA81EEDD0D3CF17F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 16:01:29 +0000
Manifest this update: Fri 09 May 2025 16:01:29 +0000
Manifest next update: Sat 10 May 2025 16:01:29 +0000
Files and hashes: 1: 1-RRFLFYvpdDCB0gIWM3HeWx7I8g.roa (hash: pD8ORJEMQZjbq/pqQVUKzZDauGOud+2TyXVh5uPBOWk=)
2: aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl (hash: 2tfs3xPkOvgKs9TZfAgce7cMBOvDlaNeMIvzgR7/WBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:c2:e9:c6:74:a8:da:81:ee:dd:0d:3c:f1:7f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Validity
Not Before: May 9 16:01:29 2025 GMT
Not After : May 10 16:01:29 2025 GMT
Subject: CN=dbccb1a1bc7f19c7fdd3b984ab738ec74b6c9e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:51:c0:fc:5e:ac:e5:a2:f2:18:5a:c7:0c:
b9:10:89:6c:9b:cd:98:c6:09:64:fd:10:2a:d5:60:
7d:3e:55:a6:91:6e:0c:15:60:91:ff:68:91:d4:4a:
83:ba:76:ef:81:9c:a2:61:29:5f:f2:ca:6b:de:8d:
e4:d4:87:8b:c3:9d:09:5e:d7:94:3a:f8:a5:b2:d8:
ec:86:47:a0:8d:64:b4:42:fe:d2:a5:7b:c9:d0:a7:
aa:f8:a5:e7:70:08:65:3e:16:77:70:be:21:3f:b5:
72:82:16:81:fe:a9:df:17:29:75:31:b6:62:56:e1:
e4:44:a9:55:65:46:1b:86:02:34:9d:cb:51:03:ff:
6a:6e:02:3f:63:8d:2b:eb:78:b8:57:aa:6e:80:8b:
44:c2:2e:d7:f4:1f:86:e6:66:d0:5a:58:c3:83:fb:
5f:a8:29:c6:5a:46:13:b2:02:b5:5e:75:18:5b:df:
ae:f9:4e:ad:8d:11:e9:6e:e2:1c:f8:60:90:10:f2:
6f:97:a8:21:e3:25:8d:a9:14:0f:a7:48:73:c7:b3:
2d:84:ab:41:51:24:a0:88:89:76:aa:e4:16:19:80:
62:64:54:3a:55:3e:c5:7e:7f:3c:6a:e4:97:72:3e:
4d:86:d6:40:de:f1:fb:b4:8c:b1:31:95:31:80:4e:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CC:B1:A1:BC:7F:19:C7:FD:D3:B9:84:AB:73:8E:C7:4B:6C:9E:62
X509v3 Authority Key Identifier:
keyid:68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7e:be:aa:a3:e3:19:d0:bf:c9:b2:2f:c4:05:01:90:14:cc:
0f:db:2a:10:53:97:c1:51:7f:a8:92:97:6a:79:29:af:3b:65:
ef:76:6e:9f:e9:73:43:52:1b:89:5a:b2:0e:07:2e:c5:b2:72:
46:c2:b2:68:be:53:d7:1f:76:61:64:1c:26:74:02:c9:63:dd:
76:78:5e:e3:36:e9:92:41:28:ec:9f:0b:ba:ab:1d:94:05:05:
ac:9b:8d:13:9e:21:08:3a:38:fd:ad:99:07:5a:38:2d:85:c1:
8d:d2:f4:b0:42:91:d7:40:82:b2:86:12:fc:49:6c:63:22:f3:
88:5e:e0:9c:d5:61:d5:97:51:9c:1c:dd:37:29:ef:e8:5c:f0:
ed:a7:a1:67:5f:0b:4e:2f:dd:21:93:db:5b:e9:c1:16:44:c6:
70:b5:f8:bd:99:06:d1:51:e2:2a:11:72:e2:10:8b:84:1c:97:
b3:76:ca:03:70:68:41:ad:9d:79:4f:a1:8e:e7:ba:4c:81:c5:
fa:c1:37:05:70:3c:0c:6e:a1:44:d4:3d:bd:5d:7a:61:2a:2a:
81:e3:7d:1d:55:4a:e7:1f:f9:7e:5c:d3:b3:3e:ac:d1:ec:9a:
43:1f:e1:06:9a:f4:6e:aa:f4:d3:18:b2:13:20:2f:d3:9b:77:
94:3a:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:06:11 2025 by rpki-client