Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: /K4Oj3NqucPuWVDjRabf00iwiKku2hCs49yKMUj0U7w=
Subject key identifier: CC:8B:35:77:F8:15:52:B3:CB:BE:42:5E:2C:2F:92:AB:FA:90:8E:7E
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 01969D8785A5BC960A04934413CD35552CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 1524
Signing time: Sun 04 May 2025 23:00:26 +0000
Manifest this update: Sun 04 May 2025 23:00:26 +0000
Manifest next update: Mon 05 May 2025 23:00:26 +0000
Files and hashes: 1: byfAz36QPO1zWRGDAvBxGCJUgUc.roa (hash: cj5k9JTRqENUIcOxIhQN0l2jcQzpbWQBrAEBDWIt2vI=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: H4qi6xf+pEBokG97+4t5w4cHT/6pNAVOR+YyOu19dzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:85:a5:bc:96:0a:04:93:44:13:cd:35:55:2c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: May 4 23:00:26 2025 GMT
Not After : May 5 23:00:26 2025 GMT
Subject: CN=cc8b3577f81552b3cbbe425e2c2f92abfa908e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:9c:92:07:46:72:f3:de:d8:25:e4:c9:47:
3a:b1:32:c1:8b:d3:75:fb:6f:53:ed:3f:88:fe:a0:
98:1d:62:e6:9a:07:f9:3d:3a:55:29:11:4c:1e:4e:
e8:6b:dc:34:a5:60:c0:c2:bf:b5:d8:ca:5f:95:56:
a5:8c:a4:bf:57:72:af:5e:61:b9:d8:0d:0f:95:1e:
0f:82:4e:c4:f3:03:91:07:4b:a2:dd:dc:e0:6a:8c:
42:28:d5:34:a4:29:ee:d2:06:cd:5a:47:0a:7e:03:
a4:af:4f:ba:bd:0f:f1:1d:4f:f1:fa:a8:92:10:eb:
c2:7b:62:06:f4:10:9d:84:28:4d:6b:8b:d9:c3:83:
b6:42:9e:09:8a:9d:06:b0:0d:01:5e:e0:70:0d:a8:
f2:a4:5f:b8:df:ea:aa:cb:b4:3e:77:20:e6:c9:41:
9f:84:0f:53:1f:69:c0:c2:76:47:05:a2:c9:01:4e:
43:aa:fd:15:50:74:bb:d0:26:bd:12:18:dc:aa:a8:
2e:88:de:89:39:58:c3:48:79:85:e5:17:b1:01:fe:
b2:80:a3:ef:59:79:03:bb:9d:da:34:a9:d2:95:86:
bd:09:5a:5e:68:78:fc:20:f0:9c:af:10:d8:89:47:
3b:1d:2e:8c:36:3f:30:96:1b:1a:ea:be:0d:b1:f2:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8B:35:77:F8:15:52:B3:CB:BE:42:5E:2C:2F:92:AB:FA:90:8E:7E
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9c:09:98:0a:f0:75:40:46:b6:f4:a8:c8:b0:4c:6a:63:46:
f3:08:45:d7:96:b7:03:52:d5:0b:96:d8:e6:f5:3f:8e:e1:24:
12:49:d0:86:a3:94:f9:33:9d:77:92:39:3b:82:a9:b7:18:5b:
5e:1e:c9:7a:7f:ba:5c:35:9e:95:89:c6:be:2a:40:13:2c:78:
03:16:57:e8:37:50:6a:6f:cc:f7:b9:d9:b5:c0:50:d6:3d:bc:
be:d7:51:5e:f9:48:22:1b:01:89:52:85:58:33:bb:14:f9:60:
5b:dd:b3:2c:be:6f:8e:2f:2a:04:f1:19:54:b4:cb:17:fb:f8:
c9:15:57:42:e2:41:11:01:35:46:ad:1b:ce:19:dd:89:67:4d:
e7:bc:64:0d:0f:13:10:51:16:c4:21:1f:41:24:2c:ca:f8:7b:
76:cf:0b:b2:cd:60:26:df:08:d0:11:84:c4:7e:96:ac:7e:ed:
89:cb:3e:86:37:21:64:06:9a:14:de:60:a1:f9:e4:69:73:a4:
d6:36:70:38:cd:d7:67:5b:26:2d:31:f3:00:33:f9:79:19:a0:
12:7c:c5:56:8f:f3:fa:2c:93:df:c5:c5:6d:06:e9:8e:5a:e6:
5e:f7:75:d0:00:5c:b8:af:79:cf:aa:ba:21:16:6d:b5:aa:3c:
9d:21:d1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:40:26 2025 by rpki-client