Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: DQHwBCzmr3KZi80keh1o7VgnR804c+cDjnnnjz0yNzg=
Subject key identifier: 07:41:AB:49:F6:C5:D2:D2:5B:95:DE:FC:2D:60:17:33:B2:F9:84:2F
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 0196B9A429A0994ADF0337038FA2B7E565EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 10:01:05 +0000
Manifest this update: Sat 10 May 2025 10:01:05 +0000
Manifest next update: Sun 11 May 2025 10:01:05 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: 2BpKufBQLinsPbOHpC9KYNkcgTt5QrVdoQLQbUMSNMo=)
2: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (hash: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=)
3: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (hash: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:29:a0:99:4a:df:03:37:03:8f:a2:b7:e5:65:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: May 10 10:01:05 2025 GMT
Not After : May 11 10:01:05 2025 GMT
Subject: CN=0741ab49f6c5d2d25b95defc2d601733b2f9842f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:d3:a8:f2:23:30:e6:69:35:f7:2c:16:c5:
a8:93:c9:a7:f3:32:0f:e1:8c:97:45:c5:f6:b6:b2:
ed:1f:6d:90:63:48:f5:ae:c8:03:98:11:05:b9:00:
da:d4:6a:70:c5:e0:fb:fc:1e:90:1b:3d:2f:55:ea:
9c:87:71:64:55:6b:a3:63:a4:fc:44:bb:c4:58:21:
e3:e6:08:94:9d:1d:17:ca:a1:82:a0:90:15:43:ea:
43:d3:52:91:73:4c:cf:6d:67:c4:87:f0:5b:16:d8:
08:13:b4:9b:8a:c0:d9:24:e3:75:7c:2f:83:40:16:
94:d7:48:78:90:be:a2:55:12:78:27:40:d3:88:cc:
49:02:2f:86:96:72:b6:1a:72:6f:02:af:e3:1a:72:
ad:33:42:84:38:28:4c:81:b7:b6:6a:02:fb:84:61:
5e:4a:fd:fc:4e:c0:7d:68:08:6f:d5:99:d9:06:41:
c2:de:e8:8a:49:7b:3a:a5:5e:98:88:71:4a:94:b7:
83:e6:33:a3:dc:4a:77:bc:1e:36:39:9d:37:72:7b:
54:e2:58:e7:53:31:58:42:f8:8d:02:2a:60:e7:7a:
cf:d5:a3:a8:a5:43:0e:39:83:df:7f:cf:13:e1:5c:
c7:21:2a:e2:14:79:81:d2:f1:9a:6f:64:c2:55:a3:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:41:AB:49:F6:C5:D2:D2:5B:95:DE:FC:2D:60:17:33:B2:F9:84:2F
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:77:0b:8f:4d:2a:40:b6:2c:17:c6:98:09:fc:91:bd:5d:0d:
1d:f8:2c:e6:f9:f8:0e:ef:e5:f8:97:36:ec:db:07:af:73:af:
32:bb:e0:26:00:23:43:90:89:8d:7a:a3:8f:6b:08:1b:58:b3:
5c:59:7a:ef:0f:62:42:a3:3a:ab:81:2b:80:f9:c3:97:74:2b:
96:2b:59:6d:7a:14:5d:55:89:33:45:d0:6b:b2:45:17:12:d2:
54:2a:b5:97:c8:bc:2b:05:ac:76:19:d7:8b:58:55:af:3a:e3:
69:2e:89:97:23:d6:92:b8:74:66:4f:d8:12:46:7e:8d:f4:6d:
99:6f:7f:66:ec:bb:22:88:a1:f5:37:fc:3b:d3:7b:3f:bc:0f:
35:e8:22:9a:73:8d:f1:f8:a9:ce:d9:ca:36:65:c4:dd:40:68:
6b:87:d8:bd:d2:95:da:1c:66:8d:d3:9f:f7:72:e7:80:66:27:
fc:39:fa:2c:98:44:ed:6c:75:1d:96:c2:43:50:66:a3:ae:f6:
ee:02:5b:33:e8:1f:d6:e1:b8:36:82:97:dd:b5:31:2b:25:5d:
be:ab:5a:c5:f0:35:d9:8f:64:32:a8:be:d6:e3:48:19:8c:cf:
89:c0:05:f5:98:ae:6b:ed:d2:d4:d4:f5:04:8e:17:5b:c2:28:
a8:6d:dd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:05:08 2025 by rpki-client