Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier: DE8+mFgVRRoKjx+lD56iK9RP52Uzic7eAQceqffL21A=
Subject key identifier: B6:BF:9D:7D:34:2D:26:12:6F:64:9D:DE:83:9B:A4:A6:ED:FA:67:80
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 0196C0B88A71FE3A46C8CD42BC0EDF5F63BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 19:00:41 +0000
Manifest this update: Sun 11 May 2025 19:00:41 +0000
Manifest next update: Mon 12 May 2025 19:00:41 +0000
Files and hashes: 1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=)
2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: bCAA85VR7O8ElPUmALWb0uCITGAbwo/gKUyDSyFryG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:8a:71:fe:3a:46:c8:cd:42:bc:0e:df:5f:63:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: May 11 19:00:41 2025 GMT
Not After : May 12 19:00:41 2025 GMT
Subject: CN=b6bf9d7d342d26126f649dde839ba4a6edfa6780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:53:0a:d4:ce:4f:35:c0:14:01:59:1d:30:1d:
e6:80:c4:49:fd:63:42:85:be:bf:be:95:c1:41:4e:
0d:b6:10:04:a0:c4:36:cc:07:15:ea:22:75:0d:13:
4f:5d:e4:b8:5f:f2:0b:39:3f:3a:b9:30:13:d4:1a:
3a:1d:41:de:07:d7:f9:de:63:8b:1a:3a:9c:4e:c3:
b1:90:0a:7c:9f:d3:51:ca:67:17:cd:6d:d5:aa:a7:
ed:b7:1a:4c:d9:7c:03:de:25:c5:b8:fd:f8:97:21:
0f:52:9d:49:3b:65:50:3e:5e:92:b0:35:6e:26:2c:
27:ab:88:d5:a1:35:49:48:c6:87:fa:c7:ac:b5:ce:
12:21:a8:08:ed:8e:cf:83:e4:4a:ae:97:22:ab:a4:
81:c3:c6:d9:24:fc:7c:84:a5:62:8e:9b:23:8c:75:
86:04:de:82:a6:d9:ea:b0:48:0f:3c:b4:6b:53:2a:
85:6f:54:60:44:97:36:e8:81:87:17:b5:ec:1d:03:
ff:b6:24:72:d7:6e:1f:5e:6a:3f:b8:03:4c:58:1a:
0b:3f:db:6b:4a:18:63:ee:b7:fa:e6:2c:32:7a:b7:
ce:2b:cd:a2:c0:ed:48:5e:f9:8a:d7:4b:d6:6f:ba:
a6:73:c9:92:a5:50:e8:4a:f7:5a:8c:25:b1:3a:54:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BF:9D:7D:34:2D:26:12:6F:64:9D:DE:83:9B:A4:A6:ED:FA:67:80
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:90:6d:8e:68:1e:e1:34:cd:c9:a0:05:3b:02:89:2d:bb:e9:
37:1c:31:89:fd:ac:6e:9f:d9:4a:57:c1:9a:4c:8d:aa:96:59:
57:0d:2d:75:cb:29:4d:6a:ce:34:b6:e9:96:88:7a:c6:3d:fc:
47:96:84:74:7a:6f:4f:b3:5e:f4:15:19:11:7e:57:cd:95:91:
f1:d2:3c:2e:75:5d:53:81:d8:16:5e:d9:68:ce:a7:f1:dc:0f:
e1:3d:99:ef:dc:7e:cf:83:99:74:76:da:8b:f3:c3:c3:07:7c:
43:59:fe:ca:c2:70:27:ee:db:f5:25:35:60:16:1e:3d:ed:1b:
3b:4b:29:23:20:4f:fc:0c:b2:9a:01:20:76:e3:29:0a:4e:33:
d8:0b:e8:39:47:86:34:74:e3:93:32:56:64:6c:7f:47:3a:76:
98:90:67:a4:a4:72:5e:96:e2:52:d9:54:2e:6a:dd:1a:bf:e4:
3b:49:61:4e:d3:05:7a:4d:b7:15:4d:20:cb:ed:f5:74:f4:b9:
ca:aa:46:81:eb:9c:16:f4:50:e9:3d:e0:af:6a:df:28:7c:c9:
2d:7a:73:08:ab:40:3b:62:df:86:9d:92:b7:52:d2:32:a8:bd:
80:f8:0d:91:b8:db:9f:f8:69:70:0b:d8:f4:93:f1:a1:38:e0:
9d:71:57:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:17:38 2025 by rpki-client