Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: Z/BOXVfGyHqyu1aK6vwv+vZpAQZTZ4/5/wSVS2IHpDc=
Subject key identifier: 2D:1B:75:D9:05:FA:60:E7:54:67:23:B6:86:75:4A:74:1F:87:77:FF
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 0196BC0066C454B47BAB9A0F7BC59EE3F719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 21:01:04 +0000
Manifest this update: Sat 10 May 2025 21:01:04 +0000
Manifest next update: Sun 11 May 2025 21:01:04 +0000
Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: TZ6ltxDzo9RxA4V7g0A8WVJi5h8n1O9Tp4C/c1jYk2M=)
2: Knfth6txiDF12eWnRVMBTSZ3N7E.roa (hash: Erv1kSG7AIiPjVidT056wHHSwG5zaW2OWLCIEkBM0Dk=)
3: Wsb9iLccMA3IkT_2bsufbfAmx6s.roa (hash: EeNg1ELWa5JeZ0r5s7rlId0eyflaNS7CxDa9rMshhYk=)
4: XPixcvd-VZdDwp01qDyS6l8HyGk.roa (hash: nEM6mcnfwNKM+CYw9oKK1seFIgWAcWfoaoBK4ckQSSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:66:c4:54:b4:7b:ab:9a:0f:7b:c5:9e:e3:f7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: May 10 21:01:04 2025 GMT
Not After : May 11 21:01:04 2025 GMT
Subject: CN=2d1b75d905fa60e7546723b686754a741f8777ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:8e:56:57:6a:84:2c:35:6e:40:dd:2a:be:
3e:18:63:5a:20:83:61:6b:55:03:30:3b:2e:47:52:
3f:c5:1f:01:8a:10:f4:1a:4b:1d:dc:b8:63:9c:ce:
76:7b:83:e2:2b:34:0d:c4:bb:43:81:5c:11:a5:c7:
c9:d2:50:06:97:11:97:96:e5:16:da:5a:f4:7d:5b:
ab:e2:62:ac:f8:a6:b5:fc:b4:1f:7c:7b:f1:66:c1:
2f:92:f2:c3:3d:bf:35:ea:31:04:5e:70:b3:54:fb:
e6:b8:34:9b:94:cf:99:e0:b2:7c:25:ba:74:90:14:
d5:8c:82:9f:40:29:b3:74:3e:e0:30:74:c6:06:cd:
26:7b:f8:73:8a:e9:c8:1a:c0:b3:81:20:26:cf:b2:
97:8b:64:06:73:e2:d5:d1:c2:02:e3:df:e0:8f:eb:
53:7e:35:3c:98:a1:70:f1:6a:15:c6:5f:82:b4:c6:
80:6b:70:4e:42:e7:f9:97:7b:a1:15:49:e2:62:d8:
44:c3:b4:aa:70:97:5b:e8:98:3f:dd:be:3f:cd:d1:
f8:44:a7:34:f8:47:24:d2:d2:b7:28:ce:6b:d8:40:
47:50:0a:31:ab:70:8f:02:21:52:37:01:e2:f4:ef:
d9:4a:7d:b9:f9:cf:31:dd:98:10:31:0f:f8:17:04:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1B:75:D9:05:FA:60:E7:54:67:23:B6:86:75:4A:74:1F:87:77:FF
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ba:69:c4:19:d7:e6:8e:25:a5:d5:fe:96:1e:bc:2c:f0:c9:
39:47:92:70:ab:c6:08:89:6f:9f:f9:47:39:55:5c:7a:06:df:
80:0d:99:c4:f7:c0:08:e7:e7:e3:f3:23:45:de:fb:5a:da:7f:
f0:42:bd:c5:17:c7:d6:89:6a:af:71:cc:db:0c:8f:b8:5a:ef:
d2:0b:c2:8f:0a:d9:a5:ac:0b:3b:b7:3d:69:46:50:f8:cd:aa:
67:47:6c:63:53:cb:17:1e:d5:c3:b9:39:07:f3:d0:9d:54:bd:
a8:c3:cb:04:d7:8e:d9:2b:37:bd:bd:02:e1:92:2d:d9:80:e8:
f5:44:82:2e:94:22:3e:35:42:26:cb:e8:2d:12:71:fa:52:e5:
4a:61:32:e1:ea:43:01:75:bc:44:b7:24:3b:57:25:f2:c8:e5:
83:98:d1:09:44:8c:49:d5:61:62:39:6b:69:54:f1:88:01:13:
9b:e0:5f:55:ea:8b:e6:53:3a:1c:ea:7f:a2:90:47:48:aa:70:
58:71:47:21:b2:0c:28:ff:4b:ef:47:10:f2:bc:91:94:5f:08:
5c:f0:21:f8:6c:44:87:59:f0:19:ab:0d:70:15:c5:0f:f8:8a:
0a:db:59:43:b3:0a:d9:16:83:ab:c7:a1:46:e0:6c:86:b9:dc:
c5:d1:f8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:00:29 2025 by rpki-client