Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: sVY4UtILmwxJVVEXQp6Bjq404fDILwK2pmuacRMHAkM=
Subject key identifier: A1:32:AA:9F:27:04:2A:3F:1E:5D:BC:DD:35:29:56:1B:FC:0F:D1:8E
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 01969E9AFF4DD17AB306B887D4BD45BDC51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 04:01:20 +0000
Manifest this update: Mon 05 May 2025 04:01:20 +0000
Manifest next update: Tue 06 May 2025 04:01:20 +0000
Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=)
2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=)
3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: 4OOWSLHgY2Xnrv0n6g9WmvNtn36eoKwua4Yqd+jxs0o=)
4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:ff:4d:d1:7a:b3:06:b8:87:d4:bd:45:bd:c5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: May 5 04:01:20 2025 GMT
Not After : May 6 04:01:20 2025 GMT
Subject: CN=a132aa9f27042a3f1e5dbcdd3529561bfc0fd18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:fc:69:1e:80:40:dc:40:52:84:79:81:bb:
08:c2:0e:72:92:49:f5:b3:f2:94:7b:2d:1b:b0:3f:
bd:50:5c:4a:30:39:12:aa:4f:77:ba:05:b0:06:d9:
30:73:25:65:7d:ef:68:23:2c:7e:00:6e:75:be:ad:
a8:f5:d5:68:44:54:a7:63:af:e7:fa:d6:52:58:23:
b5:38:72:13:6d:22:17:5a:02:8f:b8:50:ba:79:4d:
a7:da:9a:56:49:3c:1f:62:22:ca:ce:03:64:01:98:
9b:67:c5:8d:c3:6a:e4:2e:46:2b:73:63:d6:50:f1:
8b:4e:dd:f4:ae:e8:fe:86:65:b7:c5:4c:ff:42:e4:
39:da:a4:67:c3:3f:8a:d5:4c:fb:b7:ab:ad:a3:23:
b7:c8:58:f0:44:f2:92:3c:fd:36:ef:91:07:20:ab:
d0:3a:98:0c:e2:ce:26:ae:45:38:fe:17:18:be:1b:
43:8e:4e:a0:85:5c:a5:67:c0:00:8b:67:91:7f:21:
e1:6e:fb:d5:ad:4e:4d:77:3c:1e:56:b7:03:95:c1:
18:bd:68:b4:15:e6:a2:5d:c2:21:d4:1e:58:e7:14:
85:73:77:df:cb:8e:0e:4c:cb:38:19:33:be:49:4d:
c2:b8:75:c6:4d:6e:28:71:64:e5:59:0c:1c:e4:62:
c5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:32:AA:9F:27:04:2A:3F:1E:5D:BC:DD:35:29:56:1B:FC:0F:D1:8E
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a0:36:37:2b:ad:db:5f:b2:5b:c5:05:e5:10:0c:6e:64:83:
59:a5:07:65:d1:ca:6f:e8:2f:bf:14:a1:6f:8f:62:50:8d:92:
d8:80:d7:fe:c3:58:c0:2a:89:8d:8e:74:cd:2c:dd:ca:5a:e0:
9b:e9:e9:09:86:2b:d9:d7:4a:1a:24:da:cc:ab:e3:61:bc:45:
6d:62:ca:fa:f1:7e:4c:90:dd:de:0e:85:79:e8:43:eb:66:36:
d6:3e:93:51:37:5b:7d:fe:cf:01:73:5b:b9:9d:68:96:9a:e6:
65:c0:73:a1:e4:9e:b2:5e:d5:9c:19:de:f0:8b:91:01:fd:d7:
52:ea:84:0e:f8:5d:08:36:3d:33:38:21:94:e5:3f:09:4b:06:
aa:c1:fb:1d:e3:ca:c9:37:11:c3:93:0a:49:ee:b6:ed:fa:70:
da:44:bd:c9:55:d6:48:52:83:79:15:17:f2:3a:76:2b:38:30:
a2:f4:b7:0b:28:57:be:77:99:75:a4:85:a4:cd:98:6a:bb:6b:
4e:22:cb:ba:8e:c6:cd:e6:17:63:56:8e:1f:75:94:3f:1a:e0:
14:06:22:26:84:73:2e:18:b1:e2:64:a0:86:04:4d:76:f7:b6:
5d:2c:bc:42:29:d6:e2:d1:96:e1:69:4f:15:18:5d:34:e9:74:
14:da:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:39:08 2025 by rpki-client