Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: oUR6ESctxARedivppEQXTscum0voeAE4RZtJifhOqzI=
Subject key identifier: 26:8D:D0:A2:5D:61:EE:07:71:01:66:0E:36:3A:48:F0:0E:2D:CC:C1
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 0196ACFAEE0AE8D511170F818D527D5BD944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0A35
Signing time: Wed 07 May 2025 23:00:48 +0000
Manifest this update: Wed 07 May 2025 23:00:48 +0000
Manifest next update: Thu 08 May 2025 23:00:48 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: I3ck+REcyEyG3RU/EATh7XAyYdsU5P2Zgk0xtM3VARU=)
2: wEdGwXpwYmsgP9g00gzYyHwBX_w.roa (hash: xXn4YaJmCyamPKNCyA6d81IZAPpAi8iJdAjjF+NkEPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:fa:ee:0a:e8:d5:11:17:0f:81:8d:52:7d:5b:d9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: May 7 23:00:48 2025 GMT
Not After : May 8 23:00:48 2025 GMT
Subject: CN=268dd0a25d61ee077101660e363a48f00e2dccc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4e:10:84:b8:25:55:b4:2a:d3:1e:cb:60:9e:
72:35:97:39:db:ca:23:a9:b5:46:98:85:8c:b6:55:
24:a3:8a:65:bc:7a:32:47:0c:50:67:36:8a:2d:47:
ff:b5:d5:7a:ab:d6:3c:2f:3d:83:df:95:c2:a4:f9:
b1:93:e7:8f:25:3d:45:1f:0d:a9:02:b7:ed:9b:db:
1a:dd:93:c5:7a:c4:4a:8b:94:30:93:0e:68:11:7f:
84:fb:63:0c:57:80:04:df:7e:86:f4:da:8e:85:e0:
bd:70:cc:b2:81:b8:70:62:1a:62:33:83:61:7f:1d:
66:2b:bb:24:6d:90:6d:8a:e0:18:ae:9c:5f:23:1f:
cc:c1:70:7c:c2:f7:56:f5:7f:01:a7:ac:51:b3:c4:
46:d1:13:a6:f3:d8:07:ff:9c:f6:50:17:7f:d6:54:
bd:45:ce:63:72:54:6f:39:cf:62:8a:ab:41:05:09:
ff:a7:a8:5d:ca:3d:f9:4a:94:ac:23:56:4f:a1:93:
67:77:9c:a1:c6:09:d3:b8:f9:34:9c:aa:7e:cd:4f:
de:d9:20:37:a3:fc:2c:58:8f:c2:71:33:d3:6d:1c:
99:33:2c:5b:c9:f1:1e:27:79:64:d3:21:86:ea:be:
ac:01:bf:99:f5:ed:85:55:e3:d8:ae:bf:27:fc:c1:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8D:D0:A2:5D:61:EE:07:71:01:66:0E:36:3A:48:F0:0E:2D:CC:C1
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fc:e6:8a:6d:8e:59:9f:bf:7f:74:ed:61:f0:7b:17:98:c9:
26:46:69:46:de:c0:c2:b0:86:6e:00:c7:92:2e:ac:a5:bb:54:
27:7f:6b:4a:6a:7b:f6:c3:4e:86:4e:e7:73:b5:a8:84:a8:bb:
f5:01:be:12:c6:6e:42:b2:35:82:69:fd:b9:e6:8c:b1:46:7a:
21:06:88:d7:af:f4:84:99:d5:a5:c7:c8:a0:87:9f:49:b1:50:
d7:e1:ae:21:9e:ab:fc:e1:ef:34:bb:75:ea:05:00:e4:46:95:
6c:0b:42:07:2c:db:7d:d6:8b:85:f8:28:d8:16:2b:23:9f:e0:
0c:d2:0e:32:4e:e7:89:4c:79:4a:55:2e:80:9d:aa:a6:68:58:
cb:ae:55:95:24:77:c2:7c:a8:d8:30:0a:2a:5c:b5:f0:5d:51:
1a:94:28:cb:c3:e4:65:b8:bf:d8:47:a3:8b:7b:40:53:3f:84:
6d:c0:a2:85:b1:c8:96:57:18:e4:7e:2d:80:46:e1:9c:43:c2:
cb:f4:05:39:a1:0b:e8:23:b7:42:c2:05:44:0d:a1:2c:03:5f:
65:e9:20:58:fc:c7:f0:89:ac:c2:05:54:ba:ac:44:fd:63:13:
3f:86:73:a5:6e:4c:f7:82:8f:3b:93:9a:52:09:57:79:c3:24:
e7:7d:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:13:43 2025 by rpki-client