Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: wBI3oVF+zKtOwdia8rDckLPsnPnpq9645ofRVR39eFs=
Subject key identifier: 0B:C2:89:75:E9:01:E8:56:11:16:2F:B6:50:41:9A:02:41:52:58:BD
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 0196BE5CA3F439207531D933067BC369F71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 0D13
Signing time: Sun 11 May 2025 08:01:04 +0000
Manifest this update: Sun 11 May 2025 08:01:04 +0000
Manifest next update: Mon 12 May 2025 08:01:04 +0000
Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=)
2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: hCouZQHAF/sxWk48f0v/IEW1+Oo1lxA44uzbNqAyAV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:a3:f4:39:20:75:31:d9:33:06:7b:c3:69:f7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: May 11 08:01:04 2025 GMT
Not After : May 12 08:01:04 2025 GMT
Subject: CN=0bc28975e901e85611162fb650419a02415258bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:ef:2d:37:68:34:4a:4e:d5:2c:22:87:f3:
50:95:cf:8f:34:e6:ca:54:1b:58:b6:6f:71:59:ab:
d9:35:29:68:ae:73:ea:e7:5f:8b:c0:a8:31:fd:61:
56:ce:fb:98:ce:af:4f:e4:bf:05:ae:1c:23:ec:03:
2b:bd:c0:47:d8:59:34:31:29:d2:11:a0:c8:8d:66:
da:ab:d6:ed:ff:0e:86:bc:f4:30:21:10:c7:a7:2e:
ae:a7:ff:d7:19:a5:5c:90:31:15:19:f9:07:81:30:
fa:fd:3a:8e:ce:b1:22:1b:76:6d:3f:9e:63:33:9d:
67:7f:0d:ce:55:bc:50:60:6a:f3:e7:2d:2d:6f:a6:
bf:44:93:31:16:30:e9:cf:c1:25:c8:fe:a5:d6:95:
ff:a7:b4:45:0c:9a:ae:e7:0a:28:66:1c:59:c2:54:
1b:88:39:18:6b:43:ab:e5:bc:22:0e:5e:ff:7d:15:
5d:2c:fe:8f:0a:fc:21:b1:ec:5d:7a:36:4b:52:b0:
07:34:9f:09:f0:af:bf:c3:9d:3e:a2:bd:99:94:4f:
a3:60:62:ca:51:8e:ad:0a:d9:1a:9c:1e:6d:7b:29:
aa:75:5d:7b:01:2c:e0:43:49:3a:87:af:0b:6f:55:
f4:a7:da:11:63:04:0e:e5:e4:a5:38:54:91:6b:f4:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C2:89:75:E9:01:E8:56:11:16:2F:B6:50:41:9A:02:41:52:58:BD
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c0:c4:3a:56:55:c6:8c:10:44:a8:ee:bb:b8:15:8c:8f:bd:
23:e5:dd:0a:25:6f:7b:75:35:b7:6d:76:9c:e9:30:fd:55:62:
99:05:c8:e8:29:0e:bc:2d:80:15:1d:d5:2f:a0:66:cf:22:e2:
e2:9d:55:58:24:b1:a2:0d:01:64:0b:22:7f:3c:3f:10:3b:b9:
cb:cf:13:bb:13:a5:f6:c4:b0:57:aa:43:99:0e:38:d0:c4:62:
7b:89:e5:06:d3:9a:f6:ab:1f:9d:88:07:e0:c0:40:95:a7:fa:
28:3b:6d:70:f6:12:04:c1:64:63:e0:ef:0b:98:9e:b4:5c:5d:
71:40:98:1f:3f:af:f9:d8:78:c1:3c:20:d1:9c:61:e8:c1:88:
61:9f:60:33:8d:4f:3a:61:a2:22:af:ad:55:8d:38:b1:f5:92:
52:0b:0e:b2:35:42:b4:12:68:eb:97:03:92:b8:e3:c6:9b:a0:
c4:94:75:47:01:9c:a9:b6:5c:a2:e4:b7:d6:de:d0:42:dd:7d:
92:24:e8:e1:a9:85:a6:92:69:af:83:ba:53:ec:f3:15:7d:8c:
b0:27:86:e6:91:c7:2b:cc:d6:94:23:33:1e:95:59:fa:57:06:
c6:0e:c6:61:05:70:1f:fb:18:7e:97:34:c1:7e:1d:74:9c:50:
1c:08:55:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:26:41 2025 by rpki-client