Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: GrPYv+FhHO8FlhwM3OgPG0SgOPaqwYVEDZMSiz5kmHI=
Subject key identifier: FD:27:EE:2C:58:A7:64:62:C5:46:13:99:81:42:E4:8D:C7:47:E9:A9
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 0196BB923A1015309BC15E0DD927B9E9579A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 085A
Signing time: Sat 10 May 2025 19:00:44 +0000
Manifest this update: Sat 10 May 2025 19:00:44 +0000
Manifest next update: Sun 11 May 2025 19:00:44 +0000
Files and hashes: 1: 8nt8dsbMeiqtSt6KoDNGgs5pyTM.roa (hash: RvFtibhd8tSawl3iSjZ76rX4z9HhG8SM7MwleTD5nY0=)
2: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: tMFstqlS5YSpq3iUjQKYNlKXaON2L99mUijOzkmRMSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:3a:10:15:30:9b:c1:5e:0d:d9:27:b9:e9:57:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: May 10 19:00:44 2025 GMT
Not After : May 11 19:00:44 2025 GMT
Subject: CN=fd27ee2c58a76462c54613998142e48dc747e9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:d4:c4:f0:44:2d:1f:2f:cb:79:c9:e1:0e:
09:4a:df:e1:47:70:a3:db:70:05:50:41:80:03:20:
07:3a:e2:e3:c8:b9:48:58:ac:fc:c8:93:3e:09:21:
33:6e:64:37:ee:48:8e:12:13:d6:86:06:ab:30:34:
32:16:09:a7:12:fd:b8:a5:97:b0:46:27:98:f7:e7:
f9:ae:d1:27:28:c9:41:72:4c:6f:c6:43:35:a7:23:
68:40:9f:8e:18:85:63:98:b7:d6:0e:85:01:87:9d:
ae:2f:e2:63:b5:41:61:04:b3:94:61:f4:22:4f:f7:
c3:56:ab:15:2a:e8:64:41:da:05:e0:3d:c8:22:bb:
39:fe:ca:4e:86:ae:2a:d4:c1:34:1f:2c:06:f3:6c:
4d:91:53:13:58:28:04:1e:31:b1:3b:09:40:b8:bb:
70:c0:c4:0e:a7:7a:46:43:a3:3c:77:c0:3b:e1:49:
82:be:4b:9d:8b:e7:07:39:f5:8f:8a:c0:f0:0e:96:
e1:f7:3f:15:d2:8f:2f:78:5d:84:a2:77:1a:7f:97:
d4:de:31:70:f7:42:8c:c3:12:54:18:33:b3:25:64:
82:ce:6f:ed:6c:02:bd:d0:be:14:41:d7:f8:aa:66:
f7:fd:74:d9:85:97:2f:97:47:1c:04:fb:61:e4:07:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:27:EE:2C:58:A7:64:62:C5:46:13:99:81:42:E4:8D:C7:47:E9:A9
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:53:96:6f:cd:3b:2d:a7:08:9e:22:7d:3f:1a:ba:1e:1e:2f:
62:60:a2:00:90:12:7d:4f:fb:e0:73:0c:20:79:4b:ea:0c:81:
73:bc:25:16:b8:93:60:61:60:93:68:2e:ed:1f:7a:db:52:ba:
dd:8c:7f:a7:a1:43:a7:72:d3:06:31:4d:63:88:b7:bf:8b:23:
6b:eb:e6:55:64:de:44:fe:67:d1:d1:d0:1b:c9:7f:04:76:93:
6c:01:8f:16:8f:23:8c:ef:6e:c8:2c:ad:a5:08:fd:8c:97:a0:
4f:cd:d9:15:e3:42:5c:9b:1a:03:2e:2d:dc:8d:80:6e:c6:65:
5d:1f:8d:11:91:60:e7:d4:d2:3e:20:ef:40:66:9c:cc:76:f4:
d0:8a:75:3a:6e:94:20:de:4a:2d:11:76:c8:8e:db:22:05:b4:
be:2d:71:4b:af:1c:35:1e:90:6b:7a:5e:f1:d8:f2:33:f3:df:
ba:c6:2d:3a:eb:ee:f3:a3:97:ed:97:11:5f:59:9b:c2:57:9f:
d9:c3:d8:09:d0:79:fd:6f:3e:b6:94:b3:4d:07:31:89:96:00:
27:c1:b7:40:55:8d:ba:55:a0:01:29:19:d7:33:07:13:bf:2b:
38:78:29:95:c2:03:40:eb:3a:b2:c8:b2:87:06:ae:b9:b3:16:
f2:27:2b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:42:08 2025 by rpki-client