Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: BJH6WnjbA+XZiP8VZsUofyG6ymfHEBtuZBy2T4aPWFo=
Subject key identifier: AE:C6:66:34:39:56:09:6B:3D:4B:17:0A:2D:BE:88:51:BB:CE:92:34
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 0196C34B9960FD9B59CB80149D8CD2322428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 1505
Signing time: Mon 12 May 2025 07:00:33 +0000
Manifest this update: Mon 12 May 2025 07:00:33 +0000
Manifest next update: Tue 13 May 2025 07:00:33 +0000
Files and hashes: 1: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: jQli+Uedh5+Y9OXKRGarOVqMwBdaABd9jwyUFuqHD5o=)
2: lKi6SoPHv8adD_f0H8JMR-0tkso.roa (hash: IDdp81FcSfbScsI5eFdQ3u0Q5w/9MnWkbMQFbCRI7Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:99:60:fd:9b:59:cb:80:14:9d:8c:d2:32:24:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: May 12 07:00:33 2025 GMT
Not After : May 13 07:00:33 2025 GMT
Subject: CN=aec666343956096b3d4b170a2dbe8851bbce9234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:66:33:2e:8b:c4:bd:ae:de:66:b6:bc:78:
83:78:2e:08:13:38:16:ce:a0:be:71:38:88:28:c6:
5f:d1:b3:e5:df:38:ab:d6:ab:d7:c9:18:60:a0:85:
2a:38:60:1d:99:6d:28:9b:7d:05:e9:53:66:21:5f:
ef:cf:a1:9a:8f:3e:24:78:08:89:1c:e6:c9:71:e7:
81:58:65:03:7d:8a:4e:e2:74:9a:b3:4a:d5:76:a2:
ae:28:87:eb:2a:89:3d:d8:0f:5b:e3:42:8e:0c:6d:
b5:6b:47:01:30:87:22:fb:df:81:05:9b:72:de:ca:
1f:0b:a6:37:dc:17:bf:8d:94:cc:c2:f5:4a:75:ee:
c3:8b:71:8e:9d:16:78:ac:6a:c6:37:96:33:f6:14:
22:e6:b2:23:05:d5:24:22:f0:c4:52:78:aa:cd:af:
5b:66:19:f7:03:63:70:21:51:69:31:2e:10:cd:59:
14:4e:78:01:b7:d7:99:0e:1e:99:cb:5f:dd:09:9f:
c5:99:c6:73:d3:fd:3a:a2:aa:3f:d4:6f:12:26:f8:
d2:de:c2:5b:4f:ea:84:e7:f8:93:07:fc:56:37:d0:
66:c4:d0:f7:d4:97:f1:60:8a:d2:83:02:5c:48:0d:
f1:50:bd:fe:bd:9a:ab:d7:af:a4:c2:81:24:8f:50:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:66:34:39:56:09:6B:3D:4B:17:0A:2D:BE:88:51:BB:CE:92:34
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:39:a2:fc:ab:e6:e5:1e:7e:81:72:56:8a:76:dd:19:87:51:
85:9f:f5:8c:af:89:99:96:22:85:47:52:c0:c3:12:2f:69:ee:
bd:88:9f:60:86:98:b1:eb:ca:cc:ca:48:f7:9c:1b:ae:32:67:
06:b9:c0:e0:d5:ff:e4:b4:b9:58:f2:c2:bd:09:1d:fd:94:de:
6f:07:8c:38:ae:c0:e9:16:ea:bf:b1:47:68:ed:82:c6:04:50:
09:cd:21:db:04:76:4d:8f:2d:bf:07:c3:3a:9b:87:ef:70:3e:
92:66:b1:9f:dd:72:bb:87:a0:54:47:74:61:23:23:48:65:55:
f5:ee:4a:4e:86:1c:8d:fd:a2:3e:d3:f5:5e:54:79:58:82:56:
46:79:8c:aa:56:64:8e:46:f5:cf:dc:84:63:b1:f3:29:9c:5b:
0b:80:a2:60:6a:59:bd:1a:c7:ac:6a:40:89:89:25:46:af:96:
d4:f3:34:2d:37:c1:fe:f1:cc:6f:db:ce:68:e1:57:a1:06:7b:
81:27:ce:af:c5:57:1f:77:bb:87:1a:ef:60:f0:5d:4e:7f:c2:
0d:a0:eb:37:4c:67:ea:75:1a:05:e1:11:4a:15:a4:a0:85:14:
a7:9f:40:d2:d9:9c:4d:e8:80:4f:56:6c:93:36:92:7b:e8:ea:
37:d7:68:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:34:33 2025 by rpki-client