Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: FyIJbTq5+Nif4PYEuz+2g0wPSJULLgi1U8NSUD4kXuQ=
Subject key identifier: B8:84:38:5F:B2:BB:05:B2:63:08:06:16:0C:B3:D6:F1:F2:CF:49:73
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 01969DBEBF779D070A559AA163FD0A801E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 00:00:45 +0000
Manifest this update: Mon 05 May 2025 00:00:45 +0000
Manifest next update: Tue 06 May 2025 00:00:45 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: iUgcmy0buk0tkFIsjRavLletY3Sk+ueoKss141olvOE=)
2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=)
3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=)
4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:bf:77:9d:07:0a:55:9a:a1:63:fd:0a:80:1e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: May 5 00:00:45 2025 GMT
Not After : May 6 00:00:45 2025 GMT
Subject: CN=b884385fb2bb05b2630806160cb3d6f1f2cf4973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:25:f3:7b:28:db:26:3e:08:34:65:65:67:
9f:2d:ea:96:2c:fa:75:f2:c0:54:dd:0c:e7:2f:c3:
0f:24:91:1d:ab:05:3b:1a:e8:8b:a1:ea:40:e8:fa:
66:fd:ef:2a:48:8d:77:a3:9c:76:d0:06:86:95:a7:
de:99:dc:39:3d:c9:65:98:ee:5a:fb:af:02:02:a2:
31:1e:e5:df:34:33:1e:78:5c:85:e0:7a:27:5c:76:
02:f2:9a:53:3e:1a:11:a6:d9:f6:5e:1d:82:0d:23:
61:b1:fb:71:5a:5e:f0:2c:50:00:a6:b8:12:c2:d6:
88:69:d7:1b:70:12:87:55:df:c7:31:48:36:ba:79:
48:0a:f6:c0:26:3a:c0:67:aa:3c:dd:e3:0b:82:b0:
6e:92:54:af:4b:4e:18:9f:5f:ef:c2:f8:c5:14:02:
9d:b1:d2:f0:de:be:2f:c7:f6:e5:3c:b7:23:6d:3d:
d0:18:55:b7:92:90:34:28:b9:37:47:79:3d:45:1f:
31:4b:ad:7a:87:e8:74:ce:2c:35:e7:a5:cd:b3:57:
af:e2:b3:22:53:c4:d3:89:e0:31:68:5d:37:0d:92:
44:75:fb:89:70:5d:d5:05:fc:15:74:00:a5:75:07:
51:28:7d:79:c2:47:73:73:02:88:85:96:ca:64:11:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:38:5F:B2:BB:05:B2:63:08:06:16:0C:B3:D6:F1:F2:CF:49:73
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:17:1a:61:c7:e3:8f:e2:96:0e:19:21:48:cb:c6:48:97:14:
e7:42:e2:b2:d6:66:da:e4:a1:3d:fd:df:07:e9:e7:34:c8:5f:
01:f6:50:2c:b4:73:e7:26:2f:89:f1:df:55:d8:f1:e0:8c:8e:
6e:14:59:ae:e7:2e:a0:ad:aa:50:db:df:fc:db:a7:5b:df:75:
ff:68:35:ee:12:b0:2c:2b:48:0b:27:81:78:f7:f1:8b:ef:a8:
ef:20:70:3d:57:c8:07:1e:7a:3c:23:00:90:b6:fe:75:5d:23:
e1:68:4a:01:39:68:f8:ee:90:de:4e:b9:90:0b:3e:5a:9b:9c:
54:a9:18:19:7b:82:19:5a:ca:c7:b3:88:a2:34:0a:ed:74:c5:
3a:26:c7:72:90:a8:ed:81:4d:28:b0:15:84:a0:7c:84:38:8e:
7e:75:63:21:33:75:df:f3:8b:24:5c:4e:a0:01:f3:d7:cd:94:
62:4f:bd:93:46:62:60:83:18:13:f0:4e:60:82:14:b8:ce:74:
98:31:0e:f8:c1:26:4f:24:76:4b:b7:8f:16:c7:c1:dc:7c:32:
ae:da:ed:eb:b3:94:22:d0:59:4a:4c:90:3e:c0:40:00:db:29:
38:7f:ca:72:21:de:31:aa:58:05:be:77:7e:1d:a6:c7:ee:b7:
59:f0:28:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:09:51 2025 by rpki-client