Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: cbNu5BAfXF80ZZnDRixAfVoQcIb+xFn8cOSFFqk3468=
Subject key identifier: FD:4E:8A:7D:23:05:D8:18:F5:92:66:FE:67:A3:18:11:D8:77:F2:D9
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 0196C45E09B04F45552A6BF82BCA446B1C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 0593
Signing time: Mon 12 May 2025 12:00:19 +0000
Manifest this update: Mon 12 May 2025 12:00:19 +0000
Manifest next update: Tue 13 May 2025 12:00:19 +0000
Files and hashes: 1: 23TVA-2OL8ERCOX_dzgjoyDr7ic.roa (hash: HMZHd+55+IMt+Dclhou8M1RYJTwGL8XVXHQpPA4hFCU=)
2: 4-TbcXFa8SESUNpbTLtHqKnqP4k.roa (hash: rfh4ZMQFADgVlOUe/tULyDtfhvBafCEIjiEbbsuqihs=)
3: NndyVqvy3vcxCnZsIK2_Uyxv0lk.roa (hash: cAwKtSP7N0kxacGJxtWaLz9RZYIS8hQUwg7TB0bpnnY=)
4: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: XYDqJoL39EYeCDgvwn/ejIWU1MoNovut3xCl0AdTZsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:09:b0:4f:45:55:2a:6b:f8:2b:ca:44:6b:1c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: May 12 12:00:19 2025 GMT
Not After : May 13 12:00:19 2025 GMT
Subject: CN=fd4e8a7d2305d818f59266fe67a31811d877f2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:cf:dc:de:5d:49:14:aa:65:69:76:1f:b4:
00:f7:1e:9a:b2:39:1d:a7:9b:26:23:ac:3d:b7:ea:
80:4a:cc:e8:3b:62:1f:a7:e0:4b:9c:15:76:19:5d:
f3:aa:ff:48:93:c5:65:4f:b3:6f:fb:d6:43:eb:bd:
14:e7:a0:a6:9f:d2:ee:f7:86:2e:a3:ca:7f:92:8c:
5b:0c:c7:05:55:a0:ef:dd:e2:2c:28:6c:15:31:2f:
04:52:70:6b:bd:76:47:6a:7c:93:dc:87:bd:f5:08:
e8:b0:af:95:63:3f:15:2d:b6:3b:f8:40:f1:7f:c4:
4d:84:e3:b1:61:0e:fc:68:42:f7:b5:29:f4:82:91:
4e:22:95:ac:8d:ef:4c:6b:1c:42:f1:cc:8c:a2:1a:
80:79:98:de:ce:85:3b:e3:6d:8b:c2:1c:f9:03:a1:
45:38:c3:72:50:f1:b3:f8:26:7d:94:cc:e9:32:eb:
f2:51:1c:75:9d:41:3a:4a:7a:15:5d:12:c3:53:1e:
e2:ee:38:12:63:f9:dd:fd:51:88:8e:ed:a8:25:b3:
59:cd:82:97:82:9f:9e:73:88:e4:70:69:4b:2f:23:
79:1f:9a:b5:94:be:61:af:98:5e:7b:e3:4d:80:bf:
9a:b0:9d:50:3a:e1:a6:cc:8b:64:53:6e:23:f1:0c:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4E:8A:7D:23:05:D8:18:F5:92:66:FE:67:A3:18:11:D8:77:F2:D9
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4d:b9:0e:4c:8c:ef:b6:57:76:60:1f:37:e8:6d:16:22:ee:
76:c3:86:69:bc:0a:d2:3d:d9:0c:b7:26:3a:33:f1:74:df:6a:
60:3c:0d:f2:f1:0e:c3:e1:17:bc:0d:c8:dc:8a:32:f6:0a:27:
98:e6:8d:de:97:49:21:19:d3:4c:21:f3:26:2e:f3:b8:9b:a1:
40:62:bf:92:da:1d:9d:21:24:de:5b:b7:92:af:a2:08:8f:df:
be:9d:39:a3:81:ff:f4:2e:e2:dc:72:b8:6b:82:8a:cb:52:e6:
fd:8a:67:ba:d8:84:a0:eb:fa:72:04:a2:50:d0:d5:49:e4:65:
d3:a7:56:5e:a5:ab:8c:71:4a:3c:f2:a4:9a:c4:0b:88:01:3d:
45:48:ab:51:41:8a:63:fd:d4:f7:e9:4e:e3:50:87:e4:ce:11:
6b:c6:ed:7d:cc:cc:5b:e4:24:1c:a1:be:9e:26:70:32:43:99:
bc:4a:7c:45:5f:07:05:2b:36:a2:a3:5b:05:3f:9e:c8:f3:6b:
ea:c2:11:19:c6:4c:ec:2f:aa:4f:e5:7f:da:40:cd:cb:33:c7:
05:06:52:9f:28:17:10:54:9a:49:79:02:6d:56:17:fe:e9:be:
c8:59:5e:08:06:be:45:d1:e9:e4:c4:40:b6:73:bf:81:26:8c:
f5:0b:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:39:35 2025 by rpki-client