Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: 9pQv3CQDe6HXgnD2Drzjn/f97Vi63hlXsfrM7a1To7c=
Subject key identifier: EE:EF:29:3E:CB:ED:14:8C:08:36:A6:48:9A:85:21:25:4B:71:2E:A2
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 0196C1CB630AF09D8AE27583F33A85C82B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 00:00:53 +0000
Manifest this update: Mon 12 May 2025 00:00:53 +0000
Manifest next update: Tue 13 May 2025 00:00:53 +0000
Files and hashes: 1: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: DGRGnHzz4okP5Lse/IpKSt0DpPP5qng3/TvWP/osAmE=)
2: rMYX2ngJRfk9a7fGX1cc8xAfsos.roa (hash: zZBPIZevys4Y238DbVgB+9WvN4FdGE3xhipQLPtn3sg=)
3: z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa (hash: 0P2kU02ZAocYSBgE7zWtiaNGeOEg/Gg5PfdYqLhXNf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:63:0a:f0:9d:8a:e2:75:83:f3:3a:85:c8:2b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: May 12 00:00:53 2025 GMT
Not After : May 13 00:00:53 2025 GMT
Subject: CN=eeef293ecbed148c0836a6489a8521254b712ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:00:5a:10:94:6b:ae:8e:3c:26:56:ec:2c:f8:
80:66:ee:85:f2:41:61:f1:75:3d:78:39:e3:a6:34:
97:9f:c0:1c:b9:43:f7:54:8f:6f:ba:84:2b:66:e2:
92:6b:b4:40:e2:79:08:e3:d2:3f:8e:76:17:39:5e:
21:8e:e5:f1:d5:05:43:d9:44:2b:b0:9e:72:42:2d:
7a:64:2f:22:15:40:3b:7a:aa:a8:bd:60:71:98:0f:
bf:a8:a1:a0:79:4d:bd:4f:b1:1d:98:55:3e:42:0a:
b4:2e:a4:4e:03:41:11:89:90:ed:03:fe:e9:30:92:
17:42:00:d0:5b:cb:c4:68:0b:f5:c5:1b:6f:31:fb:
fc:f6:16:dd:12:39:a5:6d:6d:95:9f:41:b7:3b:05:
1d:2e:3d:74:bb:a4:fa:40:82:5b:08:c8:f7:2d:5b:
2d:8f:c7:e7:ae:18:b8:4a:6e:c7:e9:d2:c0:ca:51:
9d:44:e3:f4:2d:ae:74:e9:1f:a3:d6:9c:62:ae:ec:
6e:88:0d:8b:2a:8f:fc:9f:95:fb:ad:60:a2:d1:5e:
0e:79:48:18:15:0b:29:8a:f2:29:08:3d:a2:e8:c1:
66:9a:d9:da:c3:c1:45:1b:5b:0a:78:f0:94:a9:12:
ad:89:31:00:bf:34:2b:3a:73:a2:91:6d:13:2a:12:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EF:29:3E:CB:ED:14:8C:08:36:A6:48:9A:85:21:25:4B:71:2E:A2
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1e:f9:ff:35:c6:54:75:fb:d6:28:a9:dd:89:0c:88:68:63:
f4:76:89:88:3d:36:ef:62:90:c5:d7:83:02:bd:0d:e2:27:82:
35:63:c6:b3:9a:8e:0c:18:c6:01:44:60:2d:1d:d9:2a:ee:f4:
3c:4a:cc:31:65:7b:5d:28:5a:e5:d1:f9:e4:ac:7c:b1:cb:b9:
57:17:d4:79:0f:42:ad:dc:b3:da:c7:4b:61:f4:a7:62:c4:36:
dd:8d:7b:10:11:63:d4:43:a5:e0:a5:01:58:c5:37:a1:05:b0:
83:94:52:13:61:45:c0:28:00:f6:11:c7:e8:67:c3:ab:16:f8:
c5:a8:aa:54:ff:98:0f:65:a9:bf:83:19:be:dd:cc:0d:c6:74:
a5:20:01:c9:e6:e4:98:52:9b:04:91:4f:de:fa:16:e8:4d:3f:
30:41:86:74:36:c4:82:93:f0:c7:99:bb:2f:a1:5a:61:c6:93:
85:f1:3e:9b:63:86:9c:14:a5:51:43:d8:34:c6:e2:16:e7:95:
fa:02:5b:01:0c:51:fc:7f:46:a6:0a:da:dd:fd:4d:3a:84:77:
9d:92:d9:49:dc:6a:f5:37:3d:92:29:6a:f5:c0:aa:46:c2:77:
55:cb:d4:a8:6b:af:5c:24:35:58:14:3f:f5:05:b9:66:35:40:
2c:06:44:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:14:53 2025 by rpki-client