Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier: xVNdvc6JUM5qXeZITLDXq7QgV59nutJFJ6/Z7PDXpnk=
Subject key identifier: 1C:9F:0B:09:9C:4F:36:62:31:97:6A:EF:A0:EF:AB:CD:76:6A:D0:44
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial: 01969D877420913150E0C7D3225E3313A44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number: 1003
Signing time: Sun 04 May 2025 23:00:22 +0000
Manifest this update: Sun 04 May 2025 23:00:22 +0000
Manifest next update: Mon 05 May 2025 23:00:22 +0000
Files and hashes: 1: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: VphgweyfnNkXsnSXqR1SinjkeGa9YTVWc2lc5ppNRi8=)
2: xzA5d-E1vgeb4mwlvmzNBazR01w.roa (hash: ajfP28ApDq4Q5y/sbVJlhsT7w2HrFwDNTtJP+3l1w9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:74:20:91:31:50:e0:c7:d3:22:5e:33:13:a4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Validity
Not Before: May 4 23:00:22 2025 GMT
Not After : May 5 23:00:22 2025 GMT
Subject: CN=1c9f0b099c4f366231976aefa0efabcd766ad044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:f6:ac:67:cf:79:aa:84:5a:9c:f6:d4:16:
70:c9:0e:fe:89:26:c6:83:f4:05:a4:02:1f:77:c7:
56:45:d4:c9:2b:90:7f:e9:60:f5:81:ef:4f:48:b7:
48:12:8d:7f:00:e5:1d:ec:4a:13:5b:d9:c7:2b:eb:
3a:5b:e9:d7:6d:19:97:e2:22:51:ba:e9:44:8d:e6:
bf:dd:23:36:bb:cd:d0:fa:fc:1e:fd:cc:52:e8:4c:
75:31:b0:b8:a1:5c:1d:d8:a9:26:76:12:1f:47:cd:
bb:29:bb:7c:88:4e:89:4f:d3:03:1f:c1:18:f9:77:
17:b1:9e:73:06:4c:a0:6e:57:5f:eb:f1:1d:69:c5:
1a:36:d3:7f:8e:21:c7:98:be:85:4e:94:21:7e:41:
e7:1c:b3:cc:d9:05:fb:4d:0a:31:0c:7f:4f:02:c7:
9d:b9:49:6a:1f:fa:52:cd:9a:07:7f:91:a7:31:5d:
32:a1:15:9b:59:6e:d0:89:7f:cc:3d:26:f7:01:54:
06:82:71:87:6c:a3:34:26:a1:04:95:fa:c8:8f:b4:
ea:82:fa:09:a0:a6:bf:f2:d0:15:55:15:70:b2:8e:
4c:dd:a7:28:8f:41:23:24:79:a9:6d:a1:47:cc:42:
2d:16:f5:76:a6:43:8c:27:b7:eb:78:48:88:b9:4f:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9F:0B:09:9C:4F:36:62:31:97:6A:EF:A0:EF:AB:CD:76:6A:D0:44
X509v3 Authority Key Identifier:
keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ae:3d:c3:f5:d5:bd:d4:11:a2:b6:f8:72:49:63:1d:26:a1:
d2:1c:47:8c:7e:50:16:6d:21:e3:4d:46:bb:40:46:a6:95:96:
fd:bb:27:d2:79:30:21:55:01:d9:ae:22:ff:8a:06:9f:d2:3d:
01:08:02:84:5d:ba:78:af:2f:b1:ae:9b:19:49:f0:f2:bb:ef:
7c:16:b8:5b:39:4d:aa:ba:cd:22:4c:3a:80:c1:f7:b6:9c:9e:
3d:f7:df:de:57:37:f8:f2:29:59:b0:11:65:39:06:02:9c:87:
ca:0d:23:98:5e:9e:a5:65:40:94:b1:0b:0d:81:ac:b4:bd:74:
f6:73:28:ea:35:72:01:5d:13:a5:45:d6:3b:5a:cd:de:7e:f8:
56:7d:99:b3:32:d4:a9:94:7a:6c:d7:cc:25:78:32:38:fd:c9:
50:fc:44:8f:e8:87:d6:8f:ea:c1:16:ca:d6:6d:3c:6d:01:4a:
84:f2:84:cc:30:c9:91:91:f2:3a:4c:89:09:32:43:9d:e5:8e:
db:8e:be:51:71:ee:2f:11:10:40:6d:bd:ba:29:4d:7f:8a:2a:
19:d8:6d:bc:62:11:1b:06:e1:d2:3e:2f:d1:73:db:ef:56:de:
74:22:77:e3:76:49:19:5d:9f:a7:26:de:94:3f:8c:c7:f6:3d:
b1:5b:dc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:10:18 2025 by rpki-client