Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
File: ds5jfUe3gATQzPrjceaBh2isP6U.mft (raw, json)
Hash identifier: kYCQ79/vAyQz4g9/EGhXteFoOd2h9RhJq0YddlaNL1Q=
Subject key identifier: 13:79:45:2A:E3:EF:13:F4:E8:1E:D8:D3:7D:BD:10:D7:84:BA:A8:49
Authority key identifier: 76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
Certificate issuer: /CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Certificate serial: 0196BE933FD67BAE6E365B6B1F39081E7BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
Manifest number: 1356
Signing time: Sun 11 May 2025 09:00:43 +0000
Manifest this update: Sun 11 May 2025 09:00:43 +0000
Manifest next update: Mon 12 May 2025 09:00:43 +0000
Files and hashes: 1: 2v9WLSFviNLhCEs3PI8ghWfG43g.roa (hash: s4HF4L3IMaVI3bReAfOPFKeWOp26BrTGFcFThVgszh4=)
2: ds5jfUe3gATQzPrjceaBh2isP6U.crl (hash: i2RZ9roAREDgBaRKcpBp3CCTElWCZZnwi2wsCc6s3PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:3f:d6:7b:ae:6e:36:5b:6b:1f:39:08:1e:7b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Validity
Not Before: May 11 09:00:43 2025 GMT
Not After : May 12 09:00:43 2025 GMT
Subject: CN=1379452ae3ef13f4e81ed8d37dbd10d784baa849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:a8:a4:57:d3:41:59:3a:c4:ec:db:ff:97:
2a:fb:6f:d8:c9:05:d9:8d:72:db:de:88:8a:36:5d:
2f:8d:ea:31:a1:35:22:c1:36:8c:05:1f:bd:40:59:
8b:ee:b9:a6:36:7e:05:84:5f:65:7c:30:d8:d3:f5:
86:c5:c3:62:23:7a:90:ce:c0:87:4f:37:13:84:ce:
de:54:9a:af:a8:ff:e3:de:12:b6:ce:7d:9c:c0:e0:
f3:8b:20:4a:2c:6f:22:69:b7:3c:81:01:a3:87:86:
12:08:e4:31:91:c6:52:a8:8f:e7:8a:60:60:98:f6:
c8:84:86:8b:2d:5a:a8:02:df:c6:8c:b5:71:19:b3:
05:1a:fb:56:84:13:7c:32:61:e7:ed:b9:b7:39:e5:
ba:1c:a7:c9:8d:36:f8:f7:d3:2d:13:ea:63:1e:de:
97:45:43:06:43:8b:20:0c:67:1e:b8:5c:27:12:53:
82:87:77:7e:56:49:27:6a:57:09:2e:10:53:f8:a0:
f5:5c:ae:9c:71:e5:64:cf:ae:ba:bf:33:7b:c2:f1:
a2:a2:86:a1:12:5e:1b:bc:f8:95:53:79:23:35:90:
4a:57:f4:e1:c5:01:c7:66:a0:f9:35:b6:0a:e0:e9:
28:c7:43:eb:eb:32:88:16:00:f7:42:f9:f2:b3:41:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:79:45:2A:E3:EF:13:F4:E8:1E:D8:D3:7D:BD:10:D7:84:BA:A8:49
X509v3 Authority Key Identifier:
keyid:76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3a:f9:ca:fd:04:a6:4c:52:f1:ef:00:c5:68:75:f8:8f:92:
d6:47:62:ae:ad:90:d6:38:74:53:90:46:8e:32:8a:d8:18:b8:
05:16:c4:4b:12:e8:23:e1:37:36:9e:a4:59:a7:ba:ee:68:73:
8b:71:63:55:2b:fd:ae:b3:0c:93:bd:fa:5e:34:c4:1f:70:a3:
59:f2:b6:75:40:3f:ca:38:ed:5e:ad:a4:c6:60:3b:cf:12:64:
0b:0c:33:1e:1a:39:be:dc:4c:73:58:64:36:10:f8:f6:70:19:
e8:31:ff:f6:65:d7:c4:80:2e:48:89:6b:5b:94:26:5d:1f:ec:
55:ca:72:0f:e6:c9:6a:84:ce:02:31:ba:12:eb:95:9f:69:9f:
84:5c:f0:67:43:33:7b:ae:f8:9e:79:48:64:ce:28:67:b3:a1:
2c:56:70:4e:ed:f5:ba:fc:98:94:b2:8c:f1:57:c6:ee:a9:a7:
08:a5:a8:ce:bb:64:9a:76:60:8a:c2:1e:c9:cb:b3:ca:d9:70:
77:e7:72:af:be:2f:a9:d6:e1:13:aa:23:09:ea:b5:fe:77:93:
c0:44:81:9f:6a:57:ec:f5:9e:e8:b8:1c:df:56:f3:05:75:b8:
8d:5f:a5:8f:d6:8b:b4:33:0d:f9:62:b5:de:40:ad:90:5f:ab:
04:49:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:03:23 2025 by rpki-client