Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: zQ6sb3JTWPvqrWhxe6D+tpMCB7o2l/OpQ8yOP2K3aNM=
Subject key identifier: FB:55:36:4E:75:6E:6E:36:7F:3D:91:B6:F9:34:AA:21:7D:E2:42:DF
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 0196C9F2214BE18586CEC8827EFB957B6159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 0D33
Signing time: Tue 13 May 2025 14:00:10 +0000
Manifest this update: Tue 13 May 2025 14:00:10 +0000
Manifest next update: Wed 14 May 2025 14:00:10 +0000
Files and hashes: 1: S9cGjm1_FE5PT4vUzDVGwHhUU8I.roa (hash: 69AJiJKNUyPoiJ1x84aJesWdv5amXDXDdulHmdz9t+I=)
2: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: nn/0jNPxCQLfxmmxH9Gnbm5kTrVjSstUb6p6MgFY5C0=)
3: joe5pZwVwibh0SdF2PsA-ibLXSs.roa (hash: kolEql5tzzaraNXgVLIhDCRD/4roZFIN0wmtLXS0EH4=)
4: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:21:4b:e1:85:86:ce:c8:82:7e:fb:95:7b:61:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: May 13 14:00:10 2025 GMT
Not After : May 14 14:00:10 2025 GMT
Subject: CN=fb55364e756e6e367f3d91b6f934aa217de242df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:04:86:3d:61:0f:f6:bb:88:b1:e0:89:56:
f6:09:1b:a7:21:36:20:7e:77:0a:f8:7a:3e:69:c6:
74:99:84:84:7e:78:38:4e:4c:9c:10:57:91:13:fc:
23:7f:4a:97:91:90:28:d4:e4:99:79:18:f0:74:14:
25:e6:28:e7:d6:de:6f:99:ca:b3:ae:80:3a:7b:60:
af:65:83:d6:2a:e4:c3:c9:dc:b5:9f:78:06:1c:06:
5f:96:93:5e:bc:39:68:9a:ad:31:f4:6e:a5:15:3a:
3e:66:f3:ac:e8:ea:35:cb:75:2a:ee:33:f6:38:81:
d7:e6:cd:62:74:bf:67:f6:37:6d:a9:8a:2d:85:a0:
ae:e7:27:2c:98:a7:9e:d0:fb:32:48:1b:83:8e:09:
2a:d1:8b:da:2c:39:10:25:b0:3f:dd:ec:c8:40:0a:
95:82:bf:40:61:38:26:43:97:a7:b2:24:3c:64:03:
30:4a:ac:3a:28:3c:a8:4a:f6:d8:61:44:26:76:c8:
36:1d:84:74:25:4a:9e:d8:e1:94:ff:a1:2c:c7:7f:
ba:fe:f7:45:4e:78:52:49:46:e8:e6:11:9c:04:e4:
80:45:75:86:83:7e:fa:10:dc:04:81:d9:9c:5e:7f:
48:f8:76:c3:2a:18:b6:f7:63:67:6b:78:1f:02:f1:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:55:36:4E:75:6E:6E:36:7F:3D:91:B6:F9:34:AA:21:7D:E2:42:DF
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cb:f4:9e:20:1d:5a:b3:8c:1b:f9:2d:39:32:33:01:db:d3:
5d:14:7e:47:cb:01:1e:1a:52:03:30:5d:ae:f9:ad:f0:ba:b9:
d1:b2:09:9e:e5:12:7f:f7:26:97:9b:e4:7d:7e:e8:34:7b:42:
5b:17:1f:52:68:cd:49:f5:b7:ad:eb:1a:14:f5:4d:a1:ef:8d:
22:d5:78:26:a7:09:b9:49:6a:cb:49:90:37:58:c7:c6:38:6d:
0f:90:05:6b:c8:52:63:03:d5:45:aa:c0:47:bd:15:8b:b7:2d:
5e:1d:6d:41:50:d0:d8:8f:65:45:9d:be:1c:69:74:a1:07:78:
5b:c3:f4:a3:13:b0:18:f3:44:c7:8e:dc:82:9c:2e:59:79:cf:
cd:ea:55:b9:ae:d9:c1:f8:f7:a5:3c:f2:d6:fa:49:35:c8:18:
38:62:2a:c8:fd:02:ff:4e:db:35:69:17:46:c2:f9:7a:d0:4d:
60:ef:91:3e:dc:d8:d7:a9:1e:63:57:9d:d4:88:71:e9:d1:f3:
58:d1:b0:aa:f1:87:17:c5:91:9f:f7:37:41:87:90:95:0d:ab:
11:89:7c:c8:e2:f1:b8:70:46:a5:c1:5e:50:24:b0:7a:67:cb:
d3:19:23:18:1c:a9:b0:5d:8e:5c:18:f4:9f:4a:e9:17:97:25:
50:79:89:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:09:48 2025 by rpki-client