Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: 4agTOrW1QUXu+5MIZ3bF8pDso6wHkXjW5l5dMxPGW+w=
Subject key identifier: 23:2C:81:DF:1B:E3:F6:E2:A2:DC:62:E8:92:4D:95:48:18:E9:2F:D7
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 0196BCDBB162E285E7F03E0138E898A29189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 06C9
Signing time: Sun 11 May 2025 01:00:36 +0000
Manifest this update: Sun 11 May 2025 01:00:36 +0000
Manifest next update: Mon 12 May 2025 01:00:36 +0000
Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: Hh3I55PHBCl7sDG034FC1yrvhWsbxsL7mgvvL0F/JvM=)
2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:b1:62:e2:85:e7:f0:3e:01:38:e8:98:a2:91:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: May 11 01:00:36 2025 GMT
Not After : May 12 01:00:36 2025 GMT
Subject: CN=232c81df1be3f6e2a2dc62e8924d954818e92fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:2a:aa:61:51:32:f3:e5:b1:3d:f8:cf:44:
5f:e7:70:f1:9f:bc:3a:9f:a2:da:04:37:21:68:d7:
29:09:53:ad:1a:14:b2:51:df:22:ba:d0:a2:c4:f7:
68:cc:6c:a7:ce:8d:1e:b1:ad:c9:ed:51:16:82:17:
98:37:e4:e0:f2:da:c0:6d:17:9a:93:b3:6f:8d:60:
0b:3c:71:97:49:d4:b5:91:a8:c2:c8:03:ff:b7:5c:
8d:8b:5f:e7:ad:dd:82:c9:6c:89:c7:e7:b6:9f:9e:
41:13:dc:90:0f:28:ec:cd:77:94:e8:b1:ac:8a:47:
ff:74:91:94:64:64:e0:54:45:0b:34:19:1c:ca:40:
c2:54:ab:11:be:13:d5:e6:a7:c3:a0:79:1d:38:15:
67:fb:8d:06:59:7a:84:d1:6b:d3:ce:15:78:70:81:
22:9e:51:a9:45:6f:00:4a:cb:17:59:c5:a9:04:8c:
04:1f:45:23:99:66:b2:2f:2c:00:00:20:1e:89:1c:
67:d0:b6:fc:08:bd:00:4b:0b:a2:c9:5d:ea:43:4c:
1d:22:61:36:e3:7b:c3:d3:76:ad:28:4c:52:f1:10:
be:ad:51:3f:91:79:af:11:77:7a:49:23:04:a8:4b:
3f:a2:97:33:45:f3:8f:06:32:5a:c8:36:98:a0:af:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2C:81:DF:1B:E3:F6:E2:A2:DC:62:E8:92:4D:95:48:18:E9:2F:D7
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6c:70:0e:65:18:33:e5:19:16:c0:82:56:df:97:73:09:c5:
11:74:64:92:bf:ca:6e:79:15:5b:42:21:b2:d0:6a:c3:bd:21:
9f:67:3e:ce:dd:38:48:a3:e0:a2:1d:d7:cd:d5:3f:12:0e:ce:
38:90:4c:84:15:b3:b4:61:b1:4c:2e:7a:f1:dd:18:d3:6c:8f:
98:1e:91:81:52:8d:31:e9:64:fd:b9:0e:8c:c8:67:bd:14:e9:
4f:33:18:0a:d4:96:1e:17:6a:89:06:07:66:8e:b6:8e:fe:3a:
05:aa:ca:d0:94:4d:f0:55:a9:03:2d:d8:5e:ab:c4:56:9e:78:
7d:2c:f7:90:67:c9:68:ed:dc:a4:45:f5:9f:7c:bc:72:16:1d:
c2:ca:df:ce:12:18:01:be:dc:4f:0e:13:86:6b:83:bd:bd:6f:
2a:55:3e:38:6b:b0:4a:0a:a5:78:3e:d9:c3:32:ef:a7:b7:ab:
87:99:4c:4c:e1:98:35:20:27:e3:11:f6:55:29:6a:58:97:99:
e2:a1:4e:ac:a7:8f:8e:ca:ad:c1:cd:17:79:b3:d0:3f:fc:d5:
b8:8a:41:d0:63:91:75:09:76:80:64:e5:f7:22:39:4b:9f:d2:
b6:b3:93:55:dc:ed:90:0a:5a:cc:cf:54:26:b0:26:88:38:35:
4a:c6:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:41:38 2025 by rpki-client