Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: hXqwld15cNrhQHIlJnIhnwGxhtw9Ac2Sy0F1NzLvbpk=
Subject key identifier: 75:7A:7B:E6:25:C3:C9:98:1C:E4:5E:9A:2A:2D:9D:D4:4F:E4:D0:26
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 0196C19455872E52FA9C977A47F19A2AA8E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 059B
Signing time: Sun 11 May 2025 23:00:45 +0000
Manifest this update: Sun 11 May 2025 23:00:45 +0000
Manifest next update: Mon 12 May 2025 23:00:45 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: 8MuWr+g2q6/I0nMxWdxhxgr2Zz1IkdS8IJHvlcUMExY=)
2: VggHyCGAaBqT1YS8rDtl_KIKf0g.roa (hash: ViUcKTn2EWx6jkDRARIAQEFwd2YhU52ckTDp4ZosIG0=)
3: p_i4xl5EipcKtC3SPVXhIuYprDw.roa (hash: JFa6mX6HD50RoNNNUoDQdjnuPBe7vWX9ha3WyuSEprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:55:87:2e:52:fa:9c:97:7a:47:f1:9a:2a:a8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: May 11 23:00:45 2025 GMT
Not After : May 12 23:00:45 2025 GMT
Subject: CN=757a7be625c3c9981ce45e9a2a2d9dd44fe4d026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:26:4a:35:64:f8:0e:e6:01:80:03:67:3d:
ef:35:31:a5:4b:c2:47:6a:55:4c:d2:fe:93:78:8b:
5b:c4:2d:24:61:7e:ee:19:0b:ec:05:10:33:f5:bf:
fb:d8:2c:0a:3a:27:10:92:b1:fd:04:19:a6:d8:b6:
29:d7:35:b1:9b:9e:46:8f:28:c5:21:32:79:0b:50:
95:35:96:3d:b2:fe:5b:de:a6:9c:2f:5a:fa:df:b2:
a9:4f:b5:10:07:95:7a:30:a7:57:97:4e:6d:00:8d:
e6:96:26:3a:f6:11:00:df:40:4e:85:09:5f:ed:4d:
2f:a4:33:03:d7:4a:a0:26:56:65:62:8c:cc:be:51:
41:4d:aa:0e:16:87:af:bc:c9:a0:8e:b9:21:34:ee:
07:1e:86:6d:47:8f:17:23:80:d9:36:63:06:5f:86:
8e:a9:a6:41:2a:73:ed:1c:55:97:00:b9:79:2f:6d:
29:b1:3d:a5:e9:31:58:f6:97:18:5a:1d:95:f6:83:
e7:5b:f6:3f:af:50:24:27:2c:57:a9:cc:7d:23:0e:
0a:bc:6c:d0:b6:a6:7d:d4:a4:90:55:d5:fc:37:eb:
c5:fa:11:c9:a8:f6:c3:bf:4f:57:cf:2c:77:b7:2f:
e4:b8:f2:32:5f:ac:59:20:6d:69:93:30:fc:8d:86:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7A:7B:E6:25:C3:C9:98:1C:E4:5E:9A:2A:2D:9D:D4:4F:E4:D0:26
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9e:27:cc:d8:af:9c:1a:54:be:02:5b:e4:4c:1f:99:26:80:
00:eb:8d:43:86:35:30:32:d9:fc:9b:16:3b:6a:34:35:10:16:
89:b0:07:7c:c4:d1:4e:3b:a4:ab:9c:60:9c:27:b3:d1:ad:24:
dd:df:c8:19:02:20:a6:38:2d:58:80:e0:7e:c2:8f:a0:d7:8b:
cc:2e:47:43:66:d7:7f:34:cb:4a:ca:2a:6e:bb:f4:b5:c8:e8:
0b:5a:72:a1:e9:e0:fe:47:c5:9c:47:72:2e:75:7c:2e:7d:9e:
d4:fe:38:79:5b:bb:d9:52:69:3e:39:95:45:7a:64:cb:d7:43:
48:e3:88:44:bf:b8:3c:19:bd:41:61:c3:36:bb:65:64:a5:33:
42:76:0e:97:4d:44:72:4f:9d:fa:54:78:b3:cb:35:e7:5c:6e:
90:78:a9:98:ac:b8:63:d3:b7:f1:8f:47:52:0a:1d:de:24:71:
3c:b9:65:57:dc:a8:7a:12:81:11:06:6c:c8:40:36:33:5d:c3:
e1:79:91:a6:58:ad:c0:25:ea:8d:b3:e9:36:e3:52:99:8f:9b:
70:83:b0:bc:92:a9:70:fd:24:cb:bd:57:b3:a0:40:07:ac:8c:
ec:67:51:b5:bf:20:1d:49:34:4e:f3:03:01:f3:d1:74:37:10:
89:c5:9b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:28:19 2025 by rpki-client