Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
File: druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json)
Hash identifier: obhYqBK3UlGB/5PpVoJBfzYfirH/KgVTrIzJgEX4O0Y=
Subject key identifier: 40:AE:4B:35:99:B5:0F:D5:02:D2:1C:41:10:F8:96:D1:73:B8:02:B4
Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277
Certificate serial: 0196C19408E3063EAB2946FDBF9D5C877D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
Manifest number: 0F45
Signing time: Sun 11 May 2025 23:00:26 +0000
Manifest this update: Sun 11 May 2025 23:00:26 +0000
Manifest next update: Mon 12 May 2025 23:00:26 +0000
Files and hashes: 1: A0Dli097tMkIVnJa3m1bqPYzScQ.roa (hash: xNtn+JNQ7hliFuQK823llLTpPPrEWU/YIk1KW2YsDWg=)
2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: At7ltrUE7Lqi09kcmbKtEKf/0oqHtVdprkAn+qEcRSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:08:e3:06:3e:ab:29:46:fd:bf:9d:5c:87:7d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277
Validity
Not Before: May 11 23:00:26 2025 GMT
Not After : May 12 23:00:26 2025 GMT
Subject: CN=40ae4b3599b50fd502d21c4110f896d173b802b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:df:b6:01:f1:e5:06:dd:9a:da:35:77:0b:
96:fa:b4:d9:90:6d:09:02:6d:d6:55:be:e3:76:9d:
c7:41:cb:f8:88:66:a5:e6:69:92:65:ba:13:b1:e7:
b4:4e:03:4d:c7:5b:57:4c:24:71:23:74:c5:1b:6c:
58:3a:34:40:c0:86:ca:a6:d6:b9:8e:59:31:6f:08:
bf:bd:75:34:d4:60:5b:12:70:25:b6:43:49:74:6a:
42:6e:8b:d6:57:5b:58:38:29:88:19:94:d9:e8:c1:
9a:f7:3e:7f:a0:7f:88:6b:1e:1a:0c:4e:aa:87:4b:
65:ed:ca:de:03:0b:f4:df:d6:01:49:29:9a:5e:55:
d2:1f:01:c9:06:b7:c6:fb:71:0d:60:d7:b3:bd:ce:
49:4f:31:1b:b2:c7:99:8a:88:9c:92:f7:52:b2:38:
10:cf:39:3b:d6:22:c1:19:17:7e:02:96:81:32:6d:
a4:6f:9d:36:65:8e:b3:30:4e:4d:ed:ff:7d:b2:8b:
dc:f3:ff:55:63:c0:72:3a:41:73:8b:76:0d:12:74:
3a:e3:e3:64:be:ae:a5:b7:f5:51:13:41:d6:c6:62:
74:4a:49:5f:1b:60:cd:2b:46:6a:59:b6:27:2d:c2:
31:ca:07:2c:4c:ed:07:ea:f1:a0:02:48:6a:df:00:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AE:4B:35:99:B5:0F:D5:02:D2:1C:41:10:F8:96:D1:73:B8:02:B4
X509v3 Authority Key Identifier:
keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:aa:cc:f0:43:94:a5:af:c0:ec:4a:2f:02:64:66:9d:56:2b:
c1:5d:22:86:fd:ed:86:fa:0b:c0:b9:47:ef:5d:b4:e6:c4:6c:
ee:70:fd:48:97:93:3e:2d:48:0d:b2:d0:f8:97:73:8f:da:21:
f3:85:67:b3:9a:2b:96:ff:bd:01:13:00:7a:d7:10:59:82:06:
bf:fa:56:04:0f:7f:55:b0:e7:74:4f:ea:b0:59:73:c7:de:66:
ce:c3:87:f2:80:2a:59:84:0d:03:64:81:e5:3e:66:f5:28:83:
8f:01:4e:16:2b:82:56:c1:41:ee:52:3f:2e:d5:50:93:4d:d2:
4f:aa:55:79:ec:55:24:a9:25:22:3a:68:13:ea:d0:f1:aa:5c:
13:f6:be:a7:66:4e:56:ec:a6:e9:29:6d:a8:b2:b9:35:30:9e:
ac:fe:2a:63:8d:ce:eb:d8:79:ad:a4:74:40:f0:bd:d1:c2:f8:
83:45:04:12:8a:7a:a7:62:57:c7:c5:7e:ab:11:57:65:6b:a4:
43:d0:df:18:6d:cd:c2:3a:9c:37:65:ad:1b:92:17:a1:2d:0a:
65:75:9e:b2:9d:d4:24:4b:58:31:65:c9:1b:51:06:26:82:32:
a6:56:b3:42:ef:93:3c:ac:c9:05:0a:21:7d:7f:96:e5:52:99:
00:d1:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:59:29 2025 by rpki-client