Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
File: d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json)
Hash identifier: tFSxQtUFum/Ugw1MevJMjwDqF9tUi/rrerWULoI8Xio=
Subject key identifier: BA:D2:1C:D5:0C:C5:9B:A2:D3:F3:3B:D1:55:B3:AD:23:F6:15:5E:17
Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
Certificate issuer: /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Certificate serial: 0196BD498D4293229A2FBB9424BEC3865728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 03:00:36 +0000
Manifest this update: Sun 11 May 2025 03:00:36 +0000
Manifest next update: Mon 12 May 2025 03:00:36 +0000
Files and hashes: 1: MPxrAGmlXi-R_-aAmj075zLDNVQ.roa (hash: u+cdaGdIb9sz6WUdHND28+hGiYkwyguJ2P/NJZ6f3PE=)
2: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: wx/VKtSXDr/7nu+8tsuYz/Sbsewieq2wGd/uR9ldyPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:8d:42:93:22:9a:2f:bb:94:24:be:c3:86:57:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Validity
Not Before: May 11 03:00:36 2025 GMT
Not After : May 12 03:00:36 2025 GMT
Subject: CN=bad21cd50cc59ba2d3f33bd155b3ad23f6155e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0a:df:19:40:ff:e5:0b:6a:70:6e:26:71:13:
74:41:11:2c:ac:4c:63:0b:49:9b:59:a7:94:d8:33:
50:70:a7:4d:fd:1e:bf:65:c8:6d:27:64:bb:d1:d8:
af:c6:81:67:6c:58:4d:d9:01:dc:07:35:22:2e:12:
8b:f1:f1:98:4a:ae:fa:dc:25:e5:be:e5:5d:5e:72:
ce:4a:24:7b:0a:62:c2:18:9a:f3:e9:54:03:dc:36:
60:58:a4:f8:73:66:87:d1:5e:39:43:99:f9:f1:7c:
b9:78:89:be:c2:75:81:c1:0a:0e:8f:76:31:91:12:
47:c6:4f:7a:2d:cb:29:31:6b:7c:d1:49:13:60:d7:
98:55:5c:86:85:cf:ac:da:bb:de:fa:21:d9:13:41:
0f:30:e3:de:29:c2:92:f4:98:13:25:8a:e5:cd:2b:
9b:34:e3:d4:a3:a2:dc:e3:4c:f3:0c:05:a9:4e:d9:
28:72:93:6e:1d:e5:c5:df:39:7a:be:f4:2e:74:88:
ec:ce:12:b9:df:38:e3:f7:4c:8b:e4:f6:2d:e0:10:
8d:6d:e5:fc:0c:40:39:70:18:83:b2:28:6e:da:a1:
a7:0e:35:b0:7f:08:08:af:4c:69:5a:99:7d:9a:1d:
8b:10:a4:bd:e0:9f:bd:06:77:6c:6a:63:2a:ec:73:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D2:1C:D5:0C:C5:9B:A2:D3:F3:3B:D1:55:B3:AD:23:F6:15:5E:17
X509v3 Authority Key Identifier:
keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a1:63:6e:d7:da:ff:5f:30:b5:99:82:b7:8b:8b:0c:e8:0d:
cb:96:c4:45:cf:9b:98:62:db:50:47:49:27:6a:44:08:29:49:
2a:15:ae:ec:96:a9:b6:54:d9:56:84:4e:06:6b:c0:9f:eb:87:
5e:a6:aa:43:32:8a:ae:d6:f5:9b:5c:b7:3c:3f:5f:03:e6:7d:
d9:9b:b0:25:db:3a:11:79:84:49:79:f5:15:4f:68:6b:55:c7:
10:4d:75:da:6d:a2:2d:60:ac:ff:c5:71:6e:08:46:e6:de:91:
23:16:c1:cc:c0:d0:50:f6:2d:9b:3b:88:1c:93:56:f6:52:d8:
8f:35:35:dd:ff:a5:3b:d5:8e:a2:30:86:44:6b:04:e3:7d:20:
4c:90:68:18:79:bd:d1:8c:89:45:de:aa:8c:4a:72:64:b6:7f:
a3:56:ca:30:46:f3:45:31:11:37:a7:52:17:19:12:d9:5e:86:
62:13:7a:26:a4:59:ec:cf:71:e4:ea:5d:7f:e7:5f:4d:aa:e3:
cd:16:1f:cd:0e:c6:26:0b:f2:4e:fc:c9:8c:8b:91:24:fa:99:
42:54:df:c6:62:cd:d7:19:c3:f5:de:9a:fe:d8:0e:70:2b:22:
ee:99:d5:27:d2:75:c8:f1:bc:7d:45:70:c9:c9:ce:74:ff:d1:
33:f7:9a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:25:56 2025 by rpki-client