Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: 2/Hd6mVGFe7EiJgX4LmpIDWZMU1jsBbUvIi4P1at4o4=
Subject key identifier: AE:4E:71:7A:0F:E3:F2:F5:03:ED:68:D1:09:74:9E:C0:0C:4F:64:76
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 0196AFC4F9DEBB79E8523D32FF818A06AEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 1530
Signing time: Thu 08 May 2025 12:00:43 +0000
Manifest this update: Thu 08 May 2025 12:00:43 +0000
Manifest next update: Fri 09 May 2025 12:00:43 +0000
Files and hashes: 1: bXLXdbvFGFR0FszgHn84rVBOGio.roa (hash: nmNBpS+PbDPDefHKYKNVtxbPVQnu+QoIycRrjJFcsBw=)
2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: eojmYCNk5LfnK476JA04w5iUW5MxSLlW6WheCXuDtB8=)
3: hKQ8LLa9--B-K86xayaw0kpiYWg.roa (hash: d0JIaOsBs7E/BdBAQ915qmU5N9B7n1lC3k/0IYxFCFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c4:f9:de:bb:79:e8:52:3d:32:ff:81:8a:06:ae:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: May 8 12:00:43 2025 GMT
Not After : May 9 12:00:43 2025 GMT
Subject: CN=ae4e717a0fe3f2f503ed68d109749ec00c4f6476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:80:23:de:31:66:ff:64:34:aa:1a:17:f6:
65:73:f6:e0:9a:93:99:06:79:83:e7:67:4a:18:63:
a5:64:fe:76:45:95:d7:2d:dc:5a:15:5a:b7:24:4d:
88:7f:54:3f:45:1a:1e:c8:a4:f9:bc:f2:73:26:69:
ed:05:90:f4:5e:22:a1:95:53:91:90:6f:60:7a:c6:
af:b7:71:78:e0:0e:e9:26:36:cb:c4:2a:f0:9a:1f:
f3:fc:b6:4e:ec:32:38:a8:48:a4:58:e2:ba:25:6b:
7d:d5:be:3f:86:77:d8:37:1d:11:75:85:05:02:22:
14:e6:37:d3:be:c9:0c:c2:f2:b4:8e:49:5c:f9:1a:
36:9e:4f:3c:bd:12:89:b4:de:64:f8:a2:68:e5:41:
ad:fc:0f:de:f7:3d:32:a4:a7:d7:cf:48:ce:01:26:
5e:77:4d:28:36:d4:bb:de:72:d1:f2:72:1d:cf:54:
f4:1d:51:9c:fb:4b:80:68:ca:6c:aa:60:e7:49:9f:
62:46:b1:c9:8d:f4:5f:fb:78:8d:d7:cc:8b:46:e6:
2b:a5:0a:54:70:93:77:98:a7:d5:9c:a9:3a:61:fb:
f9:70:b3:c3:d0:f9:93:21:d1:06:c2:be:7e:e6:33:
bb:05:6c:c5:71:d0:de:22:9e:09:26:60:a4:c8:39:
a2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:71:7A:0F:E3:F2:F5:03:ED:68:D1:09:74:9E:C0:0C:4F:64:76
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:69:4e:af:31:c0:c2:d4:94:a2:3d:6a:a1:1c:20:ff:ed:bf:
23:6a:ec:e2:78:7f:fa:10:18:57:d9:c5:76:fc:a0:12:f8:7c:
6b:18:ed:b3:2a:ed:b9:e6:14:3b:6a:82:02:a6:ec:f3:fb:76:
76:c6:37:a3:c3:4d:23:3b:01:e2:71:6f:70:f0:d5:f7:0a:df:
2b:39:8d:32:53:8f:75:61:e1:7d:e2:fc:64:61:fd:b5:06:ed:
75:c2:39:2c:99:4e:76:cf:0f:b7:e7:24:f9:57:79:b3:3e:01:
68:73:10:9c:ec:13:8c:f0:68:cb:c5:4c:f6:2a:2d:c1:dd:31:
2c:dc:68:eb:2f:6f:70:77:d7:9e:74:8e:9b:7c:f0:c2:cf:11:
36:ba:fe:ce:04:db:da:f8:86:b7:aa:17:2a:d0:b3:90:55:80:
6a:87:51:ab:08:ec:bd:02:92:72:75:45:a9:48:62:2a:21:47:
07:05:51:a1:28:a4:02:14:ae:04:60:02:4c:68:fe:d9:57:fa:
60:12:1d:5d:71:3a:0e:90:7a:02:e6:54:d7:1b:d6:68:24:ab:
56:73:40:97:ce:29:21:29:2b:e6:40:7b:ab:5a:df:29:b2:02:
3c:1f:2d:ee:d3:d9:92:b5:fc:12:5b:37:54:ce:ba:fd:41:47:
8a:bb:ab:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:44:30 2025 by rpki-client