Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: iMKdrPjViXK3qzHhuegnNjqTziwZO1N6EkPqAcsrqy0=
Subject key identifier: C7:F8:16:EA:68:9B:01:41:2C:8C:96:B9:63:1E:3C:86:74:DF:51:3B
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 0196B85A4665D16D60B9AF9CD211BCDEBF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0C00
Signing time: Sat 10 May 2025 04:00:46 +0000
Manifest this update: Sat 10 May 2025 04:00:46 +0000
Manifest next update: Sun 11 May 2025 04:00:46 +0000
Files and hashes: 1: 4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa (hash: iaaPPpRPgVRp2VBYf0amI7H0JrYQ2W8NdUPmUpkX7Ug=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: B+vC3PmMtpSutvny8jc8TdYnvCgW89ornZlQzsnfxHs=)
3: jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa (hash: SEfA+iWkgEeN5RJiBiU8Z6qVRU+/NBl881HzOl2we+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:46:65:d1:6d:60:b9:af:9c:d2:11:bc:de:bf:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: May 10 04:00:46 2025 GMT
Not After : May 11 04:00:46 2025 GMT
Subject: CN=c7f816ea689b01412c8c96b9631e3c8674df513b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:e0:ae:d6:b0:4d:c0:5f:8e:91:d1:02:4c:
e6:4c:e8:d9:2b:c8:29:39:f0:6a:36:db:b6:b0:b7:
66:42:82:a5:58:82:d2:3d:12:e3:82:56:10:84:a4:
5c:3d:87:ad:a8:fa:52:8f:60:05:fa:64:e7:44:53:
1c:cc:4a:13:a5:c8:33:79:e1:c9:76:dc:ed:ee:79:
99:f0:b0:24:4e:99:a0:a5:3a:29:12:e9:70:5c:6d:
5b:f7:37:08:b1:48:08:11:13:f9:99:54:85:85:f1:
46:9c:e8:8e:c5:f8:53:fa:c6:c6:ed:c1:f6:bd:49:
74:19:c2:6a:19:ec:46:5e:91:22:a0:61:ee:36:98:
d1:77:d7:e8:60:5a:ba:16:58:13:2f:b1:11:44:92:
8d:d7:a1:00:87:ac:4b:fc:53:af:f9:83:e0:4b:ce:
01:ee:79:50:70:1f:82:cd:5c:fb:d0:14:ff:45:f2:
3f:49:44:de:fb:cb:d4:b5:a4:7e:70:d2:bf:e0:fe:
b2:52:30:eb:e7:b0:0b:59:82:8e:83:36:9b:30:19:
a8:5e:5f:19:0c:fa:71:c2:95:ce:c9:5b:f8:81:33:
76:06:a5:67:66:6f:39:2c:92:7e:7f:3b:34:b5:47:
8a:db:20:02:5f:7e:3a:f3:53:9a:d0:af:29:34:37:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F8:16:EA:68:9B:01:41:2C:8C:96:B9:63:1E:3C:86:74:DF:51:3B
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:44:8f:f6:12:99:59:09:68:a9:61:11:e8:d8:ab:72:cd:78:
78:fd:5e:06:77:70:14:54:99:44:db:aa:1d:fe:fd:34:a8:17:
6f:45:af:5a:ec:5e:04:3d:fa:41:73:2c:3d:95:a7:cd:7b:56:
8f:b1:31:2c:74:8f:c2:92:ba:ba:71:ce:10:50:0a:d0:0a:85:
64:6c:cb:20:c3:61:68:e9:8c:b5:ff:2b:10:3e:19:d6:c2:33:
68:6f:25:2c:e0:1d:9a:41:f8:b7:9b:74:dc:03:d4:88:4f:6c:
6e:ef:e9:9c:83:9d:42:40:ad:4e:1e:79:82:4f:d0:51:5c:79:
db:3a:ed:6f:49:88:a4:b6:cf:6e:f7:2f:02:dd:49:51:73:65:
a7:3f:8a:08:d7:cc:f7:25:be:b4:1a:d1:74:29:5f:61:a4:46:
e3:d9:3b:db:6c:e7:14:6a:a9:e4:be:25:b4:f8:1c:10:0c:ed:
3d:8e:52:12:55:4a:ba:77:dc:dd:47:43:b0:ff:30:cd:a8:f9:
06:d2:67:16:9d:ad:8f:c6:9c:7c:40:d2:d9:30:ca:b1:33:ba:
f0:64:59:97:32:3d:e3:6b:f2:6a:be:9d:67:b3:52:d3:dd:36:
d5:e2:62:e1:15:c7:db:e1:2e:9e:01:c6:df:a8:46:14:01:f8:
90:a9:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:56:38 2025 by rpki-client