Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: eH8XrBe1XiUvDSPNWefv0P5HlhjO9b8Bf7aDOFaq+9c=
Subject key identifier: 1B:3D:BF:1F:39:AB:D0:04:F3:F3:6D:43:AF:9D:50:2C:02:AD:59:C3
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 0196BF378C0D1BC2E8BEFD396E9F63447D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 12:00:10 +0000
Manifest this update: Sun 11 May 2025 12:00:10 +0000
Manifest next update: Mon 12 May 2025 12:00:10 +0000
Files and hashes: 1: 1-xjgsfI902jNFD0m8-DZHtSyyIE.roa (hash: CsZOcJgPTxy7xIAOVt8lWaYqRyYDTFNbLjFpLqFoAHY=)
2: 8znWg7qZ9bI9AKat_qhyP26JqfY.roa (hash: Y2YmIOv3jVMh1xIJmeIZI13RLm2nx7Gd9VO4KN+O0Z4=)
3: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: PWA5/85bT4nKxaajDwWtO7Ini9d/2MoxCI+zmGwSAu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:8c:0d:1b:c2:e8:be:fd:39:6e:9f:63:44:7d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: May 11 12:00:10 2025 GMT
Not After : May 12 12:00:10 2025 GMT
Subject: CN=1b3dbf1f39abd004f3f36d43af9d502c02ad59c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:45:fb:1a:4d:28:e0:a1:01:95:b5:2c:74:
84:d3:69:50:5c:bf:1e:5a:36:1a:28:7e:a6:88:ae:
fa:d6:36:be:1b:b8:72:f7:9c:96:66:22:62:a9:39:
6e:15:68:64:3b:43:fa:e8:17:0d:72:62:50:e3:fd:
11:21:46:ab:55:2c:7b:f0:e9:14:fc:29:0c:4e:22:
c7:b9:0f:02:cd:8b:be:39:9f:b2:07:ae:2d:5e:03:
7a:cb:04:30:b7:99:e5:e3:0d:09:d1:fd:74:ed:84:
a4:9f:30:f1:5e:0f:74:87:c4:82:a5:fb:b9:26:cc:
64:8e:11:99:81:8c:1f:07:ad:ed:d2:88:55:84:d5:
e7:3f:09:c2:bc:b9:92:2a:91:1c:d7:e5:4d:64:08:
d4:97:73:0b:6c:64:e0:29:d9:52:87:58:44:15:fc:
b4:ac:66:82:ad:22:d0:29:e3:7f:a4:c3:4b:18:55:
e7:35:7e:99:42:f7:02:c9:c2:2c:25:81:6b:ab:5f:
73:f0:da:79:7f:88:c6:07:95:90:21:a5:59:d0:de:
48:fd:ae:62:05:2d:d4:95:9f:db:8a:e5:38:d0:6f:
22:f2:47:54:63:b6:e0:12:1a:0e:7c:cd:61:b0:8f:
84:88:42:c2:5b:39:82:ba:fe:63:6b:e9:f0:94:ab:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3D:BF:1F:39:AB:D0:04:F3:F3:6D:43:AF:9D:50:2C:02:AD:59:C3
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c6:3d:d8:28:2f:9d:40:93:d2:e2:45:f7:43:a2:b6:9b:84:
d2:d2:9b:ad:83:03:83:ef:c9:6c:13:f5:28:5a:a0:9e:ed:a8:
c5:5e:a8:7b:5a:53:49:3a:e8:9f:26:85:1e:31:39:55:d0:4d:
7b:74:fd:0d:30:cf:fc:b9:c6:80:76:a4:78:ac:aa:19:b0:75:
26:14:d7:bf:cb:2c:1c:ee:60:b7:90:49:ab:db:de:40:dd:fc:
26:43:28:43:90:10:d3:1c:fd:35:c3:2f:34:94:ae:a0:03:09:
85:b8:d7:0d:81:08:7a:16:b7:69:46:b6:ad:72:c9:a4:73:a4:
9d:6b:bf:a3:e4:d4:8a:ec:e6:be:12:66:eb:0b:8a:73:8e:d2:
96:84:3a:64:cc:01:95:42:b8:11:e2:fb:7f:f2:db:ba:b9:82:
11:d0:db:10:6b:27:39:74:90:c3:82:16:4d:44:84:87:db:0c:
9a:97:40:57:5d:a3:7f:d4:b8:49:f9:20:0e:fb:dd:60:77:6b:
67:6f:c9:53:3d:40:8d:68:7c:02:d9:8f:32:1c:78:69:1f:43:
15:21:65:1c:78:10:15:e1:8a:f9:01:1d:ae:9a:70:f7:bf:b2:
b3:3b:72:bf:f7:3a:6e:d2:f2:76:28:b1:1a:09:79:11:67:2b:
e4:6d:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:28:36 2025 by rpki-client