Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
File: djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json)
Hash identifier: Pg5rC+Y2MxBaRVffKE2HwxwshFjS0/4APTu6EzjZgpY=
Subject key identifier: 2D:7E:77:E1:1A:E0:47:72:47:7F:F0:9F:9C:FF:20:61:D2:2D:93:B2
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial: 01969F3F0066837EB3E846E8BD7130AB8717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 07:00:28 +0000
Manifest this update: Mon 05 May 2025 07:00:28 +0000
Manifest next update: Tue 06 May 2025 07:00:28 +0000
Files and hashes: 1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: 9F540rMO+o2lzogx+WX8NjAJd6dYJZyQNj9xMzsUwac=)
2: wBaE5svUrTDa4cJiCAHlEwrForw.roa (hash: sNv0g7ZzW3+C7EQOHQU5ckniP/nqJPJ/xsRMEfe9338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:00:66:83:7e:b3:e8:46:e8:bd:71:30:ab:87:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Validity
Not Before: May 5 07:00:28 2025 GMT
Not After : May 6 07:00:28 2025 GMT
Subject: CN=2d7e77e11ae04772477ff09f9cff2061d22d93b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:77:1c:7b:45:0b:4c:35:9c:e4:84:26:aa:
a5:83:d4:f1:cd:1a:6d:0f:5b:05:a5:5f:36:8c:c9:
b3:14:ba:6d:5e:ea:37:c5:a8:2b:04:69:17:a6:5e:
78:ef:c7:b9:f3:c3:54:68:a6:86:cf:d2:67:b0:e2:
51:4c:09:2d:6d:82:3c:02:7e:30:fa:f8:0d:68:eb:
e9:3d:55:f6:c3:08:f6:40:ec:d7:53:b2:c4:03:a7:
10:9c:d7:ab:c2:37:51:93:7e:60:14:d4:d8:06:b0:
b6:b1:5e:ea:5b:b8:10:55:df:10:bc:20:cf:3c:62:
c7:70:3c:4d:0c:05:ab:b0:fd:15:a0:ba:ba:e1:c3:
97:50:e4:0b:99:7f:db:50:51:e8:26:11:d4:e1:24:
32:6e:e6:54:2a:44:55:f6:5e:f0:37:ff:bd:96:8b:
1b:90:20:2f:6f:ce:b4:62:6b:fc:16:9a:0d:1e:45:
c3:4d:48:42:ae:65:71:55:fa:9c:48:bb:a5:40:35:
ed:18:2b:df:2a:b9:e3:39:2a:e7:fa:c1:6b:4f:a2:
92:0d:59:72:81:94:ed:fa:5d:9f:09:8b:ab:d3:75:
88:75:83:4e:03:1c:e7:45:e5:69:70:87:7a:7e:20:
84:1e:98:74:88:18:a2:65:39:42:a1:3a:3e:3c:48:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7E:77:E1:1A:E0:47:72:47:7F:F0:9F:9C:FF:20:61:D2:2D:93:B2
X509v3 Authority Key Identifier:
keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1b:57:a5:9c:59:d1:db:4a:49:d9:d0:49:85:40:df:6b:56:
86:05:ff:5d:6d:4e:52:9c:72:dc:4b:fb:4f:79:d6:d0:5a:df:
12:02:af:ff:05:47:37:88:4e:64:83:77:ff:f7:69:0b:5f:b3:
b2:89:95:7e:49:a3:d3:92:7b:4f:cb:7e:9f:47:95:ed:ad:12:
4b:a1:1a:f3:68:b0:55:1c:19:16:78:62:c8:f0:89:f1:04:fb:
c5:26:de:0e:e7:c3:3f:1f:d0:c2:e5:10:30:91:0a:5b:45:c2:
2e:1a:b1:b4:76:d8:cd:9a:74:ff:eb:3c:68:dd:99:69:e1:93:
c3:a5:7b:f1:58:a9:6c:0b:af:8e:60:87:28:f5:28:c8:b8:6d:
c3:39:83:65:fd:80:c0:72:bd:68:55:2f:b7:d0:26:c4:8c:aa:
19:df:e1:e8:35:8a:aa:fd:e8:3f:92:14:80:ec:ba:72:05:d8:
bf:cb:6a:5b:47:c2:05:1b:5b:57:6c:af:4d:e5:1f:f9:99:b1:
bb:94:ba:7f:32:de:e3:7e:40:48:b4:b5:ac:5d:40:45:0b:2c:
20:12:a6:49:85:c5:40:7c:ad:a1:e3:de:34:43:bd:2a:e4:0e:
bd:3c:ac:ec:ac:f8:39:f5:4a:38:52:62:70:1e:ff:35:44:d8:
1a:2a:07:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:08:58 2025 by rpki-client