Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier: da7ohcLvhd6LvqIrWTw17Sie2Fm4yfLJzhUqELhPTn8=
Subject key identifier: 42:9C:0C:36:56:9B:80:A3:21:44:04:D6:F8:2C:87:46:12:AE:B2:F4
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial: 0196B1B3476FD8605889C14DAF9CAEB1F01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number: 0C17
Signing time: Thu 08 May 2025 21:00:38 +0000
Manifest this update: Thu 08 May 2025 21:00:38 +0000
Manifest next update: Fri 09 May 2025 21:00:38 +0000
Files and hashes: 1: JS20272zzOd7lsvAhAy2fEVjeyI.roa (hash: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=)
2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: DOEtB9Pma92HDytRspXyfhxvV46fzfqnz3PwFln4LBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:b3:47:6f:d8:60:58:89:c1:4d:af:9c:ae:b1:f0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Validity
Not Before: May 8 21:00:38 2025 GMT
Not After : May 9 21:00:38 2025 GMT
Subject: CN=429c0c36569b80a3214404d6f82c874612aeb2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d4:e4:fd:cb:16:b6:9d:f0:cf:bd:3c:a3:0e:
d3:ab:d1:15:e0:e5:d5:c5:8a:79:28:bf:f4:6f:aa:
86:b1:26:ea:72:0a:a5:48:6d:d8:eb:d2:72:57:8f:
b9:6c:67:84:82:9d:76:3f:21:ed:a8:97:16:72:0b:
c5:ac:44:b8:a9:34:86:6d:85:4b:f2:ae:19:87:1e:
69:31:8b:36:ed:17:ca:b4:2a:ca:cc:7f:7a:d7:b3:
c2:41:bb:77:9e:45:ec:c2:f4:2f:ee:62:39:db:3b:
24:5e:f6:8c:b5:a1:1b:b1:cb:ae:7e:0c:df:93:49:
7b:a3:06:1f:af:a5:34:91:d0:3f:1f:96:0c:26:e2:
ca:37:33:c5:48:17:28:e2:31:17:02:94:ed:b3:7f:
80:eb:87:31:6d:1e:8b:14:7f:d8:18:24:40:fc:8b:
fc:c7:dc:ef:7c:a4:33:4d:1b:b8:61:7f:88:d9:35:
8e:67:69:7f:4a:b5:b9:d1:7a:47:e4:1c:39:96:c9:
02:98:60:65:78:8e:c5:e4:0c:c4:80:3c:f2:2e:34:
75:b0:ee:12:4f:7e:a3:7c:9d:9a:e4:67:f1:c4:5d:
a3:fd:38:00:a4:de:a5:05:17:3e:73:68:4b:41:58:
7d:ae:75:d6:2e:1a:e9:aa:5e:1e:1f:fa:61:a3:34:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9C:0C:36:56:9B:80:A3:21:44:04:D6:F8:2C:87:46:12:AE:B2:F4
X509v3 Authority Key Identifier:
keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:37:cf:43:66:31:42:b1:58:98:0f:43:59:24:f5:7a:b6:95:
45:8a:54:28:6d:08:a9:99:e9:2a:9e:4e:fe:26:55:41:c7:c2:
76:72:b1:d7:dc:e4:70:75:00:7c:02:20:39:f5:27:f7:be:8b:
c9:59:c6:37:ba:dc:a5:f9:58:d4:83:74:35:39:42:6e:8f:a1:
59:e3:b6:3f:ee:e4:1c:93:15:2c:75:07:85:9d:a4:78:72:de:
20:1d:e8:cf:b4:53:b6:e9:ff:a7:d5:d2:11:42:23:56:76:fa:
6d:94:24:36:46:ac:53:45:c5:a2:25:27:97:6f:27:3f:3a:3f:
b9:a6:04:a6:0a:b4:33:88:09:b3:78:2c:c2:44:01:33:85:22:
62:fe:ef:e3:fe:94:02:f3:5e:d4:3c:49:dd:7a:a3:46:77:21:
29:e1:7c:36:b8:6e:0e:81:f3:8c:6c:51:cb:1e:7a:d3:10:d3:
74:40:a8:89:87:24:d2:3a:5d:43:57:06:a7:df:9e:b7:7f:91:
db:9f:be:ee:0b:89:98:dc:b9:d2:8c:17:c3:ef:a6:4d:8f:e7:
42:5b:ec:ea:49:be:88:b9:4f:08:f6:09:73:70:b0:a2:26:e3:
fd:de:72:44:56:ac:5d:61:b2:d2:ee:35:6a:1a:d1:dc:9f:a8:
fb:d1:0e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:44:07 2025 by rpki-client